Plus de connection internet - trojan

Re

Super ;-)))

Supprimons tous ces programmes utilisés.

1) Télécharge DelFix de Xplode
Ou si problème sur ce site : http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe

Ou encore : https://www.commentcamarche.net/download/s/delfix

* Lance le.
* A l'invite, [Suppression]
* Un rapport va s'ouvrir à la fin, colle le dans la réponse

Ensuite pour le désinstaller ; tu relances et tu passes à l'option [Désinstallation]

2)C - Ccleaner :

https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

.enregistres le sur le bureau
.double-cliques sur le fichier pour lancer l'installation
.sur la fenêtre de l'installation langage bien choisir français et OK
.cliques sur <gras>suivant
.lis la licence et j'accepte
.cliques sur suivant
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
.cliques sur installer
.cliques sur fermer
.double-cliques sur l'icône de Ccleaner pour l'ouvrir
.une fois ouvert tu cliques sur option et puis avancé
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures
.cliques sur nettoyeur
.cliques sur windows et dans la colonne avancé
. coches la première case vieilles données du perfetch ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
.cliques sur analyse une fois l'analyse terminé
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vérifies en appuyant de nouveau sur analyse pour être sur qu'il n'y est plus rien
.clique maintenant sur registre et puis sur rechercher les erreurs
.laisse tout coché et clique sur réparer les erreurs sélectionnées
.il te demande de sauvegarder OUI
.tu lui donnes un nom pour pouvoir la retrouver et enregistre
.clique sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
.il supprime et une fois fermé tu vérifies en relançant rechercher les erreurs
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
.tu peux fermer Ccleaner.

Tuto : https://jesses.pagesperso-orange.fr/Docs/Logiciels/CCleaner.htm

3)Purge la restauration sur Vista.
Comment faire :

https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista

Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections

@+
---------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.

Mon ordinateur se reconnecte à internet!!
Le fautif était le contrôle parental qui -après diverses manips'- a pu être supprimé.
C'est la joie ; ) Merci à ceux qui m'ont aidé!

Bonjour

Télécharge ceci Pre_Scan.exe
de Gen Hackman

Avertissement: Il y aura une extinction courte du bureau --> pas de panique.

une fois telechargé lance-le , laisse faire le scan puis colle le contenu de "Pre_scan.txt" qui apparaitra à son terme , sur le bureau.

si l'outil détecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

si l'outil semble ne pas avoir fonctionné clique plusieurs fois très rapidement dessus ou renomme-le winlogon ou change son extension en .com ou .scr

@+

https://pjjoint.malekal.com/files.php?id=1fdb57355a15713

...

Re

Pour me transmettre ce rapport ZHPDiag clique sur ce lien :

http://www.cijoint.fr/index.php

http://pjjoint.malekal.com/

Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

@+

O61 - LFC:Last File Created 25/05/2011 - 20:18:39 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt13.sqm [296]
O61 - LFC:Last File Created 25/05/2011 - 20:27:54 RSHA- C:\Users\Multimédis\ntuser.pol [664]
O61 - LFC:Last File Created 25/05/2011 - 20:33:55 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk [0]
O61 - LFC:Last File Created 25/05/2011 - 20:41:10 --HA- C:\Users\Default\ntuser.dat.LOG1 [262144]
O61 - LFC:Last File Created 25/05/2011 - 20:41:10 -SHA- C:\Users\Default\NTUSER.DAT [262144]
O61 - LFC:Last File Created 26/05/2011 - 20:18:28 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt01.sqm [284]
O61 - LFC:Last File Created 26/05/2011 - 20:22:57 ---A- C:\Users\Multimédis\AppData\Local\d3d9caps.dat [1356]
O61 - LFC:Last File Created 26/05/2011 - 21:27:50 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt14.sqm [284]
O61 - LFC:Last File Created 27/05/2011 - 16:05:18 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt15.sqm [296]
O61 - LFC:Last File Created 27/05/2011 - 16:41:35 ---A- C:\Users\Multimédis\AppData\Roaming\Adobe\Acrobat\8.0\JavaScripts\glob.js [0]
O61 - LFC:Last File Created 27/05/2011 - 16:41:35 ---A- C:\Users\Multimédis\AppData\Roaming\Adobe\Acrobat\8.0\JavaScripts\glob.settings.js [10]
O61 - LFC:Last File Created 27/05/2011 - 17:07:54 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt16.sqm [296]
O61 - LFC:Last File Created 27/05/2011 - 18:54:44 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt17.sqm [296]
O61 - LFC:Last File Created 27/05/2011 - 19:15:50 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt18.sqm [296]
O61 - LFC:Last File Created 27/05/2011 - 19:18:45 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\log\maxback_.log1.txt [564486]
O61 - LFC:Last File Created 27/05/2011 - 19:27:23 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\Extension_Filter__0.txt [752]
O61 - LFC:Last File Created 27/05/2011 - 19:27:24 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\MaxBackConfig.xml [1804]
O61 - LFC:Last File Created 27/05/2011 - 19:27:24 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\schedConfig.txt [38]
O61 - LFC:Last File Created 28/05/2011 - 16:53:59 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt19.sqm [296]
O61 - LFC:Last File Created 28/05/2011 - 17:58:22 ---A- C:\Users\Multimédis\AppData\Local\Ahead\Nero Home\idx\_dx.cfs [54629]
O61 - LFC:Last File Created 28/05/2011 - 17:58:22 ---A- C:\Users\Multimédis\AppData\Local\Ahead\Nero Home\idx\deletable [4]
O61 - LFC:Last File Created 28/05/2011 - 17:58:22 ---A- C:\Users\Multimédis\AppData\Local\Ahead\Nero Home\idx\segments [44]
O61 - LFC:Last File Created 28/05/2011 - 17:58:22 ---A- C:\Users\Multimédis\AppData\Local\Ahead\Nero Home\is2.db [188416]
O61 - LFC:Last File Created 28/05/2011 - 18:00:01 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\lastBackupStatus__0 [548]
O61 - LFC:Last File Created 28/05/2011 - 18:00:01 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\log\maxback_.log [285770]
O61 - LFC:Last File Created 28/05/2011 - 18:14:45 ---A- C:\Users\Multimédis\AppData\Local\Google\Quick Search Box\cache.backup [3243008]
O61 - LFC:Last File Created 28/05/2011 - 18:15:15 ---A- C:\Users\Multimédis\AppData\Roaming\Apple Computer\Logs\asl.191501_28May11.log [762]
O61 - LFC:Last File Created 28/05/2011 - 19:45:09 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt02.sqm [296]
O61 - LFC:Last File Created 28/05/2011 - 19:47:30 ---A- C:\Users\Multimédis\AppData\Roaming\Apple Computer\Logs\asl.204718_28May11.log [762]
O61 - LFC:Last File Created 28/05/2011 - 20:54:36 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt03.sqm [200]
O61 - LFC:Last File Created 28/05/2011 - 20:58:40 ---A- C:\Users\Multimédis\AppData\Roaming\Apple Computer\Logs\asl.215829_28May11.log [762]
O61 - LFC:Last File Created 28/05/2011 - 21:30:01 ---A- C:\Users\All Users\NVIDIA\Resource.old [1043573]
O61 - LFC:Last File Created 28/05/2011 - 21:31:07 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt04.sqm [296]
O61 - LFC:Last File Created 28/05/2011 - 21:31:41 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\MetaConfig.xml [163]
O61 - LFC:Last File Created 28/05/2011 - 21:31:50 ---A- C:\Users\Multimédis\AppData\Roaming\Apple Computer\Logs\asl.223141_28May11.log [762]
O61 - LFC:Last File Created 28/05/2011 - 22:25:11 --HA- C:\Users\Multimédis\AppData\Local\IconCache.db [3633363]
O61 - LFC:Last File Created 28/05/2011 - 22:25:19 ---A- C:\Users\All Users\NVIDIA\Updatus\updtclient.log.bak [4282]
O61 - LFC:Last File Created 28/05/2011 - 22:26:25 ---A- C:\Users\Multimédis\AppData\Local\Temp\GoogleQuickSearchBox.log [0]
O61 - LFC:Last File Created 28/05/2011 - 22:26:28 ---A- C:\Users\Multimédis\AppData\Local\Temp\Crb6805.tmp.mht [15258]
O61 - LFC:Last File Created 28/05/2011 - 22:26:31 ---A- C:\Users\All Users\Seagate\SeagateManager\ULC\nextBackup.txt [42]
O61 - LFC:Last File Created 28/05/2011 - 22:26:33 ---A- C:\Users\All Users\McAfee Security Scan\ftstate.ini [853]
O61 - LFC:Last File Created 28/05/2011 - 22:26:33 ---A- C:\Users\All Users\NVIDIA\NvApps.xml [199739]
O61 - LFC:Last File Created 28/05/2011 - 22:26:34 ---A- C:\Users\Multimédis\AppData\Local\Temp\div7D2A.tmp\div8085.tmp [0]
O61 - LFC:Last File Created 28/05/2011 - 22:26:34 ---A- C:\Users\Multimédis\AppData\Roaming\Adobe\Acrobat\8.0\Synchronizer\adobesynchronizersu80 [0]
O61 - LFC:Last File Created 28/05/2011 - 22:26:35 ---A- C:\Users\All Users\lxebscan.log [46815]
O61 - LFC:Last File Created 28/05/2011 - 22:26:37 ---A- C:\Users\Multimédis\AppData\Local\Temp\Multimédis.bmp [31832]
O61 - LFC:Last File Created 28/05/2011 - 22:26:40 ---A- C:\Users\All Users\NVIDIA\Resource.dat [1043573]
O61 - LFC:Last File Created 28/05/2011 - 22:26:41 ---A- C:\Users\Multimédis\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt00.sqm [296]
O61 - LFC:Last File Created 28/05/2011 - 22:26:45 ---A- C:\Users\All Users\Tablet\aiptbl.ini [7353]
O61 - LFC:Last File Created 28/05/2011 - 22:26:55 ---A- C:\Users\Multimédis\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog [0]
O61 - LFC:Last File Created 28/05/2011 - 22:27:05 ---A- C:\Users\Multimédis\AppData\Roaming\OpenOffice.org\3\.lock [156]
O61 - LFC:Last File Created 28/05/2011 - 22:27:05 ---A- C:\Users\Multimédis\AppData\Roaming\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [67429]
O61 - LFC:Last File Created 28/05/2011 - 22:28:37 ---A- C:\Users\Multimédis\AppData\Local\Temp\wmplog00.sqm [1406]
O61 - LFC:Last File Created 28/05/2011 - 22:28:46 ---A- C:\Users\Multimédis\AppData\Local\Google\Quick Search Box\cache.db [3251200]
O61 - LFC:Last File Created 28/05/2011 - 22:29:10 ---A- C:\Users\Multimédis\AppData\Roaming\Apple Computer\Logs\asl.232901_28May11.log [762]
O61 - LFC:Last File Created 28/05/2011 - 22:29:43 ---A- C:\Users\All Users\NVIDIA\Updatus\journalBS.jour.dat [0]
O61 - LFC:Last File Created 28/05/2011 - 22:29:43 ---A- C:\Users\All Users\NVIDIA\Updatus\updtConfig.xml [2730]
O61 - LFC:Last File Created 28/05/2011 - 22:31:24 ---A- C:\Users\Multimédis\AppData\Local\Temp\jusched.log [401]
O61 - LFC:Last File Created 28/05/2011 - 22:33:51 ---A- C:\Users\All Users\NVIDIA\Updatus\updtclient.log [249]
O61 - LFC:Last File Created 28/05/2011 - 22:36:02 ---A- C:\Users\Multimédis\AppData\Local\Google\Quick Search Box\app_launcher_apps.data [209920]
O61 - LFC:Last File Created 28/05/2011 - 22:36:02 ---A- C:\Users\Multimédis\AppData\Local\Google\Quick Search Box\app_launcher_links.data [329728]
O61 - LFC:Last File Created 28/05/2011 - 22:37:02 ---A- C:\Users\Multimédis\AppData\Local\Ahead\Nero Home\crawlercfg.dat [3075]

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: OTL - (.OldTimer.)
O63 - Logiciel: ToolsCleaner - (.A.Rothstein & dj QUIOU.)

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - (.not file.) - 72948156 (72948156) .(...) - LEGACY_72948156
O64 - Services: CurCS - 13/02/2009 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
O64 - Services: CurCS - 10/12/2009 - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
O64 - Services: CurCS - 30/03/2009 - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP
O64 - Services: CurCS - C:\Users\MULTIM~1\AppData\Local\Temp\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME
O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL
O64 - Services: CurCS - (.not file.) - EraserUtilDrv10910 (EraserUtilDrv10910) .(...) - LEGACY_ERASERUTILDRV10910
O64 - Services: CurCS - (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(...) - LEGACY_ERASERUTILREBOOTDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT
O64 - Services: CurCS - (.not file.) - fb2bd838 (fb2bd838) .(...) - LEGACY_FB2BD838
O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC
O64 - Services: CurCS - (.not file.) - IDSVix86 (IDSVix86) .(...) - LEGACY_IDSVIX86
O64 - Services: CurCS - (.not file.) - klmd25 (klmd25) .(...) - LEGACY_KLMD25
O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR
O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL
O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113
O64 - Services: CurCS - (.not file.) - SCDEmu (SCDEmu) .(...) - LEGACY_SCDEMU
O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
O64 - Services: CurCS - (.not file.) - Symantec Extended File Attributes (SymEFA) .(...) - LEGACY_SYMEFA
O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMFW) .(...) - LEGACY_SYMFW
O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMNDISV) .(...) - LEGACY_SYMNDISV
O64 - Services: CurCS - (.not file.) - Symantec Network Dispatch Driver (SYMTDI) .(...) - LEGACY_SYMTDI

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox 4.0 Beta 9>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl

---\\ Internet Feature Controls (O81)
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe

---\\ Crack & Keygen Files (O82)
C:\Users\Multimédis\Desktop\sauvegarde session hp\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EP58KPXT\crackle.com\crackleSettings.sol
C:\Users\Multimédis\Desktop\sauvegarde session hp\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com\settings.sol
C:\Users\Multimédis\Desktop\sauvegarde session hp\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EP58KPXT\crackle.com\crackleSettings.sol
C:\Users\Multimédis\Desktop\sauvegarde session hp\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#crackle.com\settings.sol

