Bonjour,

Mon fils a fait appel à vos services, il y a de ça quelques années, et n'a pas tari d'éloges sur vos compétences et votre service de dépannage et de nettoyage. Malheureusement, voilà mon tour de faire appel à vous.

Voici mon problème : tout a commencé par une diminution du temps de traitement de mon PC. Puis se sont ajoutées des fenêtres web intempestives (principalement des pubs), et la fermeture automatique de mes fenêtres web. Finalement, un semblant d'antivirus nommé Zentom System Guard s'est installé en roi et maître, gelant mon antivirus (McAfee), mon gestionnaire des tâches et mon programme de désinstallation de programmes du Panneau de contrôle. Mon PC est devenu inutilisable.

Évidemment, le problème démarre de nombreux processus iexplorer.exe qui consumment énormément et ralentissent tout. J'arrive à les fermer un à un quand je parviens à me rendre dans mon gestionnaire des tâches.

J'ai installé le programme HiJackThis de votre site, et après avoir lancé la commande Scan une première fois sans résultat de traitement apparent, je n'arrive malheureusement plus à démarrer HiJackThis. Le système me retourne le message d'erreur suivant : Windows ne parvient pas à accéder au prériphérique, au chemin d'accès ou au fichier spécifié. Vous ne disposez peut-être pas des autorisations appropriés pour avoir accès à l'élément.

Je vous écris ce message d'un autre PC, étant donné que mes fenêtres web se ferment automatiquement à tout moment. Je ne sais plus quoi faire et je suis bien embêtée car le PC infesté est celui que j'utilise pour mon travail.

Pouvez-vous m'aider?

Une maman désespérée

Bonjour CanadienneEnPéril


On va passer par autre chose pour commencer

- Télécharge RogueKiller (par tigzy) sur le bureau

- Quitte tous tes programmes en cours

- Lance RogueKiller.exe.

- Sous Vista/Seven, clique droit et lancer en tant qu'administrateur

- Lorsque demandé, tape 2 (delete) et valide

- Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse

Note:
Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois.

Merci de me répondre si rapidement!
Voici le rapport :

RogueKiller V6.1.2 [07/10/2011] par Tigzy
contact sur http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion- ... ntees.html

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: MForget [Droits d'admin]
Mode: Suppression -- Date : 09/10/2011 11:31:44

Processus malicieux: 4
[SUSP PATH] 2575606203:1147042662.exe -- c:\windows\2575606203:1147042662.exe -> KILLED [TermProc]
[SUSP PATH] sttray.exe -- c:\windows\sttray.exe -> KILLED [TermProc]
[SUSP PATH] finc70dkk.exe -- c:\documents and settings\mforget\application data\07a3224b98304c30273b2f72518028c5\finc70dkk.exe -> KILLED [TermProc]
[RESIDUE] 2575606203:1147042662.exe -- c:\windows\2575606203:1147042662.exe -> KILLED [TermProc]

Entrees de registre: 3
[SUSP PATH] HKCU\[...]\Run : finc70dkk.exe ("C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\finc70dkk.exe") -> DELETED
[SUSP PATH] Zentom System Guard.lnk : C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\finc70dkk.exe -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Fichiers / Dossiers particuliers:
[FILE] KB19383312.exe : c:\documents and settings\mforget\application data\adobe\plugs\KB19383312.exe --> REMOVED
[FILE] KB19388093.exe : c:\documents and settings\mforget\application data\adobe\plugs\KB19388093.exe --> REMOVED
[FOLDER] plugs : c:\documents and settings\mforget\application data\adobe\plugs --> REMOVED
[FOLDER] shed : c:\documents and settings\mforget\application data\adobe\shed --> REMOVED

Driver: [LOADED]

Fichier HOSTS:


Termine : << RKreport[1].txt >>
RKreport[1].txt

On peut passer au scan cette fois


Télécharge ZHPDiag( de Nicolas coolman ).

- Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut en n'oubliant pas de cocher " Créer une icône sur le bureau "
Pour Vista et Windows 7 clic droit sur le fichier téléchargé et Exécuter en tant qu'administrateur

- Double clique sur l'icône ZHPDiag présente sur ton bureau

- Clique sur la loupe en haut à gauche, le scan va se lancer



- Le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau (ZHPDiag.txt) .



- Sinon le rapport sera aussi sauvegardé dans ce dossier ==> C:\Program files\ZHPDiag

Pour poster le rapport:

- Rend toi sur Cjoint

- Clique sur Parcourir dans la partie Joindre un fichier

- Séléctionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

- Clique ensuite sur " Créer le lien cjoint " et copie/colle le dans ton prochain message

Je dois rémorcer mon PC. Pas été en mesure d'installer AHPDiag (trop de processus iexplorer) et une fois les processus iexplorer supprimés, perdu ma barre de tâches. Plus rien sur le PC. Alors réamorçage nécessaire. Je reviens dès que tout sera revenu sur mon PC.

Bon, je n'ai pas été capable d'installer la version de ZHPDiag que vous avez proposée. Je crois avoir installé la plus récente version (1.28.1367) qui ne présente ni loupe ni disquette. J'ai cliqué sur l'icône ZHPDiag pour lancer l'outil puis sur un petit diable (aucune info-bulle pour m'indiquer le rôle de chaque icône... grr...) j'ai obtenu le rapport qui suit. Est-ce que ça vous aide? Mon PC répond très très lentement et ouvre des dizaines de fenêtres web pendant que je vous écris...


Rapport de ZHPScan v1.28 par Nicolas Coolman, Update du 05/10/2011
Run by MForget at 2011-10-09 12:06:55
Web site : http://www.premiumorange.com/zeb-help-p ... pdiag.html


---\\ Clés de Registre trouvées (Registry Keys found)
*** None ***

---\\ Valeurs de clé de Registre trouvées (Registry Values found)
*** None ***

---\\ Dossiers trouvés (Directories found)
*** None ***

---\\ Fichiers trouvés (Files found)
*** None ***

---\\ Bilan de la recherche (Scan Result)
Database Version : 8700 - (05/10/2011)
Clés trouvées (Keys found) : 0
Valeurs de clé trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

End of the scan in 00mn 18s

Ouf!! J'ai dû travailler for pour y arriver. J'espère seulement que le contenu du lien est le résultat attendu... C'est vraiment pénible d'utiliser mon PC...

http://cjoint.com/?AJjtImC051K

Désolé, c'est le changelog que tu as posté

Tu trouveras le rapport ici

C:\ZHP\ZHPDiag.txt

Mon répertoire C:\ZHP ne contient que le sous-répertoire Quarantine qui est vide. Aucun fichier.

Et comble du malheur, je n'arrive plus à lancer ZHPDiag, même message que dans le cas de HiJackThis (Windows ne parvient pas à accéder au périphérique, au chemin d'accès ou au fichier spécifié. Vous ne disposez peut-être pas des autorisations appropriés pour avoir accès à l'élément).

Et toujours cette tonne de fenêtres web qui s'affichent...........................

Y a-t-il une suite possible???

C'est curieux, cette infection a l'air coriace

Télécharger tdsskiller.zip depuis le lien ci-dessous:
http://support.kaspersky.com/downloads/ ... killer.zip

Extraire de l'archive téléchargée le fichier TDSSKiller.exe et le placer sur le Bureau.


Faire un double clic sur TDSSKiller.exe pour le lancer.

L'écran de TDSSKiller s'affiche:

Cliquer sur Start scan pour lancer l'analyse.

Lorsque l'outil a terminé son travail d'inspection, si des nuisibles ("Malicious objects") ont été trouvés, vérifier que l'option (Cure) est sélectionnée, puis cliquer sur le bouton (Continue), puis sur le bouton (Reboot now)

Envoyer en réponse:
*- le rapport de TDSSKiller (contenu du fichier SystemDrive\TDSSKiller.Version_Date_Heure_log.txt)
[SystemDrive représente la partition sur laquelle est installé le système, généralement C:]

OK, j'essaie.