---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l'autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Réplication DFS.) -- C:\Windows\system32\dfsr.exe
O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Réplication DFS.) -- C:\Windows\system32\dfsr.exe
O87 - FAEL: "TCP Query User{04B24B9F-96FD-4BCA-BA1F-13934EBB5D44}C:\program files\ares\ares.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\ares\ares.exe (.not file.)
O87 - FAEL: "UDP Query User{C8A8E187-9DE3-4CDE-BB65-A23A832D282B}C:\program files\ares\ares.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\ares\ares.exe (.not file.)
O87 - FAEL: "{21785803-2594-41E2-B3A2-749779FB443C}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Omemo\Omemo.exe (.not file.)
O87 - FAEL: "{351CE595-0F5D-46A8-B163-1EDC63830B09}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Omemo\Omemo.exe (.not file.)
O87 - FAEL: "TCP Query User{044EABE2-C16F-457C-B692-C03102CE91DC}C:\program files\electronic arts\eadm\core.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\electronic arts\eadm\core.exe (.not file.)
O87 - FAEL: "UDP Query User{6CF168BA-0395-4CA4-832A-AD44BB493116}C:\program files\electronic arts\eadm\core.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\electronic arts\eadm\core.exe (.not file.)
O87 - FAEL: "{BD8E3FCA-1F75-462E-B235-4D5E65E6CB90}" | In - Public - P6 - TRUE | .(.Ubisoft - Lost.) -- C:\Program Files\Ubisoft\Lost Via Domus\Yeti_Final_Win32.exe
O87 - FAEL: "{651A0070-70B4-4BA0-8B66-76DDF9AF0D40}" | In - Public - P17 - TRUE | .(.Ubisoft - Lost.) -- C:\Program Files\Ubisoft\Lost Via Domus\Yeti_Final_Win32.exe
O87 - FAEL: "{9D28BA40-91B2-427C-A55B-42FCDD809817}" | In - Public - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Lost Via Domus\gu.exe
O87 - FAEL: "{CD6F5BF1-BC8E-4F7C-9D67-710C328C2996}" | In - Public - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files\Ubisoft\Lost Via Domus\gu.exe
O87 - FAEL: "{72BCFBCB-0CEE-4061-BF9D-0A64E4203D58}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\Ubisoft\Lost Via Domus\detection\Launcher.exe
O87 - FAEL: "{592ABB35-4803-4C39-9DCD-E37FF5215862}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\Ubisoft\Lost Via Domus\detection\Launcher.exe
O87 - FAEL: "TCP Query User{23F5296E-A4BB-44E5-9BF9-8703EADE9D91}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe
O87 - FAEL: "UDP Query User{A253663A-4B5F-496D-9897-23B65E8A4402}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe
O87 - FAEL: "TCP Query User{59F12892-A431-40F3-9337-44052BA8CDA9}C:\program files\real\realplayer\realplay.exe" | In - Public - P6 - TRUE | .(.RealNetworks, Inc. - RealPlayer.) -- C:\program files\real\realplayer\realplay.exe
O87 - FAEL: "UDP Query User{639A056D-118C-41CC-AB29-9FF6491CA952}C:\program files\real\realplayer\realplay.exe" | In - Public - P17 - TRUE | .(.RealNetworks, Inc. - RealPlayer.) -- C:\program files\real\realplayer\realplay.exe
O87 - FAEL: "{8496000A-58F4-4061-97D7-209EB5F37CB9}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{59F66173-88EB-47C0-94E1-4D0A6C643B74}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxebcoms.exe
O87 - FAEL: "{8F5908B3-CF0F-448A-80CE-4CF0C4F39259}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEBcoms.exe
O87 - FAEL: "{65A9B468-FE3B-41C9-B7BE-C404939CE1FB}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\LXEBcoms.exe
O87 - FAEL: "{AFBBE77E-2FFB-410E-8A3D-32C384A0B5C9}" | In - Public - P6 - TRUE | .(.ABBYY (BIT Software) - FineScanManager.) -- C:\Program Files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe
O87 - FAEL: "{1DEEE846-78E7-472A-B9AB-6667DB69E55C}" | In - Public - P17 - TRUE | .(.ABBYY (BIT Software) - FineScanManager.) -- C:\Program Files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe
O87 - FAEL: "{57C25806-0963-48F5-913C-C1D6B5ACD387}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{2B33E298-F5CE-477C-B2B3-3AB8C2142AB2}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O87 - FAEL: "{5200D831-21CD-4202-B107-56F3F0D810FF}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe
O87 - FAEL: "{E3658B3B-D71B-490C-AEB2-B35663AB579F}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O87 - FAEL: "{9094C733-41C3-4C34-9553-32AE2A094365}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O87 - FAEL: "{EA11D25B-419E-4412-B435-62F4E71764DC}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O87 - FAEL: "TCP Query User{19EF155B-B3FD-4C74-B7EB-F0CA17CBC4BE}C:\program files\google\google earth\plugin\geplugin.exe" | In - Public - P6 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\plugin\geplugin.exe
O87 - FAEL: "UDP Query User{89041374-83AE-4ECB-BAAE-7F559F333A09}C:\program files\google\google earth\plugin\geplugin.exe" | In - Public - P17 - TRUE | .(.Google - Google Earth.) -- C:\program files\google\google earth\plugin\geplugin.exe

---\\ Scan Additionnel (O88)
Database Version : 8171 - (27/05/2011)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

[HKLM\Software\Classes\AppID\SoftwareUpdate.exe] =>PUP.Eorezo
[HKLM\Software\InstallPedia] =>Adware.InstallPedia

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 13/07/2009 108289 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 18/08/2009 185089 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 16/10/2010 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 07/10/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 25/04/2009 266240 | (CSHelper) . (...) - C:\Windows\system32\CSHelper.exe
SR - | Auto 25/09/2009 189736 | (FreeAgentGoNext Service) . (.Seagate Technology LLC.) - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
SS - | Auto 29/01/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 29/01/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Demand 21/04/2009 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Demand 13/12/2010 820008 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - | Auto 14/04/2010 193192 | (lxebCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\system32\spool\DRIVERS\W32X86\3\lxebserv.exe
SR - | Auto 14/04/2010 598696 | (lxeb_device) . (...) - C:\Windows\system32\lxebcoms.exe
SS - | Demand 15/01/2010 227232 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
SS - | Demand 28/11/2007 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SR - | Demand 27/06/2007 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
SR - | Auto 24/08/2008 196608 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 08/04/2011 2218600 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
SS - | Auto 05/12/2006 624504 | (OPTENET_FILTER) . (.Orange.) - C:\Program Files\Controle Parental\bin\optproxy.exe
SR - | Auto 07/04/2011 378472 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SR - | Auto 29/10/2008 372384 | (WTService) . (...) - C:\Windows\system32\atwtusb.exe
SR - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Multimédis at 28/05/2011 23:39:45

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDE.SYS PCIIDEX.SYS atapi.sys
1 ntkrnlpa!IofCallDriver[0x8228D912] -> \Device\Harddisk0\DR0[0x85BB5578]
3 CLASSPNP[0x8A5A58B3] -> ntkrnlpa!IofCallDriver[0x8228D912] -> [0x852ED1D8]
5 acpi[0x806A06BC] -> ntkrnlpa!IofCallDriver[0x8228D912] -> \Device\Ide\IdeDeviceP0T0L0-0[0x85320528]
kernel: MBR read successfully
user & kernel MBR OK

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Multimédis at 28/05/2011 23:39:47

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

End of the scan (1495 lines in 03mn 57s)(4)

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2464583) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) [HKLM] -- SystemRequirementsLab
O42 - Logiciel: Theme Hospital - (.Pas de propriétaire.) [HKLM] -- Hospital
O42 - Logiciel: TomTom HOME - (.TomTom.) [HKLM] -- {CE325D55-FCAF-4273-BB79-069BB8747270}
O42 - Logiciel: Tomb Raider II - (.Pas de propriétaire.) [HKLM] -- Tomb Raider II
O42 - Logiciel: Ulead PhotoImpact 12 - (.Ulead System.) [HKLM] -- {11AFE21E-B193-430D-B57A-DFF7815BB962}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2536413) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{95DF5260-331D-4FFD-A2D5-C64164751945}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}
O42 - Logiciel: VoiceOver Kit - (.Apple Inc..) [HKLM] -- {FB26A501-6BA6-459B-89AA-9736730752FB}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {230B83A5-7D88-4B95-B71E-F44C0C78B002}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {9D6524E6-15CF-4852-BF70-04FE973A3DE1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Yahoo! Toolbar - (.Pas de propriétaire.) [HKLM] -- Yahoo! Companion
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {881F5DE8-9367-4B81-A325-E91BBC6472F9}
O42 - Logiciel: muvee Reveal Seagate Edition - (.muvee Technologies Pte Ltd.) [HKLM] -- {78E9A751-5616-233F-1249-16AC5758C646}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\ABBYY]
[HKCU\Software\ACE Compression Software]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Amerigomedia]
[HKCU\Software\AppDataLow\Aurigma]
[HKCU\Software\AppDataLow\Google]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\DivX]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Musicnotes]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow\Software\Yahoo]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Avira]
[HKCU\Software\CDDB]
[HKCU\Software\Carbonite]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Core Design]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\EPSON]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\LG Electronics Inc]
[HKCU\Software\LG Media Player]
[HKCU\Software\Leadertech]
[HKCU\Software\LexmarkInkjet]
[HKCU\Software\LexmarkPhoto]
[HKCU\Software\Lexmark]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MAP-DN]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Musicnotes]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PTP]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\S3R521]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\SampleView]
[HKCU\Software\Seagate]
[HKCU\Software\SecuROM]
[HKCU\Software\Simply Super Software]
[HKCU\Software\Softonic]
[HKCU\Software\Sysinternals]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\Ulead Systems]
[HKCU\Software\Unity]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Windows Live Writer]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKLM\Software\ABBYY]
[HKLM\Software\ACE Compression Software]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\AmbientDesign]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Art Dept]
[HKLM\Software\Atari]
[HKLM\Software\Audible]
[HKLM\Software\Avira]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Bullfrog Productions Ltd]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Contrôle Parental]
[HKLM\Software\Core Design]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\EPSON]
[HKLM\Software\Electronic Arts]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Igvwswdx]
[HKLM\Software\InstallPedia]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\LG Electronics]
[HKLM\Software\LG PC Suite]
[HKLM\Software\LexmarkInkjet]
[HKLM\Software\Lexmark]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Musicnotes]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\OPTENET]
[HKLM\Software\OldTimer Tools]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PocketSoft]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\SECURITOO]
[HKLM\Software\SRS Labs]
[HKLM\Software\Seagate]
[HKLM\Software\Sibelius Software]
[HKLM\Software\Sims]
[HKLM\Software\SoftThinks]
[HKLM\Software\Sonic]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Swearware]
[HKLM\Software\The Silicon Realms Toolworks]
[HKLM\Software\Thomson]
[HKLM\Software\TomTom]
[HKLM\Software\Trolltech]
[HKLM\Software\Ubisoft]
[HKLM\Software\Ulead Systems]
[HKLM\Software\Virtools]
[HKLM\Software\Volatile]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\Yahoo]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]
[HKLM\Software\woohook]

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 19/09/2010 - 17:06:02 - [3094515] ----D- C:\Program Files\7-Zip
O43 - CFD: 18/12/2010 - 21:58:24 - [121148014] ----D- C:\Program Files\Abbyy FineReader 6.0 Sprint
O43 - CFD: 11/08/2009 - 18:47:58 - [4712960] ----D- C:\Program Files\adma
O43 - CFD: 19/09/2008 - 09:15:34 - [126318381] ----D- C:\Program Files\Adobe
O43 - CFD: 25/12/2009 - 18:03:10 - [9806807] ----D- C:\Program Files\Ambient Design
O43 - CFD: 19/04/2009 - 19:07:32 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 13/06/2010 - 18:24:12 - [14376402] ----D- C:\Program Files\Aqua3D
O43 - CFD: 21/05/2011 - 22:42:18 - [741874011] ----D- C:\Program Files\Atari
O43 - CFD: 22/07/2010 - 15:32:48 - [34376306] ----D- C:\Program Files\Audacity 1.3 Beta (Unicode)
O43 - CFD: 30/06/2009 - 09:30:14 - [167806606] ----D- C:\Program Files\Avira
O43 - CFD: 03/01/2011 - 19:30:20 - [599992] ----D- C:\Program Files\Bonjour
O43 - CFD: 09/06/2010 - 08:49:46 - [40508546] ----D- C:\Program Files\Bullfrog
O43 - CFD: 11/04/2010 - 12:32:50 - [318096] ----D- C:\Program Files\Carbonite
O43 - CFD: 04/08/2010 - 17:27:10 - [2961016] ----D- C:\Program Files\CCleaner
O43 - CFD: 28/05/2011 - 22:52:22 - [1555229419] ----D- C:\Program Files\Common Files
O43 - CFD: 11/04/2009 - 12:54:10 - [1622945196] ----D- C:\Program Files\Controle Parental
O43 - CFD: 08/07/2010 - 21:10:26 - [949048] ----D- C:\Program Files\Core Design
O43 - CFD: 24/05/2010 - 10:15:20 - [115089325] ----D- C:\Program Files\DivX
O43 - CFD: 14/05/2011 - 19:03:46 - [4507970] ----D- C:\Program Files\DOSBox-0.74
O43 - CFD: 04/06/2009 - 16:03:04 - [6054439780] ----D- C:\Program Files\Electronic Arts
O43 - CFD: 26/08/2009 - 15:17:20 - [24161653] ----D- C:\Program Files\epson
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 09/10/2009 - 12:47:50 - [3738567] ----D- C:\Program Files\FotoSketcher
O43 - CFD: 23/12/2009 - 16:07:54 - [82981191] ----D- C:\Program Files\Gimp-2.0
O43 - CFD: 07/05/2011 - 22:11:10 - [77207335] ----D- C:\Program Files\Google
O43 - CFD: 21/05/2011 - 22:42:12 - [138805795] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 23/05/2011 - 22:48:20 - [6822020] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 11/04/2009 - 12:56:22 - [12744618] ----D- C:\Program Files\Inventel
O43 - CFD: 03/01/2011 - 19:38:46 - [1856115] ----D- C:\Program Files\iPod
O43 - CFD: 03/01/2011 - 19:39:32 - [166023184] ----D- C:\Program Files\iTunes
O43 - CFD: 19/04/2010 - 16:56:14 - [162789703] ----D- C:\Program Files\Java
O43 - CFD: 22/04/2009 - 16:04:46 - [15984024] ----D- C:\Program Files\JRE
O43 - CFD: 18/12/2010 - 21:59:12 - [4159149] ----D- C:\Program Files\Lexmark
O43 - CFD: 18/12/2010 - 21:57:02 - [638976] ----D- C:\Program Files\Lexmark Printable Web
O43 - CFD: 18/12/2010 - 22:03:22 - [100327650] ----D- C:\Program Files\Lexmark Pro200-S500 Series
O43 - CFD: 18/12/2010 - 22:24:22 - [4822680] ----D- C:\Program Files\Lexmark Toolbar
O43 - CFD: 18/12/2010 - 21:57:50 - [302237] ----D- C:\Program Files\Lexmark Tools for Office
O43 - CFD: 24/10/2009 - 13:57:54 - [989463] ----D- C:\Program Files\LG Electronics
O43 - CFD: 01/05/2011 - 20:40:28 - [171864412] ----D- C:\Program Files\LG PC Suite II
O43 - CFD: 09/01/2011 - 11:50:08 - [4931223] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 16/12/2010 - 13:48:12 - [9454922] ----D- C:\Program Files\McAfee Security Scan
O43 - CFD: 11/04/2009 - 13:37:40 - [1721508] ----D- C:\Program Files\Microsoft
O43 - CFD: 02/11/2006 - 14:37:36 - [93446071] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 10/04/2010 - 12:12:10 - [592236767] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 22/04/2011 - 18:16:28 - [38388859] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 11/04/2009 - 13:38:58 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 11/04/2009 - 13:40:12 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 10/04/2010 - 12:12:06 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 10/04/2010 - 12:07:44 - [1387249] ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 11/04/2010 - 11:58:32 - [3726168] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 04/06/2009 - 16:02:50 - [979309] ----D- C:\Program Files\Microsoft WSE
O43 - CFD: 26/06/2010 - 11:35:40 - [8167779] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 31/05/2009 - 14:45:34 - [50512871] ----D- C:\Program Files\monAlbumPhoto
O43 - CFD: 23/05/2011 - 22:48:22 - [99342446] ----D- C:\Program Files\Movie Maker
O43 - CFD: 02/03/2010 - 20:00:20 - [30262540] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 16/01/2011 - 11:19:12 - [30057104] ----D- C:\Program Files\Mozilla Firefox 4.0 Beta 9
O43 - CFD: 10/04/2010 - 12:12:26 - [26521] ----D- C:\Program Files\MSBuild
O43 - CFD: 09/10/2009 - 14:43:40 - [56698624] ----D- C:\Program Files\MSECache
O43 - CFD: 13/04/2009 - 12:06:22 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 25/06/2010 - 18:30:06 - [42455382] ----D- C:\Program Files\Musicnotes
O43 - CFD: 19/09/2008 - 10:13:08 - [322546497] ----D- C:\Program Files\Nero
O43 - CFD: 01/05/2011 - 16:38:12 - [352364719] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 22/04/2009 - 16:04:36 - [354600811] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 11/04/2009 - 14:07:44 - [3174167] ----D- C:\Program Files\OrangeHSS
O43 - CFD: 28/12/2009 - 19:06:12 - [1319877] ----D- C:\Program Files\Pointofix
O43 - CFD: 03/01/2011 - 19:36:48 - [76322555] ----D- C:\Program Files\QuickTime
O43 - CFD: 07/08/2009 - 11:55:30 - [44635490] ----D- C:\Program Files\Real
O43 - CFD: 19/09/2008 - 10:15:24 - [23908182] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:36 - [38694657] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 11/04/2010 - 12:34:04 - [614576505] ----D- C:\Program Files\Seagate
O43 - CFD: 28/02/2008 - 09:56:30 - [0] ----D- C:\Program Files\SoftThinks
O43 - CFD: 01/05/2011 - 16:04:18 - [768113] ----D- C:\Program Files\SystemRequirementsLab
O43 - CFD: 19/10/2009 - 19:39:24 - [32911711] ----D- C:\Program Files\TomTom HOME
O43 - CFD: 08/07/2009 - 10:36:00 - [4725553480] ----D- C:\Program Files\Ubisoft
O43 - CFD: 25/12/2009 - 11:44:26 - [390235965] ----D- C:\Program Files\Ulead Systems
O43 - CFD: 02/11/2006 - 15:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 18/03/2011 - 12:33:24 - [15328639] ----D- C:\Program Files\Virtools
O43 - CFD: 23/05/2011 - 22:48:24 - [1016832] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 23/05/2011 - 22:48:20 - [2737152] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 23/05/2011 - 22:48:12 - [4490624] ----D- C:\Program Files\Windows Defender
O43 - CFD: 23/05/2011 - 22:48:20 - [7084664] ----D- C:\Program Files\Windows Journal
O43 - CFD: 27/01/2011 - 12:21:48 - [156211900] ----D- C:\Program Files\Windows Live
O43 - CFD: 11/04/2009 - 13:37:20 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 23/05/2011 - 22:48:22 - [9116344] ----D- C:\Program Files\Windows Mail
O43 - CFD: 23/05/2011 - 22:48:20 - [4498121] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 10/04/2009 - 11:39:38 - [7957544] ----D- C:\Program Files\Windows NT
O43 - CFD: 23/05/2011 - 22:48:18 - [13528738] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 25/05/2011 - 21:14:00 - [134144] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 23/05/2011 - 22:48:20 - [6527558] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 13/09/2009 - 14:04:46 - [3921490] ----D- C:\Program Files\WinRAR
O43 - CFD: 04/08/2010 - 17:27:00 - [3273418] ----D- C:\Program Files\Yahoo!
O43 - CFD: 28/05/2011 - 23:35:56 - [3881147] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 19/09/2008 - 09:15:42 - [8319675] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 26/05/2010 - 08:38:50 - [32158176] ----D- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 19/09/2008 - 10:13:40 - [112227528] ----D- C:\Program Files\Common Files\Ahead
O43 - CFD: 03/01/2011 - 19:38:46 - [94760384] ----D- C:\Program Files\Common Files\Apple
O43 - CFD: 13/06/2010 - 18:09:04 - [738608] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 24/05/2010 - 10:14:18 - [30445276] ----D- C:\Program Files\Common Files\DivX Shared
O43 - CFD: 11/04/2009 - 12:59:10 - [3253079] ----D- C:\Program Files\Common Files\France Telecom
O43 - CFD: 25/08/2009 - 11:50:52 - [13787835] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 19/04/2010 - 16:57:20 - [32325352] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 11/04/2010 - 11:59:04 - [418929502] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 11/04/2010 - 12:31:24 - [97607523] ----D- C:\Program Files\Common Files\muvee Technologies
O43 - CFD: 01/05/2011 - 14:50:50 - [662081] ----D- C:\Program Files\Common Files\PocketSoft
O43 - CFD: 24/05/2010 - 10:14:46 - [4673856] ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD: 07/08/2009 - 11:55:40 - [20445081] ----D- C:\Program Files\Common Files\Real
O43 - CFD: 02/11/2006 - 13:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 02/11/2006 - 13:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 23/05/2011 - 22:48:16 - [42800134] ----D- C:\Program Files\Common Files\System
O43 - CFD: 25/12/2009 - 11:44:26 - [3070792] ----D- C:\Program Files\Common Files\Ulead Systems
O43 - CFD: 11/04/2009 - 13:34:38 - [508937572] ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 21/05/2011 - 22:42:12 - [88630272] ----D- C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 07/08/2009 - 11:55:46 - [352256] ----D- C:\Program Files\Common Files\xing shared
O43 - CFD: 18/03/2011 - 12:33:34 - [373] ----D- C:\ProgramData\3DVIA
O43 - CFD: 26/05/2010 - 08:19:50 - [789] ----D- C:\ProgramData\Adobe
O43 - CFD: 19/09/2008 - 10:13:48 - [320] ----D- C:\ProgramData\Ahead
O43 - CFD: 31/05/2009 - 14:44:20 - [19945457] ----D- C:\ProgramData\albumphoto
O43 - CFD: 25/12/2009 - 11:34:12 - [0] ----D- C:\ProgramData\AppData
O43 - CFD: 19/04/2009 - 19:06:28 - [107474432] ----D- C:\ProgramData\Apple
O43 - CFD: 19/04/2009 - 19:10:52 - [66876747] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 30/06/2009 - 09:30:14 - [56339144] ----D- C:\ProgramData\Avira
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 24/05/2010 - 10:15:20 - [4181874] ----D- C:\ProgramData\DivX
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 26/05/2010 - 08:19:58 - [178905] ----D- C:\ProgramData\Electronic Arts
O43 - CFD: 18/12/2010 - 23:31:20 - [266] ----D- C:\ProgramData\Ezprint
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 21/04/2009 - 17:41:50 - [539380] ----D- C:\ProgramData\Google
O43 - CFD: 25/12/2009 - 11:47:38 - [148] ----D- C:\ProgramData\InstallShield
O43 - CFD: 25/01/2011 - 13:47:26 - [459232] ----D- C:\ProgramData\Lexmark Pro200-S500 Series
O43 - CFD: 21/05/2011 - 22:42:12 - [49075] ----D- C:\ProgramData\Lx_cats
O43 - CFD: 05/08/2010 - 15:47:58 - [14441930] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 12/12/2010 - 15:40:04 - [285021] ----D- C:\ProgramData\McAfee
O43 - CFD: 21/05/2011 - 22:42:12 - [853] ----D- C:\ProgramData\McAfee Security Scan
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 18/12/2010 - 22:20:08 - [1608882396] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 12/05/2011 - 12:35:00 - [64194] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 10/04/2009 - 11:39:38 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 25/06/2010 - 18:30:34 - [43960] ----D- C:\ProgramData\Musicnotes
O43 - CFD: 11/04/2010 - 14:47:14 - [0] ----D- C:\ProgramData\muvee Technologies
O43 - CFD: 19/09/2008 - 10:13:08 - [4943975] ----D- C:\ProgramData\Nero
O43 - CFD: 13/05/2009 - 11:41:18 - [15851] ----D- C:\ProgramData\Norton
O43 - CFD: 11/04/2009 - 14:30:24 - [3208742] ----D- C:\ProgramData\NortonInstaller
O43 - CFD: 28/05/2011 - 23:26:42 - [2490439] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 01/05/2011 - 16:31:50 - [578505] ----D- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 03/12/2009 - 12:46:32 - [51] ----D- C:\ProgramData\Real
O43 - CFD: 11/04/2010 - 12:34:04 - [853440] ----D- C:\ProgramData\Seagate
O43 - CFD: 19/04/2010 - 16:57:24 - [119] ----D- C:\ProgramData\Sun
O43 - CFD: 12/05/2009 - 17:15:58 - [64] ----D- C:\ProgramData\Symantec
O43 - CFD: 21/05/2011 - 22:42:12 - [34146] ----D- C:\ProgramData\Tablet
O43 - CFD: 21/05/2011 - 22:33:26 - [0] ---AD- C:\ProgramData\TEMP
O43 - CFD: 19/10/2009 - 19:39:44 - [9398] ----D- C:\ProgramData\TomTom
O43 - CFD: 25/08/2009 - 11:47:20 - [4085087] ----D- C:\ProgramData\UDL
O43 - CFD: 25/12/2009 - 11:44:36 - [93242] ----D- C:\ProgramData\Ulead Systems
O43 - CFD: 17/05/2011 - 21:21:28 - [0] ----D- C:\ProgramData\WindowsSearch
O43 - CFD: 19/09/2010 - 16:55:38 - [0] ----D- C:\ProgramData\WinZip
O43 - CFD: 17/04/2009 - 17:17:24 - [0] ----D- C:\ProgramData\WinZipSE
O43 - CFD: 17/05/2011 - 12:05:20 - [109856] ----D- C:\ProgramData\Yahoo! Companion
O43 - CFD: 26/05/2010 - 08:19:50 - [5280914] ----D- C:\Users\Multimédis\AppData\Roaming\Adobe
O43 - CFD: 19/04/2009 - 16:17:48 - [48182] ----D- C:\Users\Multimédis\AppData\Roaming\Ahead
O43 - CFD: 25/12/2009 - 18:04:34 - [1176] ----D- C:\Users\Multimédis\AppData\Roaming\Ambient Design
O43 - CFD: 29/07/2010 - 14:26:40 - [197590] ----D- C:\Users\Multimédis\AppData\Roaming\Apple Computer
O43 - CFD: 17/06/2010 - 10:46:28 - [677] ----D- C:\Users\Multimédis\AppData\Roaming\Atari
O43 - CFD: 06/02/2011 - 13:35:42 - [2695] ----D- C:\Users\Multimédis\AppData\Roaming\Audacity
O43 - CFD: 01/06/2010 - 12:44:02 - [165346] ----D- C:\Users\Multimédis\AppData\Roaming\DivX
O43 - CFD: 23/06/2009 - 11:00:50 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\EPSON
O43 - CFD: 11/04/2009 - 13:34:06 - [118756] ----D- C:\Users\Multimédis\AppData\Roaming\Google
O43 - CFD: 27/07/2010 - 15:40:02 - [83] ----D- C:\Users\Multimédis\AppData\Roaming\gtk-2.0
O43 - CFD: 10/04/2009 - 11:43:32 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\Identities
O43 - CFD: 28/05/2009 - 15:14:28 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\InstallShield
O43 - CFD: 11/04/2010 - 12:28:08 - [40611] ----D- C:\Users\Multimédis\AppData\Roaming\Leadertech
O43 - CFD: 24/10/2009 - 13:55:36 - [1531447] ----D- C:\Users\Multimédis\AppData\Roaming\LG Electronics
O43 - CFD: 11/04/2009 - 14:16:32 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\Macromedia
O43 - CFD: 05/08/2010 - 15:48:10 - [20344] ----D- C:\Users\Multimédis\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 14:37:36 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\Media Center Programs
O43 - CFD: 25/05/2011 - 21:33:32 - [14736895] -S--D- C:\Users\Multimédis\AppData\Roaming\Microsoft
O43 - CFD: 02/03/2010 - 20:01:44 - [44058719] ----D- C:\Users\Multimédis\AppData\Roaming\Mozilla
O43 - CFD: 29/07/2010 - 17:33:34 - [284] ----D- C:\Users\Multimédis\AppData\Roaming\muvee Technologies
O43 - CFD: 22/04/2009 - 16:07:02 - [5471298] ----D- C:\Users\Multimédis\AppData\Roaming\OpenOffice.org
O43 - CFD: 03/12/2009 - 12:46:28 - [3792936] ----D- C:\Users\Multimédis\AppData\Roaming\Real
O43 - CFD: 10/04/2009 - 12:00:28 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\SampleView
O43 - CFD: 23/04/2009 - 20:01:02 - [393654] ----D- C:\Users\Multimédis\AppData\Roaming\Thinstall
O43 - CFD: 25/12/2009 - 11:49:12 - [17685184] ----D- C:\Users\Multimédis\AppData\Roaming\Ulead Systems
O43 - CFD: 08/04/2011 - 19:54:54 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\Windows Live Writer
O43 - CFD: 13/09/2009 - 14:05:00 - [12] ----D- C:\Users\Multimédis\AppData\Roaming\WinRAR
O43 - CFD: 04/08/2010 - 17:26:58 - [0] ----D- C:\Users\Multimédis\AppData\Roaming\Yahoo!
O43 - CFD: 11/04/2009 - 14:13:42 - [22721869] ----D- C:\Users\Multimédis\Appdata\Local\Adobe
O43 - CFD: 28/08/2009 - 13:17:36 - [2416748] ----D- C:\Users\Multimédis\Appdata\Local\Ahead
O43 - CFD: 19/04/2009 - 19:07:42 - [0] ----D- C:\Users\Multimédis\Appdata\Local\Apple
O43 - CFD: 01/07/2009 - 21:35:46 - [38182717] ----D- C:\Users\Multimédis\Appdata\Local\Apple Computer
O43 - CFD: 10/04/2009 - 11:43:26 - [0] -SH-D- C:\Users\Multimédis\Appdata\Local\Application Data
O43 - CFD: 26/04/2009 - 12:37:40 - [3558618324] ----D- C:\Users\Multimédis\Appdata\Local\Ares
O43 - CFD: 19/09/2010 - 17:05:44 - [272] ----D- C:\Users\Multimédis\Appdata\Local\assembly
O43 - CFD: 14/05/2011 - 19:04:46 - [10973] ----D- C:\Users\Multimédis\Appdata\Local\DOSBox
O43 - CFD: 11/04/2010 - 12:33:00 - [15197062] ----D- C:\Users\Multimédis\Appdata\Local\Downloaded Installations
O43 - CFD: 21/05/2011 - 14:00:34 - [14012879] ----D- C:\Users\Multimédis\Appdata\Local\Google
O43 - CFD: 10/04/2009 - 11:43:26 - [0] -SH-D- C:\Users\Multimédis\Appdata\Local\Historique
O43 - CFD: 05/03/2011 - 21:45:52 - [1637356787] ----D- C:\Users\Multimédis\Appdata\Local\Microsoft
O43 - CFD: 31/07/2010 - 21:07:40 - [1874248] ----D- C:\Users\Multimédis\Appdata\Local\Microsoft Games
O43 - CFD: 29/05/2010 - 21:01:42 - [203180] ----D- C:\Users\Multimédis\Appdata\Local\Microsoft Help
O43 - CFD: 02/03/2010 - 20:01:36 - [301393] ----D- C:\Users\Multimédis\Appdata\Local\Mozilla
O43 - CFD: 19/09/2010 - 17:05:48 - [830] ----D- C:\Users\Multimédis\Appdata\Local\networker
O43 - CFD: 28/05/2011 - 23:35:14 - [48897] ----D- C:\Users\Multimédis\Appdata\Local\Temp
O43 - CFD: 10/04/2009 - 11:43:26 - [0] -SH-D- C:\Users\Multimédis\Appdata\Local\Temporary Internet Files
O43 - CFD: 24/03/2010 - 21:33:02 - [78759] ----D- C:\Users\Multimédis\Appdata\Local\Unity
O43 - CFD: 11/04/2009 - 19:59:06 - [173737602] ----D- C:\Users\Multimédis\Appdata\Local\VirtualStore
O43 - CFD: 08/04/2011 - 19:55:00 - [373684] ----D- C:\Users\Multimédis\Appdata\Local\Windows Live Writer