J'ai réinstallé ZHPDiag et ai tenté de relancer le diagnostic. Le système s'arrête à 89% avec le message : L'ordinal 1108 est introuvable dans la bibliothèque de liaisons dynamique WSOCK32.dll (si ça peux t'aider!!).

Bon, je retourne tenter de télécharger TDSSKiller sur mon pauvre PC malade...

Je verrais le rapport demain après midi (heure française) , je me lève très tot demain matin

A demain et bonne nuit a toi

Bon, j'ai installé TDSSKiller, puis ai lancé Start Scan. Après avoir réamorcé mon PC, j'arrive à ouvrir une page web, mais il ne veut ni afficher ma page d'accueil (Google) ni aucune autre page web. J'obtiens toujours le message d'erreur "Internet Explorer ne peut pas afficher cette page Web". Je ne peux donc pas me connecter à Lilbellules.ch à partir de mon PC infecté.

J'ai obtenu un log.txt que j'ai copié sur une carte USB pour pouvoir t'en copier le contenu ici sur mon autre PC. Laisse-moi savoir ce que je dois faire. Merci.

20:09:11.0140 4804 TDSS rootkit removing tool 2.6.6.0 Oct 7 2011 12:45:24
20:09:12.0375 4804 ============================================================
20:09:12.0375 4804 Current date / time: 2011/10/09 20:09:12.0375
20:09:12.0375 4804 SystemInfo:
20:09:12.0375 4804
20:09:12.0375 4804 OS Version: 5.1.2600 ServicePack: 3.0
20:09:12.0375 4804 Product type: Workstation
20:09:12.0375 4804 ComputerName: INSPIRON6400
20:09:12.0375 4804 UserName: MForget
20:09:12.0375 4804 Windows directory: C:\WINDOWS
20:09:12.0375 4804 System windows directory: C:\WINDOWS
20:09:12.0375 4804 Processor architecture: Intel x86
20:09:12.0375 4804 Number of processors: 2
20:09:12.0375 4804 Page size: 0x1000
20:09:12.0375 4804 Boot type: Normal boot
20:09:12.0375 4804 ============================================================
20:09:13.0796 4804 Initialize success
20:09:28.0765 3996 ============================================================
20:09:28.0765 3996 Scan started
20:09:28.0765 3996 Mode: Manual;
20:09:28.0765 3996 ============================================================
20:09:31.0281 3996 Abiosdsk - ok
20:09:31.0312 3996 abp480n5 - ok
20:09:31.0500 3996 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:09:31.0500 3996 ACPI - ok
20:09:31.0640 3996 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
20:09:31.0640 3996 ACPIEC - ok
20:09:31.0765 3996 adpu160m - ok
20:09:31.0921 3996 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
20:09:31.0968 3996 aec - ok
20:09:32.0328 3996 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
20:09:32.0359 3996 AFD - ok
20:09:32.0375 3996 Aha154x - ok
20:09:32.0437 3996 aic78u2 - ok
20:09:32.0468 3996 aic78xx - ok
20:09:32.0531 3996 AliIde - ok
20:09:32.0562 3996 amsint - ok
20:09:32.0640 3996 APPDRV (ec94e05b76d033b74394e7b2175103cf) C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS
20:09:32.0656 3996 APPDRV - ok
20:09:32.0718 3996 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
20:09:32.0718 3996 Arp1394 - ok
20:09:32.0765 3996 asc - ok
20:09:32.0781 3996 asc3350p - ok
20:09:32.0812 3996 asc3550 - ok
20:09:32.0859 3996 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:09:32.0859 3996 AsyncMac - ok
20:09:32.0875 3996 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
20:09:32.0875 3996 atapi - ok
20:09:32.0890 3996 Atdisk - ok
20:09:33.0031 3996 ati2mtag (2573c08729dd52b7b4f18df1592e0b37) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
20:09:33.0046 3996 ati2mtag - ok
20:09:33.0078 3996 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:09:33.0078 3996 Atmarpc - ok