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.19877BBF6CBFB6E1266D2E49E934651F] - 28/05/2011 - 22:32:35 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1495948]
O44 - LFC:[MD5.D049284AF192900AFAEE0AEBD6C06E65] - 28/05/2011 - 22:32:35 ---A- . (...) -- C:\Windows\System32\perfc009.dat [103872]
O44 - LFC:[MD5.0B3E71BFCDA68B82F0F945C7F525382E] - 28/05/2011 - 22:32:35 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [126420]
O44 - LFC:[MD5.8B1E968AB5A9FE2121F69A4A7C863844] - 28/05/2011 - 22:32:35 ---A- . (...) -- C:\Windows\System32\perfh009.dat [595798]
O44 - LFC:[MD5.B00B927C40C391EF215D7B51022DEC22] - 28/05/2011 - 22:32:35 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [678804]
O44 - LFC:[MD5.8CEE12005489D17500ECFD7F60EF1200] - 28/05/2011 - 22:31:23 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1534297]
O44 - LFC:[MD5.20CF194D34C2E15D6D0098FBDD012890] - 28/05/2011 - 22:26:45 ---A- . (...) -- C:\Windows\win.ini [334]
O44 - LFC:[MD5.0FFE0D016B36E904FE977EAD392A195F] - 28/05/2011 - 22:26:40 ---A- . (...) -- C:\error.log [1390739]
O44 - LFC:[MD5.250C85F3BDDDD8A970AF9728DEBB06CF] - 28/05/2011 - 22:26:18 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.418C342626C60B6A36EF7FB401CED44F] - 28/05/2011 - 22:26:12 ---A- . (...) -- C:\Windows\PFRO.log [42652]
O44 - LFC:[MD5.0AE278F491B5347F4D431255ED15F321] - 28/05/2011 - 21:57:12 ---A- . (...) -- C:\ComboFix.txt [14973]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 28/05/2011 - 21:54:57 ---A- . (...) -- C:\Windows\system.ini [215]
O44 - LFC:[MD5.952194BB8A39310D4F26598C4A8FFA0F] - 28/05/2011 - 17:54:00 ---A- . (...) -- C:\TCleaner.txt [1827]
O44 - LFC:[MD5.07F441BB1FCCB9BCC19FDDC5E9D1EA66] - 26/05/2011 - 20:44:15 ---A- . (...) -- C:\Windows\setupact.log [54779]
O44 - LFC:[MD5.CFF0FE734991BF54654558B95098687B] - 26/05/2011 - 20:21:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [493948]
O44 - LFC:[MD5.AE72E8619CB31D84DA25E2435E55003C] - 25/05/2011 - 20:37:34 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [31232]
O44 - LFC:[MD5.01D95A1F8CF13D07CC564AABB36BCC0B] - 25/05/2011 - 20:37:34 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [161792]
O44 - LFC:[MD5.B7517DB073B28F5696A1E5528ABEB5D0] - 25/05/2011 - 20:37:34 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [136704]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 25/05/2011 - 20:13:40 --HA- . (...) -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 25/05/2011 - 20:12:29 --HA- . (...) -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf [0]
O44 - LFC:[MD5.13EB47B4CA7280EFA144700499086F90] - 24/05/2011 - 20:14:22 ---A- . (...) -- C:\testcnx.txt [3305]
O44 - LFC:[MD5.78A96AC50EE91708DD6DCAD3C23DED7E] - 23/05/2011 - 22:10:58 ---A- . (...) -- C:\UsbFix_Upload_Me_PC-DE-MULTIMÉDI.zip [11383]
O44 - LFC:[MD5.43799C6A708B4F4E3F1D9105794E6527] - 23/05/2011 - 21:51:20 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [462024]
O44 - LFC:[MD5.358A03A7A47F0AD71E84306AC635A626] - 23/05/2011 - 21:26:39 ---A- . (.Pas de propriétaire - Programme d'authentification du périphériqu.) -- C:\Windows\System32\EhStorAuthn.dll [117248]
O44 - LFC:[MD5.9A7E344C3D52EE1A2EF003B33B1C1BF1] - 23/05/2011 - 21:26:34 ---A- . (.Microsoft - NPS Migration Plugin.) -- C:\Windows\System32\IasMigPlugin.dll [454144]
O44 - LFC:[MD5.81638E6E467193699B5A800732ECBDE4] - 23/05/2011 - 21:25:09 ---A- . (.Microsoft - Classe d'assistance SMB (partage de fichier.) -- C:\Windows\System32\SMBHelperClass.dll [83456]
O44 - LFC:[MD5.908511675091C06163178DCE998B27C5] - 21/05/2011 - 20:38:32 ---A- . (...) -- C:\Windows\System32\E4A3864A-361F-13EF-0BF3-A87E680F55F4.txt [4030]
O44 - LFC:[MD5.AE125C00206E33F75720DA6452788514] - 21/05/2011 - 17:30:32 ---A- . (...) -- C:\Windows\MEMORY.DMP [275580806]
O44 - LFC:[MD5.2ECEF5FF9F572EAF9A0925F54AAE5296] - 17/05/2011 - 19:37:38 ---A- . (...) -- C:\Windows\srun.log [12]
O44 - LFC:[MD5.58CE5703F481BF3EE288A5F064E8A51B] - 01/05/2011 - 15:27:11 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960]
O44 - LFC:[MD5.8BA6BE80BA5FAA297DD716AF08B0DE2F] - 01/05/2011 - 15:27:11 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco3220140.dll [944232]
O44 - LFC:[MD5.3FF7E319D12D827554A470E127E7FEB6] - 01/05/2011 - 15:27:11 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322060.dll [855656]
O44 - LFC:[MD5.E743CF97A615B8E81A29E94619892CDE] - 01/05/2011 - 15:27:10 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 270.6.) -- C:\Windows\System32\nvcuvid.dll [2765928]
O44 - LFC:[MD5.2A46BF6D1F317B8648B37DB4C659F407] - 01/05/2011 - 15:27:10 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 270.61.) -- C:\Windows\System32\nvcuvenc.dll [2074216]
O44 - LFC:[MD5.A7E208039CBBD32AD7F487F5D787DB41] - 01/05/2011 - 15:27:08 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920]
O44 - LFC:[MD5.4BBF9429189BC4D246EC86828937500A] - 01/05/2011 - 15:27:08 ---A- . (.NVIDIA Corporation - NVIDIA Compiler, Version 270.61.) -- C:\Windows\System32\nvcompiler.dll [13007464]
O44 - LFC:[MD5.AEE5DD2A29BBF02398B2DB70CE1EB989] - 08/04/2011 - 06:14:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4755]
O44 - LFC:[MD5.9DAA7218961710008D7385B01BD3F386] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\Windows\MBR.exe [89088]
O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/04/2010 - 08:58:12 ---A- . (...) -- C:\Windows\PEV.exe [256512]
O44 - LFC:[MD5.52CB0185C73E1BA86CC7F726F22523C3] - 10/04/2009 - 22:28:22 ---A- . (...) -- C:\Windows\System32\msjetoledb40.dll [368640]
O44 - LFC:[MD5.AD4C3968CE1DB3A3A4632E1CDECA9555] - 10/04/2009 - 20:48:20 ---A- . (...) -- C:\Windows\System32\eaphost.tmf [344698]
O44 - LFC:[MD5.A3EB38D309C5682BBA0E23732C5D4AF2] - 10/04/2009 - 20:46:16 ---A- . (...) -- C:\Windows\System32\WFP.TMF [208966]
O44 - LFC:[MD5.4DF0D81B2B19B87DBFF241619DCDDC31] - 10/04/2009 - 20:43:52 ---A- . (...) -- C:\Windows\System32\dot3.tmf [442788]
O44 - LFC:[MD5.16D06DC26B8BD160AD81EE271D9577D8] - 10/04/2009 - 20:43:38 ---A- . (...) -- C:\Windows\System32\onex.tmf [392170]
O44 - LFC:[MD5.E9E66706083BFE4B0070EE0A5E8D42DB] - 10/04/2009 - 17:59:52 ---A- . (...) -- C:\Windows\System32\StructuredQuerySchema.bin [107612]
O44 - LFC:[MD5.B51BF7934D2B657454F66035AA5BFA03] - 10/04/2009 - 17:54:26 ---A- . (...) -- C:\Windows\System32\locale.nls [3662128]
O44 - LFC:[MD5.75DFEB04C0C978810720283C1B5CD7B1] - 06/03/2009 - 17:11:18 ---A- . (...) -- C:\Windows\System32\systemsf.ebd [130008]
O44 - LFC:[MD5.07400BC21119204892795F015052CDF4] - 19/02/2009 - 16:20:52 ---A- . (...) -- C:\Windows\System32\RacUR.xml [9212]
O44 - LFC:[MD5.6F7C27002EA0F9496070A1150C977DEC] - 19/02/2009 - 16:20:52 ---A- . (...) -- C:\Windows\System32\spcinstrumentation.man [9239]
O44 - LFC:[MD5.4C58B5E71FEEFD18BB7F537343C7219A] - 18/02/2009 - 10:43:20 ---A- . (...) -- C:\Windows\System32\RacUREx.xml [153]
O44 - LFC:[MD5.BCDBB5CEA1E8AEA0FA353691EB003728] - 18/02/2009 - 10:39:58 ---A- . (...) -- C:\Windows\System32\slmgr.vbs [92918]
O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\grep.exe [80412]
O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\sed.exe [98816]
O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\zip.exe [68096]
O44 - LFC:[MD5.3F30E7D132D62476DB9BA5EBB0F7B902] - 27/02/2002 - 16:50:00 ---A- . (...) -- C:\Windows\patchw32.dll [197120]

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.63E42DC67E83EE095C7DDF894E4D0EDE] - 17/05/2011 - 10:58:23 ---A- - C:\Windows\Prefetch\AgCx_SC3_5A0D9054.db
O45 - LFCP:[MD5.BFE9BB84C060AB7C4674BB7F18B86FDE] - 21/05/2011 - 17:29:19 ---A- - C:\Windows\Prefetch\AgCx_S1_S-1-5-21-4130971726-1642276937-2762003338-1000.snp.db
O45 - LFCP:[MD5.6FCE277F32876038F6FCA412A516C85C] - 28/05/2011 - 21:42:03 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.B627C5319AE8E6A014ADAFAA27EDB3AF] - 28/05/2011 - 21:46:34 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-812AD5F1.pf
O45 - LFCP:[MD5.3D9C587364645C6A9F0C577822D58D34] - 28/05/2011 - 21:46:34 ---A- - C:\Windows\Prefetch\NIRCMD.CFXXE-3243A886.pf
O45 - LFCP:[MD5.17E7C38C0B0167CE43E6EC629911FFA7] - 28/05/2011 - 21:55:07 ---A- - C:\Windows\Prefetch\PEV.EXE-1365ECE9.pf
O45 - LFCP:[MD5.6D59C46F0401AE72EBDCD28C02529BBC] - 28/05/2011 - 21:55:19 ---A- - C:\Windows\Prefetch\FINDSTR.EXE-2E9C6FE2.pf
O45 - LFCP:[MD5.36B144FE403C69ACF55569ABE8EF64BD] - 28/05/2011 - 21:56:44 ---A- - C:\Windows\Prefetch\SORT.EXE-99A4F778.pf
O45 - LFCP:[MD5.2E4900C2AAEB229871126446979EEA7F] - 28/05/2011 - 21:57:14 ---A- - C:\Windows\Prefetch\CHCP.COM-61043047.pf
O45 - LFCP:[MD5.2170B92B576F1C3A38927954B13D8239] - 28/05/2011 - 21:57:19 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.FE7A15F3579457F943C9BCEF169B99B3] - 28/05/2011 - 22:19:19 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.C7211F27AA5F88A26EFE37FEC3520D4D] - 28/05/2011 - 22:24:56 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-4130971726-1642276937-2762003338-1000.db
O45 - LFCP:[MD5.890534F8E358FEECE98E32CB3A2893E4] - 28/05/2011 - 22:24:56 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-4130971726-1642276937-2762003338-1000.db
O45 - LFCP:[MD5.1455AB970C7031EC5BD2F13FF2913DE1] - 28/05/2011 - 22:24:58 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf
O45 - LFCP:[MD5.89BAF012956846E2AAFD4EB55ED60CF8] - 28/05/2011 - 22:25:06 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:[MD5.1376B64361581EF6A8D009B2337EE331] - 28/05/2011 - 22:25:17 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.BA5EC5D4E875EA4FAF6E7E617CA5C5E5] - 28/05/2011 - 22:25:17 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.A5169D4658495CF509563D1523BA0698] - 28/05/2011 - 22:25:18 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.32796374918F09CC627817625DDB5147] - 28/05/2011 - 22:25:18 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.02E8233AE03077CE7903F62BC8886218] - 28/05/2011 - 22:25:19 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.959E324B8F4AA3030B62F302441E0A08] - 28/05/2011 - 22:27:21 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.731A9DB17195B32653E3E4236A4D3E9F] - 28/05/2011 - 22:27:21 ---A- - C:\Windows\Prefetch\WLCOMM.EXE-272FF9F7.pf
O45 - LFCP:[MD5.05AF4C66A958235E4BD58BD32BEC07E8] - 28/05/2011 - 22:27:51 ---A- - C:\Windows\Prefetch\NMINDEXINGSERVICE.EXE-B23CB7AE.pf
O45 - LFCP:[MD5.D26331E3B8ED8F3933A36D5773837C43] - 28/05/2011 - 22:28:04 ---A- - C:\Windows\Prefetch\NMINDEXSTORESVR.EXE-D1566F23.pf
O45 - LFCP:[MD5.51567A64F4D239C79D904706EFDC2F74] - 28/05/2011 - 22:28:07 ---A- - C:\Windows\Prefetch\REALPLAY.EXE-A09C7945.pf
O45 - LFCP:[MD5.464E3434DC108BC3B00A5BBC51519EAB] - 28/05/2011 - 22:28:11 ---A- - C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf
O45 - LFCP:[MD5.DF6CF3ED8E8035C700460A9D6400DC2B] - 28/05/2011 - 22:28:59 ---A- - C:\Windows\Prefetch\INPUTPERSONALIZATION.EXE-47D98ED7.pf
O45 - LFCP:[MD5.736E1EE0FB96005BDC675DA7A4D530CC] - 28/05/2011 - 22:29:12 ---A- - C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf
O45 - LFCP:[MD5.A987920D22C9741396B2D87BD7558DFD] - 28/05/2011 - 22:29:40 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.7F956F1AEDC814501548BF0D47AF64B6] - 28/05/2011 - 22:29:41 ---A- - C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-7D76415F.pf
O45 - LFCP:[MD5.686688ECCFACE044C55F9FFB2BB120DD] - 28/05/2011 - 22:29:50 ---A- - C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf
O45 - LFCP:[MD5.3299436DBCD1EBD064093C632A23ED3A] - 28/05/2011 - 22:29:50 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf
O45 - LFCP:[MD5.BAE7DF51F2EE889F5D1322E4FB2237BA] - 28/05/2011 - 22:29:52 ---A- - C:\Windows\Prefetch\DAEMONU.EXE-4BD6E483.pf
O45 - LFCP:[MD5.8C7D78ED91916D4030DBB169840BE03B] - 28/05/2011 - 22:30:52 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.1A3D67C9F89DFE4E1A72805159E31B85] - 28/05/2011 - 22:30:52 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.8602D868E2FBCFA0DA518CBE7B5C57AB] - 28/05/2011 - 22:30:53 ---A- - C:\Windows\Prefetch\COMUPDATUS.EXE-D7F34848.pf
O45 - LFCP:[MD5.06AF96CEB2B5978FD81FA2059A7BDD18] - 28/05/2011 - 22:31:01 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.AEFD6B7517116F7ECD97310ADD07DC88] - 28/05/2011 - 22:31:05 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.E54B099709D266F3E14A3D51CA18742D] - 28/05/2011 - 22:33:10 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf
O45 - LFCP:[MD5.6C34F0B51E88AEEA77DF8A38CE93D6AB] - 28/05/2011 - 22:33:10 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEONDEMAND.EXE-76835CC9.pf
O45 - LFCP:[MD5.8DCE744D71B677669FC3257B60412338] - 28/05/2011 - 22:33:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.F8020063895F9436AB55EC5CAAA69A88] - 28/05/2011 - 22:34:09 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.F6B8F37B516112FB0769C21EBB4F2352] - 28/05/2011 - 22:34:14 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.3A88BC84327763F016BBB49F71A3DC8E] - 28/05/2011 - 22:34:15 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-5C4C4535.pf
O45 - LFCP:[MD5.F043C91BD526D80F6AF0A62953C2D4D5] - 28/05/2011 - 22:34:19 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-246B72CF.pf
O45 - LFCP:[MD5.2E71947910B0BD1814D73F2DC762C191] - 28/05/2011 - 22:34:33 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.B2837A2BD7558000932ACD44C2822B45] - 28/05/2011 - 22:34:33 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.28C00A1C5ABA8EAB2890B5777C55CA17] - 28/05/2011 - 22:34:38 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.5756D447A07A520E65F4FEF587E2CE0A] - 28/05/2011 - 22:34:53 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-8C92AE82.pf
O45 - LFCP:[MD5.83738DBBDDDF4CF4B4363C18858BF2D4] - 28/05/2011 - 22:34:54 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-34777501.pf
O45 - LFCP:[MD5.235597E821FA6D0D421A0941D0620346] - 28/05/2011 - 22:34:54 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-6DAEAB2A.pf
O45 - LFCP:[MD5.D324FF1CCA97A3149604F528BA6785DE] - 28/05/2011 - 22:34:58 ---A- - C:\Windows\Prefetch\GOOGLEUPDATERSERVICE.EXE-09540BCD.pf
O45 - LFCP:[MD5.843A633084E6D97CFEC46DC5870CF2D9] - 28/05/2011 - 22:35:10 ---A- - C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
O45 - LFCP:[MD5.27A0749F83CBDCAD3CCB67A2891CB244] - 28/05/2011 - 22:35:12 ---A- - C:\Windows\Prefetch\ZHPFIX.EXE-85222C4E.pf
O45 - LFCP:[MD5.49C040A68C27B1A5BF009519CFD9A2F8] - 28/05/2011 - 22:35:49 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-5F50D22C.pf
O45 - LFCP:[MD5.A0B00A5232B20572406B96EF35DC0093] - 28/05/2011 - 22:35:55 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.2834077AB95B0992DBB3A7C2867A3108] - 28/05/2011 - 22:35:55 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf
O45 - LFCP:[MD5.59363FDBDC0C6E0E5D065536AE5670DA] - 28/05/2011 - 22:36:03 ---A- - C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.VP60"="C:\Windows\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\system32\vp6vfw.dll
O52 - TDSD: \Drivers32\"vidc.VP61"="C:\Windows\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\system32\vp6vfw.dll
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\DivX.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\DivX.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"vp6vfw.dll"="EA VP6 Codec" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0
O55 - MWPS:[HKCU\...\Policies\System] - "LogonHoursAction"=2
O55 - MWPS:[HKCU\...\Policies\System] - "DontDisplayLogonHoursWarnings"=1

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422968]
O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [300600]
O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [101432]
O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [149560]
O58 - SDL:[MD5.9EAEF5FC9B8E351AFA7E78A6FAE91F91] - 21/01/2008 - 03:23:00 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [17464]
O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [79416]
O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [79928]
O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 10/12/2009 - 19:53:07 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [56816]
O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 30/03/2009 - 09:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys [96104]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.0CA25E686A4928484E9FDABD168AB629] - 21/01/2008 - 03:23:00 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [19000]
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]
O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [118784]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [342584]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]
O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [40504]
O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [235064]
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]
O58 - SDL:[MD5.CCCECE399B1990D63BFC8DE8161DD838] - 04/09/2008 - 05:27:28 ---A- . (.LG Electronics Inc. - LG CDMA USB Multi function Driver.) -- C:\Windows\system32\drivers\lgusbbus.sys [13056]
O58 - SDL:[MD5.B2EF4693E17404A178DA88318C5236B8] - 04/09/2008 - 05:28:22 ---A- . (.LG Electronics Inc. - LG CDMA USB Diagnostics Driver.) -- C:\Windows\system32\drivers\lgusbdiag.sys [19968]
O58 - SDL:[MD5.EB16939525ED91FB649EC68AFC865DCE] - 04/09/2008 - 05:27:54 ---A- . (.LG Electronics Inc. - LG CDMA USB Modem Driver.) -- C:\Windows\system32\drivers\lgusbmodem.sys [24832]
O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [96312]
O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89656]
O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96312]
O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952]
O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224]
O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [31288]
O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [386616]
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]
O58 - SDL:[MD5.DACBF7B3ABF5BDE5C517648F4E206836] - 24/08/2008 - 11:11:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 177.) -- C:\Windows\system32\drivers\nvlddmkm.sys [7373568]
O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [102968]
O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [45112]
O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1122360]
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]
O58 - SDL:[MD5.4A0F260DF9A5333C07F4AB40CA9D4F4B] - 27/06/2008 - 10:23:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [2149912]
O58 - SDL:[MD5.6EFAF4D359F471A8EE9738F43304D2F1] - 06/12/2007 - 05:50:50 ---A- . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys [103424]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [74808]
O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 13/07/2009 - 10:03:45 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]
O58 - SDL:[MD5.5C2BDC152BBAB34F36473DEAF7713F22] - 28/09/2010 - 15:44:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys [41984]
O58 - SDL:[MD5.AADF5587A4063F52C2C3FED7887426FC] - 21/01/2008 - 03:23:00 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [20024]
O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [130616]
O58 - SDL:[MD5.448BAEEA6B3A8284742BEFEA4F49C04F] - 17/11/2007 - 23:22:16 ---A- . (.Windows (R) Codename Longhorn DDK provider - Virtual Hid Device.) -- C:\Windows\system32\drivers\walvhid.sys [5504]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 25/05/2011 - 20:08:44 ---A- C:\Users\All Users\McAfee\MCLOGS\McUICnt\McUICnt\McUICnt000.log [13100]
O61 - LFC:Last File Created 25/05/2011 - 20:08:44 ---A- C:\Users\All Users\McAfee\MCLOGS\PartnerCustom\

Salut,
Malheureusement toujours pas d'internet. Voici le rapport:

Rapport de ZHPDiag v1.27.215 par Nicolas Coolman, Update du 27/05/2011
Run by Multimédis at 28/05/2011 23:35:50
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v7.0.6002.18005 (Defaut)
MFIE: Mozilla Firefox v3.6 (fr)
MFIE: Mozilla Firefox 4.0b9 v3.6 (fr)
GCIE: Google Chrome

---\\ System Information
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3069 MB (58% free)
System Restore: Activé (Enable)
System drive C: has 196 GB (42%) free of 456 GB

---\\ Logged in mode
Computer Name: PC-DE-MULTIMÉDI
User Name: Multimédis
All Users Names: UpdatusUser, Multimédis, Administrateur,
Unselected Option: O65
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\Multimédis\AppData\Roaming
%LocalAppData%=C:\Users\Multimédis\AppData\Local
%StartMenu%=C:\Users\Multimédis\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 196 Go of 456 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 10 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 2 Go)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.10/04/2009 22:27:38.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 03:23:42.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.A7A07D223862A0C661DB225E27058248] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/02/2011 17:38:42.) -- C:\Windows\system32\wininet.dll [834048]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.10/04/2009 22:28:14.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.10/04/2009 22:32:28.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.10/04/2009 22:32:50.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]

---\\ Processus lancés
[MD5.56A1CFFFFC8D646A0388DFBF3EC362CF] - (.Microsoft Corporation - Microsoft Tablet PC Input Component.) -- C:\Windows\SYSTEM32\WISPTIS.EXE [244224]
[MD5.C066AF01FE783943F771D07518CF3EA8] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6295552]
[MD5.DA2AE8C8E0FAA3488865208954D6BB8E] - (.Orange - Contrôle Parental.) -- C:\Program Files\Controle Parental\bin\OPTGui.exe [400408]
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153]
[MD5.6B8ECBFDFE7EBD4E94D12E74646C8A89] - (.Google Inc. - Google Quick Search Box.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [122368]
[MD5.5676E75F98FF8E0F81DFF604A09288BB] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [198160]
[MD5.2E289C3325ACCF1D18B21EB1334E3A0B] - (.TomTom - TomTom HOME.) -- C:\Program Files\TomTom HOME\TomTomHOME.exe [3770024]
[MD5.54B95896A753DD2A9F03DD0DF8566031] - (.Pas de propriétaire - Macro Key Manager MFC Application.) -- C:\Windows\System32\WTMKM.exe [1969824]
[MD5.63E7360560644692AEAE515AF834CF83] - (.Ulead Systems, Inc. - AutoDetector.) -- C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe [90112]
[MD5.2BC2FB9F702B62E2BDA8ACF8870F0822] - (.Carbonite, Inc. - Carbonite Setup Lite.) -- C:\Program Files\Carbonite\CarbonitePreinstaller.exe [318096]
[MD5.473E323057CF9893D7E8C1E2D0CCED23] - (.Seagate LLC - FreeAgent(TM) Launcher.) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe [185640]
[MD5.D41DAA100382264DCA6AAF9D19805A2A] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1135912]
[MD5.1AD502E487DC86F60E34EE1901DEABE5] - (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files\Lexmark Pro200-S500 Series\lxebmon.exe [770728]
[MD5.EF36A7503A0BE81D956E8064E2DF8CE8] - (...) -- C:\Program Files\Lexmark Pro200-S500 Series\ezprint.exe [148280]
[MD5.E5B82EA4B98828D50C61137BFA8793F1] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160]
[MD5.4B555106290BD117334E9A08761C035A] - (...) -- C:\Windows\System32\rundll32.exe [44544]
[MD5.86F0D0B3A07C142C81DAB47E8495A822] - (.Nero AG - Nero Home.) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872]
[MD5.89F7C30A91E5581BDF14C62AB46A2B2D] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe [255536]
[MD5.76DAC52F7A6D3AD3C8307D012ACF46CE] - (.OpenOffice.org - OpenOffice.org 3.0.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [7424000]
[MD5.EEBF2F715C02C8A6CE6DBE844DD1B4E3] - (.OpenOffice.org - OpenOffice.org 3.0.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [7418368]
[MD5.FFBD5650348D4F9E0AA8E72938DC6478] - (.Nero AG - Nero Home.) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe [1213736]
[MD5.B19B204CABFA9F225618EDA4A90C1A2C] - (.Microsoft Corporation - Serveur de personnalisation d'entrée.) -- C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [198656]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]
[MD5.32850FC23289E67DE2924B48C2639A58] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [657408]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Multimédis] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.2.39.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@Musicnotes.com/Musicnotes Viewer,version=1.18.6] - (.Musicnotes, Inc. - Musicnotes Viewer plugin 1.18.6 For more information visit www.musicno.) -- C:\Program Files\Musicnotes\npmusicn.dll
P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.69] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.69] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.69] - (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
P2 - FPN: [HKLM] [@Sibelius.com/Scorch Plugin,version=6.1.5.22] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Musicnotes\npsibelius.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@virtools.com/3DviaPlayer] - (.Dassault Systèmes - 3DVIA player(5.0.0.12). For more information, visit the <a href="http.) -- C:\Program Files\Virtools\3D Life Player\npvirtools.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 2.6.1f3.) -- C:\Users\Multimédis\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
M0 - MFSP: prefs.js [Multimédis - zhqq4903.default] https://www.google.com/?gws_rd=ssl
M2 - MFEP: prefs.js [Multimédis - zhqq4903.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.1 (.Microsoft.)

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Lexmark Printable Web\bho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Yahoo! Inc - Yahoo! Single Instance for Mail.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [OPTENET_GUI] . (.Orange - Contrôle Parental.) -- C:\PROGRA~1\CONTRO~1\bin\optgui.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [Google Quick Search Box] . (.Google Inc. - Google Quick Search Box.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
O4 - HKLM\..\Run: [TomTomHOME.exe] . (.TomTom - TomTom HOME.) -- C:\Program Files\TomTom HOME\TomTomHOME.exe
O4 - HKLM\..\Run: [MacrokeyManager] . (.Pas de propriétaire - Macro Key Manager MFC Application.) -- C:\Windows\System32\WTMKM.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] . (.Ulead Systems, Inc. - AutoDetector.) -- C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [CarboniteSetupLite] . (.Carbonite, Inc. - Carbonite Setup Lite.) -- C:\Program Files\Carbonite\CarbonitePreinstaller.exe
O4 - HKLM\..\Run: [MaxMenuMgr] . (.Seagate LLC - FreeAgent(TM) Launcher.) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKLM\..\Run: [lxebmon.exe] . (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files\Lexmark Pro200-S500 Series\lxebmon.exe
O4 - HKLM\..\Run: [EzPrint] . (...) -- C:\Program Files\Lexmark Pro200-S500 Series\ezprint.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-4130971726-1642276937-2762003338-1001-4130971726-1642276937-2762003338-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-4130971726-1642276937-2762003338-1001-4130971726-1642276937-2762003338-1000\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk . (.McAfee, Inc..) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk . (...) -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe

---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe (.not file.)
O4 - Global Startup: C:\Users\Multimédis\Desktop\Aqua3D.lnk . (.PRAGMA Informatique.) -- C:\Program Files\Aqua3D\Aqua3D.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\Audacity 1.3 Beta (Unicode).lnk . (.The Audacity Team.) -- C:\Program Files\Audacity 1.3 Beta (Unicode)\audacity.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\D2 - Raccourci.lnk . (...) -- C:\Users\Multimédis\Desktop\sauvegarde session hp\Documents\Documents\scolaire\D2
O4 - Global Startup: C:\Users\Multimédis\Desktop\DivX Movies.lnk . (...) -- C:\Users\Multimédis\Videos\DivX Movies
O4 - Global Startup: C:\Users\Multimédis\Desktop\FILMS - R.lnk . (...) -- C:\Users\Multimédis\Desktop\sauvegarde session hp\Videos\FILMS
O4 - Global Startup: C:\Users\Multimédis\Desktop\Gimp 2.lnk . (...) -- C:\Program Files\Gimp-2.0\bin\gimp-2.6.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Multimédis\Desktop\Master d'Anat - Raccourci.lnk . (...) -- C:\Users\Multimédis\Desktop\sauvegarde session hp\Documents\Documents\scolaire\D1\Master d'Anat
O4 - Global Startup: C:\Users\Multimédis\Desktop\Mes images - Raccourci.lnk . (...) -- C:\Users\Multimédis\Desktop\sauvegarde session hp\Pictures\Pictures\Mes images
O4 - Global Startup: C:\Users\Multimédis\Desktop\TUTORAT 2009-2010 - R.lnk . (...) -- C:\Users\Multimédis\Desktop\sauvegarde session hp\Documents\Documents\scolaire\TUTORAT 2009-2010
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\FotoSketcher.lnk . (...) -- C:\Program Files\FotoSketcher\FotoSketcher.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser (2).lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox 4.0 Beta 9.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\muvee Reveal Seagate Edition.lnk . (.muvee Technologies Pte Ltd.) -- C:\Program Files\Seagate\muvee Reveal Seagate Edition\muveereveal.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home Essentials SE.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pointofix.lnk . (...) -- C:\Program Files\Pointofix\Pointofix-en.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Snipping Tool.lnk . (...) -- C:\Program Files\Pointofix\Pointofix-en.exe
O4 - Global Startup: C:\Users\Multimédis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MI1933~1\Office12\REFBARH.ICO

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - https://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} (Hewlett-Packard Online Support Services) - https://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/3DVIA_player_installer.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8644EC79-A01A-4B63-982F-57DD86779FC2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{8644EC79-A01A-4B63-982F-57DD86779FC2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{8644EC79-A01A-4B63-982F-57DD86779FC2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: (CSHelper) . (...) - C:\Windows\system32\CSHelper.exe
O23 - Service: (FreeAgentGoNext Service) . (.Seagate Technology LLC - Sync Windows Services.) - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (gupdatem) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: (lxebCATSCustConnectService) . (.Lexmark International, Inc. - Lexmark Connect Service Executable.) - C:\Windows\system32\spool\DRIVERS\W32X86\3\lxebserv.exe
O23 - Service: (lxeb_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxebcoms.exe
O23 - Service: (McComponentHostService) . (.McAfee, Inc. - Component Host Service.) - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: (NBService) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: (NMIndexingService) . (.Nero AG - Nero Home.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 177.9.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: (OPTENET_FILTER) . (.Orange - Contrôle Parental.) - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: (WTService) . (.Pas de propriétaire - User Mode Tablet Driver.) - C:\Windows\system32\atwtusb.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{679FE3C9-E457-4DFC-9E40-640F983106D1}.job
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [{43346342-6D9D-462C-973C-7921199955B7}] (.Pas de propriétaire.) -- C:\Program Files\QuickTime\QTSystem\QuickTime.cpl" -c QuickTime (.not file.)
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: 3DVIA player 5.0 - (.3DVIA.) [HKLM] -- {4E868D3D-6EEB-4273-926C-2287236B5B79}
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 8 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A80000000002}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {308B6AEA-DE50-4666-996D-0FA461719D6B}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Aqua3D - (.PRAGMA Informatique.) [HKLM] -- Aqua3D
O42 - Logiciel: ArtRage 2 Starter Edition - (.Ambient Design.) [HKLM] -- {016884F6-765D-4482-AE07-34C930718B5C}
O42 - Logiciel: ArtistScope Plugin IE - (.ArtistScope.) [HKLM] -- ArtistScope Plugin IE4.2.0.3
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Audacity 1.3.12 (Unicode) - (.Audacity Team.) [HKLM] -- Audacity 1.3 Beta (Unicode)_is1
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {2A981294-F14C-4F0F-9627-D793270922F8}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Carbonite Online Backup Setup - (.Carbonite Inc..) [HKLM] -- Carbonite Setup Lite
O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
O42 - Logiciel: Contrôle Parental - (.Pas de propriétaire.) [HKLM] -- {93094D10-9388-11D4-9886-0000B43F396D}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM] -- EA Download Manager
O42 - Logiciel: EA Download Manager UI - (.Electronic Arts.) [HKLM] -- com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1
O42 - Logiciel: EA Download Manager UI - (.Electronic Arts.) [HKLM] -- {D5A9DA4B-E4F9-FB49-017D-769FC540F1F0}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON Scan Assistant - (.Pas de propriétaire.) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}
O42 - Logiciel: ESDX4800_4200 Guide util. - (.Pas de propriétaire.) [HKLM] -- ESDX4800_4200 Guide util.
O42 - Logiciel: FotoSketcher - Version 1.9 - (.David THOIRON.) [HKLM] -- FotoSketcher_is1
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Gimp 2.6.1 - (.Pas de propriétaire.) [HKLM] -- WinGimp-2.0_is1
O42 - Logiciel: Google Book Downloader - (.adma.) [HKLM] -- {4818F019-8B7B-46C4-9D07-C2F3EFF2F2A0}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {A0DBDF40-559F-11E0-82E2-001D0926B1BF}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: LG PC Suite II - (.LG PC Suite.) [HKLM] -- {14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}
O42 - Logiciel: LG USB Modem driver - (.LG Electronics.) [HKLM] -- {C3ABE126-2BB2-4246-BFE1-6797679B3579}
O42 - Logiciel: Les Sims(TM) 3 - (.Electronic Arts.) [HKLM] -- {C05D8CDB-417D-4335-A38C-A0659EDFD6B8}
O42 - Logiciel: Lexmark - (.Pas de propriétaire.) [HKLM] -- {D2C5E510-BE6D-42CC-9F61-E4F939078474}
O42 - Logiciel: Lexmark Barre d'outils - (.Pas de propriétaire.) [HKLM] -- {1017A80C-6F09-4548-A84D-EDD6AC9525F0}
O42 - Logiciel: Lexmark Pro200-S500 Series - (.Lexmark International, Inc..) [HKLM] -- Lexmark Pro200-S500 Series
O42 - Logiciel: Lexmark Tools for Office - (.Pas de propriétaire.) [HKLM] -- {10812DE7-2E57-4740-B226-6B3BE34AF9D7}
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Lost Via Domus - (.Ubisoft.) [HKLM] -- {2702B8FC-6003-4AC6-ADBC-EC65746D800A}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {06E6E30D-B498-442F-A943-07DE41D7F785}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
O42 - Logiciel: Mises à jour NVIDIA 1.1.34 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Monkey Island 1 - (.Pas de propriétaire.) [HKLM] -- Monkey Island 1
O42 - Logiciel: Mozilla Firefox (3.6) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6)
O42 - Logiciel: Mozilla Firefox 4.0b9 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 4.0b9 (x86 fr)
O42 - Logiciel: Musicnotes Software Suite 1.4.6 - (.Musicnotes Inc..) [HKLM] -- Musicnotes Combined Installer_is1
O42 - Logiciel: NVIDIA 3D Vision Controller Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIA StereoUSB Driver
O42 - Logiciel: NVIDIA 3D Vision Controller Driver 270.61 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
O42 - Logiciel: NVIDIA Pilote 3D Vision 270.61 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA Pilote graphique 270.61 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo
O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM] -- {BD49141C-188C-4B75-9F46-C2C42F2D1036}
O42 - Logiciel: OpenOffice.org 3.0 - (.OpenOffice.org.) [HKLM] -- {6860B340-530D-46B3-91F8-1AE1F70F7C33}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PIF DESIGNER - (.Pas de propriétaire.) [HKLM] -- {B90450DF-E781-46FD-B1F1-0C86DA40E443}
O42 - Logiciel: Pen Pad Driver with Macro Key Manager - (.Pas de propriétaire.) [HKLM] -- Rmtablet
O42 - Logiciel: Pointofix - (.Amerigomedia.) [HKLM] -- Pointofix_is1
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 6.0
O42 - Logiciel: Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recovery Center - (.SoftThinks.) [HKLM] -- {0F9B474C-B65A-427E-A3A6-9B7460ED14D9}
O42 - Logiciel: RollerCoaster Tycoon 3 - (.Pas de propriétaire.) [HKLM] -- {907B4640-266B-4A21-92FB-CD1A86CD0F63}
O42 - Logiciel: Seagate Manager Installer - (.Seagate.) [HKLM] -- InstallShield_{2A30052B-831C-41D3-8044-3C0388066350}
O42 - Logiciel: Seagate Manager Installer - (.Seagate.) [HKLM] -- {2A30052B-831C-41D3-8044-3C0388066350}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2466156) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CEF209AB-F96D-404F-B5CC-44057C057CA3}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
O42 - Logiciel: Security Update

Bonsoir

Quoi de neuf?