20:09:33.0265 3996 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
20:09:33.0265 3996 audstub - ok
20:09:33.0312 3996 bba18499 (126d8ca729b29cdf571f783c83d63104) C:\WINDOWS\2575606203:1147042662.exe
20:09:33.0375 3996 Suspicious file (Hidden): C:\WINDOWS\2575606203:1147042662.exe. md5: 126d8ca729b29cdf571f783c83d63104
20:09:33.0375 3996 bba18499 ( HiddenFile.Multi.Generic ) - warning
20:09:33.0375 3996 bba18499 - detected HiddenFile.Multi.Generic (1)
20:09:33.0484 3996 BCM43XX (b89bcf0a25aeb3b47030ac83287f894a) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
20:09:33.0515 3996 BCM43XX - ok
20:09:33.0546 3996 bcm4sbxp (cd4646067cc7dcba1907fa0acf7e3966) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
20:09:33.0546 3996 bcm4sbxp - ok
20:09:33.0593 3996 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
20:09:33.0593 3996 Beep - ok
20:09:33.0625 3996 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
20:09:33.0625 3996 cbidf2k - ok
20:09:33.0640 3996 cd20xrnt - ok
20:09:33.0656 3996 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
20:09:33.0656 3996 Cdaudio - ok
20:09:33.0703 3996 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
20:09:33.0703 3996 Cdfs - ok
20:09:33.0734 3996 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:09:33.0734 3996 Cdrom - ok
20:09:33.0781 3996 cfwids (142e4e00ad91600a2d20692ed52fafc8) C:\WINDOWS\system32\drivers\cfwids.sys
20:09:33.0781 3996 cfwids - ok
20:09:33.0796 3996 Changer - ok
20:09:33.0828 3996 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
20:09:33.0828 3996 CmBatt - ok
20:09:33.0828 3996 CmdIde - ok
20:09:33.0843 3996 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
20:09:33.0843 3996 Compbatt - ok
20:09:33.0875 3996 Cpqarray - ok
20:09:33.0890 3996 dac2w2k - ok
20:09:33.0890 3996 dac960nt - ok
20:09:33.0906 3996 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
20:09:33.0921 3996 Disk - ok
20:09:34.0000 3996 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
20:09:34.0031 3996 dmboot - ok
20:09:34.0046 3996 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
20:09:34.0046 3996 dmio - ok
20:09:34.0093 3996 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
20:09:34.0093 3996 dmload - ok
20:09:34.0140 3996 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
20:09:34.0140 3996 DMusic - ok
20:09:34.0156 3996 dpti2o - ok
20:09:34.0171 3996 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
20:09:34.0171 3996 drmkaud - ok
20:09:34.0218 3996 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
20:09:34.0234 3996 Fastfat - ok
20:09:34.0281 3996 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
20:09:34.0281 3996 Fdc - ok
20:09:34.0296 3996 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
20:09:34.0296 3996 Fips - ok
20:09:34.0312 3996 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
20:09:34.0312 3996 Flpydisk - ok
20:09:34.0343 3996 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
20:09:34.0359 3996 FltMgr - ok
20:09:34.0406 3996 fssfltr (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
20:09:34.0406 3996 fssfltr - ok
20:09:34.0421 3996 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:09:34.0421 3996 Fs_Rec - ok
20:09:34.0437 3996 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:09:34.0437 3996 Ftdisk - ok
20:09:34.0500 3996 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:09:34.0515 3996 Gpc - ok
20:09:34.0593 3996 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
20:09:34.0593 3996 HDAudBus - ok