Toujours pas de connexion Internet?

Poste moi un nouveau rapport ZHPDiag;merci

@+

ComboFix 11-05-26.01 - Multimédis 28/05/2011 22:48:13.10.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1959 [GMT 2:00]
Lancé depuis: c:\users\MultimÚdis\Desktop\asdehi.exe
Commutateurs utilisés :: c:\users\MultimÚdis\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-04-28 au 2011-05-28 ))))))))))))))))))))))))))))))))))))
.
.
2011-05-28 20:54 . 2011-05-28 20:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-28 19:53 . 2011-05-28 19:53 -------- d-----w- C:\_OTL
2011-05-27 10:00 . 2011-05-28 20:46 -------- d-----w- C:\32788R22FWJFW
2011-05-26 19:12 . 2011-05-09 20:46 6962000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A91DAF95-4743-40B8-81CB-931739104A35}\mpengine.dll
2011-05-25 19:40 . 2011-05-25 19:51 -------- d-----w- C:\asdehi
2011-05-25 19:21 . 2011-01-20 14:12 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2011-05-25 19:21 . 2011-02-22 13:33 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-05-25 19:21 . 2011-02-22 13:33 797696 ----a-w- c:\windows\system32\FntCache.dll
2011-05-25 19:21 . 2011-01-20 16:08 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-05-25 19:21 . 2011-01-20 16:08 189952 ----a-w- c:\windows\system32\d3d10core.dll
2011-05-25 19:21 . 2011-01-20 16:08 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2011-05-25 19:21 . 2011-01-20 16:08 1029120 ----a-w- c:\windows\system32\d3d10.dll
2011-05-25 19:21 . 2011-01-20 14:11 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2011-05-25 19:21 . 2011-01-20 13:47 683008 ----a-w- c:\windows\system32\d2d1.dll
2011-05-25 19:21 . 2011-02-22 14:13 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-05-25 19:21 . 2011-01-20 14:28 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2011-05-25 19:21 . 2011-01-20 14:25 847360 ----a-w- c:\windows\system32\OpcServices.dll
2011-05-25 19:13 . 2011-05-25 19:13 -------- d-----w- c:\program files\Windows Portable Devices
2011-05-25 19:06 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-05-25 19:06 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-05-25 19:06 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-05-25 19:03 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-05-25 19:03 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-05-25 19:03 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-05-24 19:28 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\ca-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\eu-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\vi-VN
2011-05-23 20:40 . 2011-05-23 20:40 -------- d-----w- c:\windows\system32\SPReview
2011-05-23 20:28 . 2009-04-10 21:43 40960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\fr\Microsoft.Ink.Resources.dll
2011-05-23 20:28 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2011-05-23 20:26 . 2009-04-10 21:28 723968 ----a-w- c:\windows\system32\powercpl.dll
2011-05-23 20:25 . 2009-04-10 21:28 2012160 ----a-w- c:\windows\system32\milcore.dll
2011-05-23 11:51 . 2011-05-23 11:51 512 ------w- C:\PhysicalMBR.bin
2011-05-20 12:12 . 2011-05-20 12:12 -------- d-----w- C:\Sun
2011-05-17 19:21 . 2011-05-17 19:21 -------- d-----w- c:\programdata\WindowsSearch
2011-05-17 14:02 . 2011-05-19 12:57 -------- d-----w- c:\windows\Sun
2011-05-14 17:04 . 2011-05-14 17:04 -------- d-----w- c:\users\Multimédis\AppData\Local\DOSBox
2011-05-14 17:03 . 2011-05-14 17:03 -------- d-----w- c:\program files\DOSBox-0.74
2011-05-14 17:01 . 2011-05-14 17:01 -------- d-----w- c:\users\Multimédis\choisissez votre répertoire d'installation
2011-05-11 07:57 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-05-01 14:36 . 2011-05-01 14:36 -------- d-----w- c:\users\UpdatusUser
2011-05-01 14:31 . 2011-05-01 14:31 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-01 14:27 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll
2011-05-01 14:27 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll
2011-05-01 14:27 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-01 14:27 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll
2011-05-01 14:27 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-05-01 14:27 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll
2011-05-01 14:25 . 2011-05-01 14:38 -------- d-----w- c:\program files\NVIDIA Corporation
2011-05-01 14:25 . 2011-05-01 14:25 -------- d-----w- C:\NVIDIA
2011-05-01 14:04 . 2011-05-01 14:04 -------- d-----w- c:\program files\SystemRequirementsLab
2011-05-01 12:50 . 2011-05-01 12:50 -------- d-----w- c:\program files\Common Files\PocketSoft
2011-05-01 12:50 . 2002-02-27 15:50 197120 ----a-w- c:\windows\patchw32.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-23 21:10 . 2011-05-23 21:10 11383 ----a-w- C:\UsbFix_Upload_Me_PC-DE-MULTIMÉDI.zip
2011-04-08 05:14 . 2011-05-01 14:27 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-04-07 20:43 . 2011-04-07 20:43 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-04-07 20:43 . 2011-04-07 20:43 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-04-07 20:43 . 2011-04-07 20:43 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
2011-03-10 17:03 . 2011-04-15 14:34 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-10 17:03 . 2011-04-15 14:34 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-03 15:42 . 2011-04-15 14:34 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 09:19 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-03-03 15:40 . 2011-04-27 09:19 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 09:19 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 09:19 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 09:19 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:35 . 2011-04-27 09:19 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-03-03 13:25 . 2011-04-15 14:34 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-15 14:34 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-27 6295552]
"OPTENET_GUI"="c:\progra~1\CONTRO~1\bin\optgui.exe" [2006-12-05 400408]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-07-07 122368]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-07 198160]
"TomTomHOME.exe"="c:\program files\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024]
"MacrokeyManager"="WTMKM.exe" [2008-10-22 1969824]
"Ulead AutoDetector v2"="c:\program files\Common Files\Ulead Systems\AutoDetector\monitor.exe" [2006-11-29 90112]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-04-12 1135912]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"lxebmon.exe"="c:\program files\Lexmark Pro200-S500 Series\lxebmon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark Pro200-S500 Series\ezprint.exe" [2010-05-05 148280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-08-24 13580832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-08-24 92704]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
.
c:\users\Multim'dis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2009-04-25 266240]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]
R2 OPTENET_FILTER;Orange Contrôle Parental;c:\program files\Controle Parental\bin\optproxy.exe [2006-12-05 624504]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2008-10-29 372384]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-28 c:\windows\Tasks\User_Feed_Synchronization-{679FE3C9-E457-4DFC-9E40-640F983106D1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Examen supplémentaire -------
.
uStart page = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files\Controle Parental\bin\lsp.dll
TCP: DhcpNameServer = 192.168.1.1
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - hxxp://www.consoclicker.com/TNSClickrb.CAB
FF - ProfilePath - c:\users\Multimédis\AppData\Roaming\Mozilla\Firefox\Profiles\zhqq4903.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-28 22:54
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'lsass.exe'(664)
c:\program files\Controle Parental\bin\lsp.dll
.
Heure de fin: 2011-05-28 22:57:12
ComboFix-quarantined-files.txt 2011-05-28 20:57
ComboFix2.txt 2011-05-28 20:12
ComboFix3.txt 2011-05-28 17:29
ComboFix4.txt 2011-05-28 17:02
ComboFix5.txt 2011-05-28 20:46
.
Avant-CF: 210 275 143 680 octets libres
Après-CF: 210 243 665 920 octets libres
.
- - End Of File - - 9073D672825CE6769523740954D60E03

Bonjour

On dirait que ComboFix ne fait rien.

Essaie ce script:


File::
c:\users\Multimédis\AppData\Local\BIT5B2D.tmp

Folder::
c:\windows\AFD5ED58271A490796C22745C83BB035.TMP
c:\windows\TEMP\yunv

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"TkBellExe"=-
"EzPrint"=-
"QuickTime Task"=-
"iTunesHelper"=-

Driver::
AMService
fhrkjzul

Netsvc::
fhrkjzul


@+

ComboFix 11-05-24.06 - Multimédis 27/05/2011 20:00:51.5.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.2000 [GMT 2:00]
Lancé depuis: c:\users\MultimÚdis\Desktop\asdehi.exe
Commutateurs utilisés :: c:\users\MultimÚdis\Desktop\CFScript.txt
AV: AntiVir Desktop *Enabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-04-27 au 2011-05-27 ))))))))))))))))))))))))))))))))))))
.
.
2011-05-27 18:09 . 2011-05-27 18:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-27 10:00 . 2011-05-27 17:57 -------- d-----w- C:\32788R22FWJFW
2011-05-26 19:12 . 2011-05-09 20:46 6962000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A91DAF95-4743-40B8-81CB-931739104A35}\mpengine.dll
2011-05-25 19:40 . 2011-05-25 19:51 -------- d-----w- C:\asdehi
2011-05-25 19:37 . 2011-05-25 19:40 -------- d-----w- C:\ComboFix
2011-05-25 19:21 . 2011-01-20 14:12 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2011-05-25 19:21 . 2011-02-22 13:33 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-05-25 19:21 . 2011-02-22 13:33 797696 ----a-w- c:\windows\system32\FntCache.dll
2011-05-25 19:21 . 2011-01-20 16:08 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-05-25 19:21 . 2011-01-20 16:08 189952 ----a-w- c:\windows\system32\d3d10core.dll
2011-05-25 19:21 . 2011-01-20 16:08 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2011-05-25 19:21 . 2011-01-20 16:08 1029120 ----a-w- c:\windows\system32\d3d10.dll
2011-05-25 19:21 . 2011-01-20 14:11 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2011-05-25 19:21 . 2011-01-20 13:47 683008 ----a-w- c:\windows\system32\d2d1.dll
2011-05-25 19:21 . 2011-02-22 14:13 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-05-25 19:21 . 2011-01-20 14:28 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2011-05-25 19:21 . 2011-01-20 14:25 847360 ----a-w- c:\windows\system32\OpcServices.dll
2011-05-25 19:13 . 2011-05-25 19:13 -------- d-----w- c:\program files\Windows Portable Devices
2011-05-25 19:06 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-05-25 19:06 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-05-25 19:06 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-05-25 19:03 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-05-25 19:03 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-05-25 19:03 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-05-24 19:28 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\ca-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\eu-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\vi-VN
2011-05-23 20:40 . 2011-05-23 20:40 -------- d-----w- c:\windows\system32\SPReview
2011-05-23 20:28 . 2009-04-10 21:43 40960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\fr\Microsoft.Ink.Resources.dll
2011-05-23 20:28 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2011-05-23 20:26 . 2009-04-10 21:28 723968 ----a-w- c:\windows\system32\powercpl.dll
2011-05-23 20:25 . 2009-04-10 21:28 2012160 ----a-w- c:\windows\system32\milcore.dll
2011-05-23 11:51 . 2011-05-23 11:51 512 ------w- C:\PhysicalMBR.bin
2011-05-22 15:17 . 2011-05-23 21:10 -------- d-----w- C:\UsbFix
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 15:30 . 2011-05-21 15:50 -------- d-----w- C:\Ad-Remover
2011-05-20 19:16 . 2011-05-24 19:32 -------- d-----w- c:\program files\ZHPDiag
2011-05-20 12:12 . 2011-05-20 12:12 -------- d-----w- C:\Sun
2011-05-20 12:09 . 2011-05-20 12:09 -------- d-----w- c:\windows\AFD5ED58271A490796C22745C83BB035.TMP
2011-05-17 19:21 . 2011-05-17 19:21 -------- d-----w- c:\programdata\WindowsSearch
2011-05-17 14:02 . 2011-05-19 12:57 -------- d-----w- c:\windows\Sun
2011-05-14 17:04 . 2011-05-14 17:04 -------- d-----w- c:\users\Multimédis\AppData\Local\DOSBox
2011-05-14 17:03 . 2011-05-14 17:03 -------- d-----w- c:\program files\DOSBox-0.74
2011-05-14 17:01 . 2011-05-14 17:01 -------- d-----w- c:\users\Multimédis\choisissez votre répertoire d'installation
2011-05-11 07:57 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-05-01 14:36 . 2011-05-01 14:36 -------- d-----w- c:\users\UpdatusUser
2011-05-01 14:31 . 2011-05-01 14:31 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-01 14:27 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll
2011-05-01 14:27 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll
2011-05-01 14:27 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-01 14:27 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll
2011-05-01 14:27 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-05-01 14:27 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll
2011-05-01 14:25 . 2011-05-01 14:38 -------- d-----w- c:\program files\NVIDIA Corporation
2011-05-01 14:25 . 2011-05-01 14:25 -------- d-----w- C:\NVIDIA
2011-05-01 14:04 . 2011-05-01 14:04 -------- d-----w- c:\program files\SystemRequirementsLab
2011-05-01 12:50 . 2011-05-01 12:50 -------- d-----w- c:\program files\Common Files\PocketSoft
2011-05-01 12:50 . 2002-02-27 15:50 197120 ----a-w- c:\windows\patchw32.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-23 21:10 . 2011-05-23 21:10 11383 ----a-w- C:\UsbFix_Upload_Me_PC-DE-MULTIMÉDI.zip
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-04-08 05:14 . 2011-05-01 14:27 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-04-07 20:43 . 2011-04-07 20:43 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-04-07 20:43 . 2011-04-07 20:43 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-04-07 20:43 . 2011-04-07 20:43 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
2011-03-10 17:03 . 2011-04-15 14:34 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-10 17:03 . 2011-04-15 14:34 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-03 15:42 . 2011-04-15 14:34 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 09:19 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-03-03 15:40 . 2011-04-27 09:19 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 09:19 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 09:19 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 09:19 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:35 . 2011-04-27 09:19 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-03-03 13:25 . 2011-04-15 14:34 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-15 14:34 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-27 6295552]
"OPTENET_GUI"="c:\progra~1\CONTRO~1\bin\optgui.exe" [2006-12-05 400408]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-07-07 122368]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-07 198160]
"TomTomHOME.exe"="c:\program files\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024]
"MacrokeyManager"="WTMKM.exe" [2008-10-22 1969824]
"Ulead AutoDetector v2"="c:\program files\Common Files\Ulead Systems\AutoDetector\monitor.exe" [2006-11-29 90112]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-04-12 1135912]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"lxebmon.exe"="c:\program files\Lexmark Pro200-S500 Series\lxebmon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark Pro200-S500 Series\ezprint.exe" [2010-05-05 148280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-08-24 13580832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-08-24 92704]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"="c:\program files\Common Files\Ahead\Lib\NMFirstStart.exe" [2007-06-27 16680]
.
c:\users\Multim'dis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AMService;AMService;c:\windows\TEMP\yunv\setup.exe run [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2009-04-25 266240]
R2 fhrkjzul;ReadyBoost Caching Monitor;c:\windows\System32\svchost.exe [2008-01-21 21504]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]
R2 OPTENET_FILTER;Orange Contrôle Parental;c:\program files\Controle Parental\bin\optproxy.exe [2006-12-05 624504]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2008-10-29 372384]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
fhrkjzul
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-27 c:\windows\Tasks\User_Feed_Synchronization-{679FE3C9-E457-4DFC-9E40-640F983106D1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Examen supplémentaire -------
.
uStart page = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files\Controle Parental\bin\lsp.dll
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - hxxp://www.consoclicker.com/TNSClickrb.CAB
FF - ProfilePath - c:\users\Multimédis\AppData\Roaming\Mozilla\Firefox\Profiles\zhqq4903.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-27 20:09
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'lsass.exe'(664)
c:\program files\Controle Parental\bin\lsp.dll
.
Heure de fin: 2011-05-27 20:12:08
ComboFix-quarantined-files.txt 2011-05-27 18:12
ComboFix2.txt 2011-05-27 16:26
ComboFix3.txt 2011-05-27 15:56
ComboFix4.txt 2011-05-27 10:09
ComboFix5.txt 2011-05-27 17:57
.
Avant-CF: 212 732 735 488 octets libres
Après-CF: 212 700 553 216 octets libres
.
- - End Of File - - 9C87649C9D3181609FD0BF06AB40FF7E

?
C'est bon cette fois-ci? Je suis pourtant bien les consignes indiquées : / Petite nouveauté, quand je veux ouvrir des programmes maintenant j'ai le message: tentative d'opération non autorisée sur une clé du registre marquée pour suppression, et je ne peux pas les ouvrir avant d'avoir redémarré l'ordi (et jusqu'à ce que le message réapparaisse...).

Re

Voici le script.

Tu le copies sur le bureau et ensuite tu le glisses sur ComboFix renommé.

@+

ComboFix 11-05-24.06 - Multimédis 27/05/2011 17:48:43.3.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1945 [GMT 2:00]
Lancé depuis: c:\users\MultimÚdis\Desktop\asdehi.exe
Commutateurs utilisés :: c:\users\MultimÚdis\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-04-27 au 2011-05-27 ))))))))))))))))))))))))))))))))))))
.
.
2011-05-27 15:54 . 2011-05-27 15:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-27 10:00 . 2011-05-27 15:46 -------- d-----w- C:\32788R22FWJFW
2011-05-26 19:12 . 2011-05-09 20:46 6962000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A91DAF95-4743-40B8-81CB-931739104A35}\mpengine.dll
2011-05-25 19:40 . 2011-05-25 19:51 -------- d-----w- C:\asdehi
2011-05-25 19:37 . 2011-05-25 19:40 -------- d-----w- C:\ComboFix
2011-05-25 19:21 . 2011-01-20 14:12 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2011-05-25 19:21 . 2011-02-22 13:33 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-05-25 19:21 . 2011-02-22 13:33 797696 ----a-w- c:\windows\system32\FntCache.dll
2011-05-25 19:21 . 2011-01-20 16:08 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-05-25 19:21 . 2011-01-20 16:08 189952 ----a-w- c:\windows\system32\d3d10core.dll
2011-05-25 19:21 . 2011-01-20 16:08 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2011-05-25 19:21 . 2011-01-20 16:08 1029120 ----a-w- c:\windows\system32\d3d10.dll
2011-05-25 19:21 . 2011-01-20 14:11 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2011-05-25 19:21 . 2011-01-20 13:47 683008 ----a-w- c:\windows\system32\d2d1.dll
2011-05-25 19:21 . 2011-02-22 14:13 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-05-25 19:21 . 2011-01-20 14:28 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2011-05-25 19:21 . 2011-01-20 14:25 847360 ----a-w- c:\windows\system32\OpcServices.dll
2011-05-25 19:13 . 2011-05-25 19:13 -------- d-----w- c:\program files\Windows Portable Devices
2011-05-25 19:06 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-05-25 19:06 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-05-25 19:06 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-05-25 19:03 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-05-25 19:03 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-05-25 19:03 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-05-24 19:28 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\ca-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\eu-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\vi-VN
2011-05-23 20:40 . 2011-05-23 20:40 -------- d-----w- c:\windows\system32\SPReview
2011-05-23 20:28 . 2009-04-10 21:43 40960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\fr\Microsoft.Ink.Resources.dll
2011-05-23 20:28 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2011-05-23 20:26 . 2009-04-10 21:28 723968 ----a-w- c:\windows\system32\powercpl.dll
2011-05-23 20:25 . 2009-04-10 21:28 2012160 ----a-w- c:\windows\system32\milcore.dll
2011-05-23 11:51 . 2011-05-23 11:51 512 ------w- C:\PhysicalMBR.bin
2011-05-22 15:17 . 2011-05-23 21:10 -------- d-----w- C:\UsbFix
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 15:30 . 2011-05-21 15:50 -------- d-----w- C:\Ad-Remover
2011-05-20 19:16 . 2011-05-24 19:32 -------- d-----w- c:\program files\ZHPDiag
2011-05-20 12:12 . 2011-05-20 12:12 -------- d-----w- C:\Sun
2011-05-20 12:09 . 2011-05-20 12:09 -------- d-----w- c:\windows\AFD5ED58271A490796C22745C83BB035.TMP
2011-05-17 19:21 . 2011-05-17 19:21 -------- d-----w- c:\programdata\WindowsSearch
2011-05-17 14:02 . 2011-05-19 12:57 -------- d-----w- c:\windows\Sun
2011-05-14 17:04 . 2011-05-14 17:04 -------- d-----w- c:\users\Multimédis\AppData\Local\DOSBox
2011-05-14 17:03 . 2011-05-14 17:03 -------- d-----w- c:\program files\DOSBox-0.74
2011-05-14 17:01 . 2011-05-14 17:01 -------- d-----w- c:\users\Multimédis\choisissez votre répertoire d'installation
2011-05-11 07:57 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-05-01 14:36 . 2011-05-01 14:36 -------- d-----w- c:\users\UpdatusUser
2011-05-01 14:31 . 2011-05-01 14:31 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-01 14:27 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll
2011-05-01 14:27 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll
2011-05-01 14:27 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-01 14:27 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll
2011-05-01 14:27 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-05-01 14:27 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll
2011-05-01 14:25 . 2011-05-01 14:38 -------- d-----w- c:\program files\NVIDIA Corporation
2011-05-01 14:25 . 2011-05-01 14:25 -------- d-----w- C:\NVIDIA
2011-05-01 14:04 . 2011-05-01 14:04 -------- d-----w- c:\program files\SystemRequirementsLab
2011-05-01 12:50 . 2011-05-01 12:50 -------- d-----w- c:\program files\Common Files\PocketSoft
2011-05-01 12:50 . 2002-02-27 15:50 197120 ----a-w- c:\windows\patchw32.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-23 21:10 . 2011-05-23 21:10 11383 ----a-w- C:\UsbFix_Upload_Me_PC-DE-MULTIMÉDI.zip
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-04-08 05:14 . 2011-05-01 14:27 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-04-07 20:43 . 2011-04-07 20:43 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-04-07 20:43 . 2011-04-07 20:43 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-04-07 20:43 . 2011-04-07 20:43 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
2011-03-10 17:03 . 2011-04-15 14:34 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-10 17:03 . 2011-04-15 14:34 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-03 15:42 . 2011-04-15 14:34 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 09:19 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-03-03 15:40 . 2011-04-27 09:19 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 09:19 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 09:19 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 09:19 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:35 . 2011-04-27 09:19 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-03-03 13:25 . 2011-04-15 14:34 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-15 14:34 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-27 6295552]
"OPTENET_GUI"="c:\progra~1\CONTRO~1\bin\optgui.exe" [2006-12-05 400408]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-07-07 122368]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-07 198160]
"TomTomHOME.exe"="c:\program files\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024]
"MacrokeyManager"="WTMKM.exe" [2008-10-22 1969824]
"Ulead AutoDetector v2"="c:\program files\Common Files\Ulead Systems\AutoDetector\monitor.exe" [2006-11-29 90112]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-04-12 1135912]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"lxebmon.exe"="c:\program files\Lexmark Pro200-S500 Series\lxebmon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark Pro200-S500 Series\ezprint.exe" [2010-05-05 148280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-08-24 13580832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-08-24 92704]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"="c:\program files\Common Files\Ahead\Lib\NMFirstStart.exe" [2007-06-27 16680]
.
c:\users\Multim'dis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AMService;AMService;c:\windows\TEMP\yunv\setup.exe run [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2009-04-25 266240]
R2 fhrkjzul;ReadyBoost Caching Monitor;c:\windows\System32\svchost.exe [2008-01-21 21504]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]
R2 OPTENET_FILTER;Orange Contrôle Parental;c:\program files\Controle Parental\bin\optproxy.exe [2006-12-05 624504]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2008-10-29 372384]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
fhrkjzul
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-27 c:\windows\Tasks\User_Feed_Synchronization-{679FE3C9-E457-4DFC-9E40-640F983106D1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Examen supplémentaire -------
.
uStart page = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files\Controle Parental\bin\lsp.dll
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - hxxp://www.consoclicker.com/TNSClickrb.CAB
FF - ProfilePath - c:\users\Multimédis\AppData\Roaming\Mozilla\Firefox\Profiles\zhqq4903.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-27 17:54
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'lsass.exe'(668)
c:\program files\Controle Parental\bin\lsp.dll
.
Heure de fin: 2011-05-27 17:56:49
ComboFix-quarantined-files.txt 2011-05-27 15:56
ComboFix2.txt 2011-05-27 10:09
ComboFix3.txt 2011-05-25 19:51
.
Avant-CF: 212 840 206 336 octets libres
Après-CF: 212 807 942 144 octets libres
.
- - End Of File - - B46112DB5E80A65B62C9CA4CDB1AF47F

J'espère que c'est bon. Merci.

Re

Tu as du raté quelque chose.Copies le texte en gras dans un fichier Bloc-notes que tu renommes en CFScript.txt

Reprend cette manipulation avec le script.

@+

Bonjour

Sur conseil de gen_hackman ;-)

__________________________________________________
=>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=
----------------------------------------------------------------------------

Toujours avec toutes les protections désactivées, fais ceci :

? Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
? Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

----------------------------------------------------------
KillAll::

deQuarantine::
c:\windows\system32\Ijl11.dll

File::
c:\users\Multimédis\AppData\Local\BIT5B2D.tmp

Folder::
c:\windows\AFD5ED58271A490796C22745C83BB035.TMP
c:\windows\TEMP\yunv

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"TkBellExe"=-
"EzPrint"=-
"QuickTime Task"=-
"iTunesHelper"=-

Driver::
AMService
fhrkjzul

Netsvc::
fhrkjzul


------------------------------------------------------------------

? Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
? Quitte le Bloc Notes

? Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix

? Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
? Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
? Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

@+
---------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.

2011/05/26 21:44:44.0664 1180 TDSS rootkit removing tool 2.5.3.0 May 25 2011 07:09:24
2011/05/26 21:44:44.0754 1180 ================================================================================
2011/05/26 21:44:44.0754 1180 SystemInfo:
2011/05/26 21:44:44.0754 1180
2011/05/26 21:44:44.0754 1180 OS Version: 6.0.6002 ServicePack: 2.0
2011/05/26 21:44:44.0754 1180 Product type: Workstation
2011/05/26 21:44:44.0754 1180 ComputerName: PC-DE-MULTIMÉDI
2011/05/26 21:44:44.0754 1180 UserName: Multimédis
2011/05/26 21:44:44.0754 1180 Windows directory: C:\Windows
2011/05/26 21:44:44.0754 1180 System windows directory: C:\Windows
2011/05/26 21:44:44.0754 1180 Processor architecture: Intel x86
2011/05/26 21:44:44.0754 1180 Number of processors: 2
2011/05/26 21:44:44.0754 1180 Page size: 0x1000
2011/05/26 21:44:44.0754 1180 Boot type: Normal boot
2011/05/26 21:44:44.0754 1180 ================================================================================
2011/05/26 21:44:45.0829 1180 Initialize success
2011/05/26 21:44:56.0324 5300 ================================================================================
2011/05/26 21:44:56.0324 5300 Scan started
2011/05/26 21:44:56.0324 5300 Mode: Manual;
2011/05/26 21:44:56.0324 5300 ================================================================================
2011/05/26 21:44:57.0366 5300 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
2011/05/26 21:44:57.0422 5300 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
2011/05/26 21:44:57.0443 5300 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
2011/05/26 21:44:57.0465 5300 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
2011/05/26 21:44:57.0489 5300 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
2011/05/26 21:44:57.0806 5300 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys
2011/05/26 21:44:57.0956 5300 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
2011/05/26 21:44:57.0983 5300 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
2011/05/26 21:44:58.0004 5300 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
2011/05/26 21:44:58.0022 5300 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
2011/05/26 21:44:58.0165 5300 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
2011/05/26 21:44:58.0271 5300 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
2011/05/26 21:44:58.0289 5300 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
2011/05/26 21:44:58.0478 5300 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
2011/05/26 21:44:58.0553 5300 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
2011/05/26 21:44:58.0579 5300 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/05/26 21:44:58.0642 5300 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
2011/05/26 21:44:58.0779 5300 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
2011/05/26 21:44:58.0982 5300 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys
2011/05/26 21:44:59.0053 5300 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys
2011/05/26 21:44:59.0108 5300 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
2011/05/26 21:44:59.0220 5300 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
2011/05/26 21:44:59.0290 5300 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
2011/05/26 21:44:59.0335 5300 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
2011/05/26 21:44:59.0350 5300 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
2011/05/26 21:44:59.0373 5300 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
2011/05/26 21:44:59.0399 5300 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
2011/05/26 21:44:59.0496 5300 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
2011/05/26 21:44:59.0514 5300 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
2011/05/26 21:44:59.0533 5300 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
2011/05/26 21:44:59.0633 5300 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/05/26 21:44:59.0791 5300 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
2011/05/26 21:44:59.0837 5300 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
2011/05/26 21:44:59.0905 5300 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
2011/05/26 21:44:59.0957 5300 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
2011/05/26 21:45:00.0076 5300 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\drivers\compbatt.sys
2011/05/26 21:45:00.0140 5300 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
2011/05/26 21:45:00.0194 5300 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
2011/05/26 21:45:00.0289 5300 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys
2011/05/26 21:45:00.0466 5300 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
2011/05/26 21:45:00.0504 5300 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
2011/05/26 21:45:00.0572 5300 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
2011/05/26 21:45:00.0612 5300 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
2011/05/26 21:45:00.0678 5300 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
2011/05/26 21:45:00.0834 5300 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
2011/05/26 21:45:00.0874 5300 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
2011/05/26 21:45:00.0947 5300 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
2011/05/26 21:45:00.0989 5300 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
2011/05/26 21:45:01.0028 5300 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
2011/05/26 21:45:01.0259 5300 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
2011/05/26 21:45:01.0335 5300 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
2011/05/26 21:45:01.0355 5300 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/05/26 21:45:01.0438 5300 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
2011/05/26 21:45:01.0552 5300 fssfltr (b74b0578fd1d3f897e95f2a2b69ea051) C:\Windows\system32\DRIVERS\fssfltr.sys
2011/05/26 21:45:01.0703 5300 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
2011/05/26 21:45:01.0737 5300 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
2011/05/26 21:45:01.0768 5300 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2011/05/26 21:45:01.0833 5300 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
2011/05/26 21:45:01.0966 5300 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/05/26 21:45:02.0026 5300 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
2011/05/26 21:45:02.0048 5300 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
2011/05/26 21:45:02.0131 5300 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
2011/05/26 21:45:02.0158 5300 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
2011/05/26 21:45:02.0227 5300 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
2011/05/26 21:45:02.0350 5300 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
2011/05/26 21:45:02.0405 5300 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/05/26 21:45:02.0456 5300 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
2011/05/26 21:45:02.0506 5300 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
2011/05/26 21:45:02.0682 5300 IntcAzAudAddService (4a0f260df9a5333c07f4ab40ca9d4f4b) C:\Windows\system32\drivers\RTKVHDA.sys
2011/05/26 21:45:02.0744 5300 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\DRIVERS\intelide.sys
2011/05/26 21:45:02.0777 5300 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
2011/05/26 21:45:02.0886 5300 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/05/26 21:45:02.0923 5300 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
2011/05/26 21:45:02.0941 5300 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
2011/05/26 21:45:02.0966 5300 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
2011/05/26 21:45:03.0002 5300 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
2011/05/26 21:45:03.0057 5300 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/05/26 21:45:03.0107 5300 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
2011/05/26 21:45:03.0206 5300 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
2011/05/26 21:45:03.0226 5300 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/05/26 21:45:03.0279 5300 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/05/26 21:45:03.0346 5300 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
2011/05/26 21:45:03.0418 5300 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
2011/05/26 21:45:03.0451 5300 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
2011/05/26 21:45:03.0467 5300 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
2011/05/26 21:45:03.0568 5300 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
2011/05/26 21:45:03.0611 5300 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
2011/05/26 21:45:03.0667 5300 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
2011/05/26 21:45:03.0834 5300 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
2011/05/26 21:45:03.0878 5300 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
2011/05/26 21:45:03.0917 5300 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
2011/05/26 21:45:03.0939 5300 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
2011/05/26 21:45:03.0974 5300 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
2011/05/26 21:45:04.0118 5300 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
2011/05/26 21:45:04.0219 5300 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
2011/05/26 21:45:04.0280 5300 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
2011/05/26 21:45:04.0316 5300 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
2011/05/26 21:45:04.0404 5300 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
2011/05/26 21:45:04.0469 5300 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/05/26 21:45:04.0539 5300 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/05/26 21:45:04.0576 5300 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/05/26 21:45:04.0616 5300 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
2011/05/26 21:45:04.0647 5300 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
2011/05/26 21:45:04.0732 5300 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
2011/05/26 21:45:04.0783 5300 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
2011/05/26 21:45:04.0826 5300 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
2011/05/26 21:45:04.0843 5300 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/05/26 21:45:04.0872 5300 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
2011/05/26 21:45:04.0969 5300 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
2011/05/26 21:45:05.0003 5300 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/05/26 21:45:05.0026 5300 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
2011/05/26 21:45:05.0087 5300 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
2011/05/26 21:45:05.0204 5300 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
2011/05/26 21:45:05.0355 5300 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
2011/05/26 21:45:05.0393 5300 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/05/26 21:45:05.0410 5300 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/05/26 21:45:05.0461 5300 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/05/26 21:45:05.0499 5300 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
2011/05/26 21:45:05.0517 5300 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
2011/05/26 21:45:05.0554 5300 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
2011/05/26 21:45:05.0678 5300 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
2011/05/26 21:45:05.0754 5300 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
2011/05/26 21:45:05.0813 5300 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
2011/05/26 21:45:05.0911 5300 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
2011/05/26 21:45:06.0013 5300 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
2011/05/26 21:45:06.0032 5300 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
2011/05/26 21:45:06.0242 5300 nvlddmkm (dacbf7b3abf5bde5c517648f4e206836) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/05/26 21:45:06.0443 5300 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
2011/05/26 21:45:06.0459 5300 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
2011/05/26 21:45:06.0499 5300 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
2011/05/26 21:45:06.0593 5300 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/05/26 21:45:06.0770 5300 Parport (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
2011/05/26 21:45:06.0831 5300 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
2011/05/26 21:45:06.0860 5300 Parvdm (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
2011/05/26 21:45:06.0905 5300 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
2011/05/26 21:45:06.0947 5300 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\DRIVERS\PCIIDE.SYS
2011/05/26 21:45:06.0972 5300 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
2011/05/26 21:45:07.0012 5300 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
2011/05/26 21:45:07.0190 5300 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
2011/05/26 21:45:07.0209 5300 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
2011/05/26 21:45:07.0276 5300 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
2011/05/26 21:45:07.0337 5300 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
2011/05/26 21:45:07.0366 5300 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
2011/05/26 21:45:07.0391 5300 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
2011/05/26 21:45:07.0514 5300 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
2011/05/26 21:45:07.0547 5300 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/05/26 21:45:07.0612 5300 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/05/26 21:45:07.0642 5300 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
2011/05/26 21:45:07.0685 5300 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
2011/05/26 21:45:07.0732 5300 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/05/26 21:45:07.0755 5300 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
2011/05/26 21:45:07.0874 5300 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
2011/05/26 21:45:07.0920 5300 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
2011/05/26 21:45:07.0978 5300 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
2011/05/26 21:45:08.0331 5300 RTL8169 (6efaf4d359f471a8ee9738f43304d2f1) C:\Windows\system32\DRIVERS\Rtlh86.sys
2011/05/26 21:45:08.0357 5300 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
2011/05/26 21:45:08.0411 5300 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
2011/05/26 21:45:08.0436 5300 Serenum (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
2011/05/26 21:45:08.0566 5300 Serial (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
2011/05/26 21:45:08.0587 5300 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
2011/05/26 21:45:08.0617 5300 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
2011/05/26 21:45:08.0652 5300 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
2011/05/26 21:45:08.0670 5300 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
2011/05/26 21:45:08.0793 5300 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
2011/05/26 21:45:08.0820 5300 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
2011/05/26 21:45:08.0835 5300 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
2011/05/26 21:45:08.0855 5300 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
2011/05/26 21:45:08.0915 5300 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
2011/05/26 21:45:08.0959 5300 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
2011/05/26 21:45:09.0019 5300 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
2011/05/26 21:45:09.0082 5300 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys
2011/05/26 21:45:09.0258 5300 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys
2011/05/26 21:45:09.0340 5300 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys
2011/05/26 21:45:09.0407 5300 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
2011/05/26 21:45:09.0432 5300 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
2011/05/26 21:45:09.0453 5300 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
2011/05/26 21:45:09.0591 5300 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
2011/05/26 21:45:09.0690 5300 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys
2011/05/26 21:45:09.0746 5300 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys
2011/05/26 21:45:09.0799 5300 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
2011/05/26 21:45:09.0904 5300 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
2011/05/26 21:45:10.0071 5300 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
2011/05/26 21:45:10.0123 5300 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
2011/05/26 21:45:10.0181 5300 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
2011/05/26 21:45:10.0255 5300 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/05/26 21:45:10.0280 5300 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
2011/05/26 21:45:10.0370 5300 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
2011/05/26 21:45:10.0531 5300 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
2011/05/26 21:45:10.0599 5300 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
2011/05/26 21:45:10.0641 5300 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
2011/05/26 21:45:10.0689 5300 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
2011/05/26 21:45:10.0714 5300 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
2011/05/26 21:45:10.0871 5300 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
2011/05/26 21:45:10.0942 5300 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
2011/05/26 21:45:11.0028 5300 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
2011/05/26 21:45:11.0084 5300 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
2011/05/26 21:45:11.0238 5300 usbbus (cccece399b1990d63bfc8de8161dd838) C:\Windows\system32\DRIVERS\lgusbbus.sys
2011/05/26 21:45:11.0311 5300 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/05/26 21:45:11.0351 5300 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
2011/05/26 21:45:11.0417 5300 UsbDiag (b2ef4693e17404a178da88318c5236b8) C:\Windows\system32\DRIVERS\lgusbdiag.sys
2011/05/26 21:45:11.0490 5300 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
2011/05/26 21:45:11.0601 5300 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
2011/05/26 21:45:11.0671 5300 USBModem (eb16939525ed91fb649ec68afc865dce) C:\Windows\system32\DRIVERS\lgusbmodem.sys
2011/05/26 21:45:11.0700 5300 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys
2011/05/26 21:45:11.0761 5300 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
2011/05/26 21:45:11.0803 5300 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
2011/05/26 21:45:12.0031 5300 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/05/26 21:45:12.0139 5300 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/05/26 21:45:12.0186 5300 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/05/26 21:45:12.0206 5300 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
2011/05/26 21:45:12.0356 5300 vhidmini (448baeea6b3a8284742befea4f49c04f) C:\Windows\system32\DRIVERS\walvhid.sys
2011/05/26 21:45:12.0385 5300 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
2011/05/26 21:45:12.0457 5300 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
2011/05/26 21:45:12.0487 5300 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
2011/05/26 21:45:12.0527 5300 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
2011/05/26 21:45:12.0652 5300 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
2011/05/26 21:45:12.0716 5300 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
2011/05/26 21:45:12.0787 5300 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
2011/05/26 21:45:12.0820 5300 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
2011/05/26 21:45:12.0906 5300 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/26 21:45:12.0919 5300 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/26 21:45:12.0994 5300 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
2011/05/26 21:45:13.0026 5300 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
2011/05/26 21:45:13.0161 5300 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/05/26 21:45:13.0291 5300 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
2011/05/26 21:45:13.0455 5300 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
2011/05/26 21:45:13.0599 5300 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/05/26 21:45:13.0634 5300 MBR (0x1B8) (b3847cf7ec3565ef8eadce811893a7ee) \Device\Harddisk0\DR0
2011/05/26 21:45:13.0881 5300 MBR (0x1B8) (fa753e5d7e102cc5abd3701a1955c959) \Device\Harddisk5\DR6
2011/05/26 21:45:14.0608 5300 ================================================================================
2011/05/26 21:45:14.0608 5300 Scan finished
2011/05/26 21:45:14.0608 5300 ================================================================================
2011/05/26 21:45:14.0621 1456 Detected object count: 0
2011/05/26 21:45:14.0621 1456 Actual detected object count: 0

Il retrouve rien... pfff, j'aimerai bien comprendre...

Bonsoir

Supprime la précédente version de TDssKiller.

On refais un scan TDSSKIller mais après mise à jour
? Télécharge ici : Reload_TDSSKiller

? Lance le

choisis : télécharger la dernière version

? relance-le

choisis : lancer le nettoyage

TDSSKiller va s'ouvrir , clique sur "Start Scan"

une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

? Copie/Colle son contenu dans ta prochaine réponse.

@+

ComboFix 11-05-24.06 - Multimédis 25/05/2011 21:42:22.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1687 [GMT 2:00]
Lancé depuis: c:\users\Multimédis\Desktop\asdehi.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\Ijl11.dll
c:\windows\system32\temp.005
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-04-25 au 2011-05-25 ))))))))))))))))))))))))))))))))))))
.
.
2011-05-25 19:48 . 2011-05-25 19:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-25 19:37 . 2011-05-25 19:40 -------- d-----w- C:\ComboFix
2011-05-25 19:13 . 2011-05-25 19:13 -------- d-----w- c:\program files\Windows Portable Devices
2011-05-25 19:06 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-05-25 19:06 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-05-25 19:06 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-05-25 19:03 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-05-25 19:03 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-05-25 19:03 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-05-24 19:28 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\ca-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\eu-ES
2011-05-23 20:46 . 2011-05-23 20:47 -------- d-----w- c:\windows\system32\vi-VN
2011-05-23 20:40 . 2011-05-23 20:40 -------- d-----w- c:\windows\system32\SPReview
2011-05-23 20:28 . 2009-04-10 21:43 40960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\fr\Microsoft.Ink.Resources.dll
2011-05-23 20:28 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2011-05-23 20:26 . 2009-04-10 21:28 723968 ----a-w- c:\windows\system32\powercpl.dll
2011-05-23 20:25 . 2009-04-10 21:28 2012160 ----a-w- c:\windows\system32\milcore.dll
2011-05-23 11:51 . 2011-05-23 11:51 512 ------w- C:\PhysicalMBR.bin
2011-05-22 15:17 . 2011-05-23 21:10 -------- d-----w- C:\UsbFix
2011-05-22 13:53 . 2011-05-22 13:53 -------- d-----w- C:\TDSSKiller
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 15:30 . 2011-05-21 15:50 -------- d-----w- C:\Ad-Remover
2011-05-20 19:16 . 2011-05-24 19:32 -------- d-----w- c:\program files\ZHPDiag
2011-05-20 12:12 . 2011-05-20 12:12 -------- d-----w- C:\Sun
2011-05-20 12:09 . 2011-05-20 12:09 -------- d-----w- c:\windows\AFD5ED58271A490796C22745C83BB035.TMP
2011-05-17 19:21 . 2011-05-17 19:21 -------- d-----w- c:\programdata\WindowsSearch
2011-05-17 14:02 . 2011-05-19 12:57 -------- d-----w- c:\windows\Sun
2011-05-17 09:25 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1F73000B-6346-4AD2-96A3-FA8ED21BEA54}\mpengine.dll
2011-05-14 17:04 . 2011-05-14 17:04 -------- d-----w- c:\users\Multimédis\AppData\Local\DOSBox
2011-05-14 17:03 . 2011-05-14 17:03 -------- d-----w- c:\program files\DOSBox-0.74
2011-05-14 17:01 . 2011-05-14 17:01 -------- d-----w- c:\users\Multimédis\choisissez votre répertoire d'installation
2011-05-11 07:57 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-05-01 14:36 . 2011-05-01 14:36 -------- d-----w- c:\users\UpdatusUser
2011-05-01 14:31 . 2011-05-01 14:31 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-01 14:27 . 2011-04-08 05:14 944232 ----a-w- c:\windows\system32\nvdispco3220140.dll
2011-05-01 14:27 . 2011-04-08 05:14 855656 ----a-w- c:\windows\system32\nvgenco322060.dll
2011-05-01 14:27 . 2011-04-08 05:14 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-01 14:27 . 2011-04-08 05:14 2765928 ----a-w- c:\windows\system32\nvcuvid.dll
2011-05-01 14:27 . 2011-04-08 05:14 2074216 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-05-01 14:27 . 2011-04-08 05:14 13007464 ----a-w- c:\windows\system32\nvcompiler.dll
2011-05-01 14:25 . 2011-05-01 14:38 -------- d-----w- c:\program files\NVIDIA Corporation
2011-05-01 14:25 . 2011-05-01 14:25 -------- d-----w- C:\NVIDIA
2011-05-01 14:04 . 2011-05-01 14:04 -------- d-----w- c:\program files\SystemRequirementsLab
2011-05-01 12:50 . 2011-05-01 12:50 -------- d-----w- c:\program files\Common Files\PocketSoft
2011-05-01 12:50 . 2002-02-27 15:50 197120 ----a-w- c:\windows\patchw32.dll
2011-04-27 09:19 . 2011-03-03 15:40 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-04-27 09:19 . 2011-03-03 13:35 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-23 21:10 . 2011-05-23 21:10 571268 ----a-w- C:\UsbFix_Upload_Me_PC-DE-MULTIMÉDI.zip
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-05-21 18:17 . 2011-05-21 18:17 0 ---ha-w- c:\users\Multimédis\AppData\Local\BIT5B2D.tmp
2011-04-08 05:14 . 2011-05-01 14:27 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-04-07 20:43 . 2011-04-07 20:43 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-04-07 20:43 . 2011-04-07 20:43 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-04-07 20:43 . 2011-04-07 20:43 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
2011-03-10 17:03 . 2011-04-15 14:34 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-10 17:03 . 2011-04-15 14:34 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-10 13:39 . 2008-09-17 13:29 14744 ----a-w- c:\users\Multimédis\AppData\Roaming\Microsoft\IdentityCRL\production\ppcrlconfig.dll
2011-03-03 15:42 . 2011-04-15 14:34 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 09:19 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 09:19 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 09:19 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 09:19 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:25 . 2011-04-15 14:34 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-15 14:34 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-27 6295552]
"OPTENET_GUI"="c:\progra~1\CONTRO~1\bin\optgui.exe" [2006-12-05 400408]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-07-07 122368]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-07 198160]
"TomTomHOME.exe"="c:\program files\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024]
"MacrokeyManager"="WTMKM.exe" [2008-10-22 1969824]
"Ulead AutoDetector v2"="c:\program files\Common Files\Ulead Systems\AutoDetector\monitor.exe" [2006-11-29 90112]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-04-12 1135912]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"lxebmon.exe"="c:\program files\Lexmark Pro200-S500 Series\lxebmon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark Pro200-S500 Series\ezprint.exe" [2010-05-05 148280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-08-24 13580832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-08-24 92704]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"="c:\program files\Common Files\Ahead\Lib\NMFirstStart.exe" [2007-06-27 16680]
.
c:\users\Multim'dis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AMService;AMService;c:\windows\TEMP\yunv\setup.exe run [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2009-04-25 266240]
R2 fhrkjzul;ReadyBoost Caching Monitor;c:\windows\System32\svchost.exe [2008-01-21 21504]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxebserv.exe [2010-04-14 193192]
R2 OPTENET_FILTER;Orange Contrôle Parental;c:\program files\Controle Parental\bin\optproxy.exe [2006-12-05 624504]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 135664]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe [2010-04-14 598696]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2008-10-29 372384]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
fhrkjzul
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-29 11:08]
.
2011-05-25 c:\windows\Tasks\User_Feed_Synchronization-{679FE3C9-E457-4DFC-9E40-640F983106D1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files\Controle Parental\bin\lsp.dll
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - hxxp://www.consoclicker.com/TNSClickrb.CAB
FF - ProfilePath - c:\users\Multimédis\AppData\Roaming\Mozilla\Firefox\Profiles\zhqq4903.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKCU-Run-ares - c:\program files\Ares\Ares.exe
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-25 21:48
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'lsass.exe'(652)
c:\program files\Controle Parental\bin\lsp.dll
.
Heure de fin: 2011-05-25 21:51:33
ComboFix-quarantined-files.txt 2011-05-25 19:51
.
Avant-CF: 222 828 773 376 octets libres
Après-CF: 222 765 690 880 octets libres
.
- - End Of File - - E8A7B6BFA5A6D4D428FB3DCCEC62057D

Toujours pas d'internet :'(

Bonsoir

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

@+