20:09:34.0656 3996 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:09:34.0656 3996 HidUsb - ok
20:09:34.0687 3996 hpn - ok
20:09:34.0718 3996 hpt3xx - ok
20:09:34.0765 3996 HSFHWAZL (1c8caa80e91fb71864e9426f9eed048d) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
20:09:34.0781 3996 HSFHWAZL - ok
20:09:34.0812 3996 HSF_DPV (698204d9c2832e53633e53a30a53fc3d) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
20:09:34.0890 3996 HSF_DPV - ok
20:09:34.0953 3996 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
20:09:34.0968 3996 HTTP - ok
20:09:34.0968 3996 i2omgmt - ok
20:09:34.0984 3996 i2omp - ok
20:09:35.0046 3996 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:09:35.0046 3996 i8042prt - ok
20:09:35.0062 3996 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\drivers\Imapi.sys
20:09:35.0062 3996 Imapi - ok
20:09:35.0109 3996 ini910u - ok
20:09:35.0125 3996 IntelIde - ok
20:09:35.0171 3996 intelppm (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:09:35.0187 3996 intelppm - ok
20:09:35.0218 3996 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
20:09:35.0218 3996 ip6fw - ok
20:09:35.0250 3996 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:09:35.0250 3996 IpFilterDriver - ok
20:09:35.0281 3996 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:09:35.0281 3996 IpInIp - ok
20:09:35.0343 3996 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:09:35.0359 3996 IpNat - ok
20:09:35.0375 3996 IPSec (1ba57c60d4cc3c37fc9423cc59f374bc) C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:09:35.0375 3996 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ipsec.sys. Real md5: 1ba57c60d4cc3c37fc9423cc59f374bc, Fake md5: 23c74d75e36e7158768dd63d92789a91
20:09:35.0375 3996 IPSec ( ForgedFile.Multi.Generic ) - warning
20:09:35.0375 3996 IPSec - detected ForgedFile.Multi.Generic (1)
20:09:35.0406 3996 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
20:09:35.0406 3996 IRENUM - ok
20:09:35.0468 3996 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:09:35.0468 3996 isapnp - ok
20:09:35.0500 3996 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:09:35.0500 3996 Kbdclass - ok
20:09:35.0562 3996 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
20:09:35.0562 3996 kbdhid - ok
20:09:35.0656 3996 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
20:09:35.0656 3996 kmixer - ok
20:09:35.0875 3996 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
20:09:35.0875 3996 KSecDD - ok
20:09:35.0921 3996 lbrtfdc - ok
20:09:36.0078 3996 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
20:09:36.0078 3996 mdmxsdk - ok
20:09:36.0187 3996 mfeapfk (c373a719d704d12f5a4503f6f10239ff) C:\WINDOWS\system32\drivers\mfeapfk.sys
20:09:36.0187 3996 mfeapfk - ok
20:09:36.0281 3996 mfeavfk (851ad52871b62457152a8acaff0c632d) C:\WINDOWS\system32\drivers\mfeavfk.sys
20:09:36.0281 3996 mfeavfk - ok
20:09:36.0406 3996 mfebopk (5b9ffb027669a8ac30aac0b4996bc603) C:\WINDOWS\system32\drivers\mfebopk.sys
20:09:36.0421 3996 mfebopk - ok
20:09:36.0500 3996 mfefirek (2cabe72e53365834cb9969dde47bd690) C:\WINDOWS\system32\drivers\mfefirek.sys
20:09:36.0500 3996 mfefirek - ok
20:09:36.0562 3996 mfehidk (46db8f041e928bdc17b8daba249a2148) C:\WINDOWS\system32\drivers\mfehidk.sys
20:09:36.0578 3996 mfehidk - ok
20:09:36.0625 3996 mfendisk (348e3db31cf458adaa3798fb8af659c3) C:\WINDOWS\system32\DRIVERS\mfendisk.sys
20:09:36.0625 3996 mfendisk - ok
20:09:36.0625 3996 mfendiskmp (348e3db31cf458adaa3798fb8af659c3) C:\WINDOWS\system32\DRIVERS\mfendisk.sys
20:09:36.0625 3996 mfendiskmp - ok
20:09:36.0687 3996 mferkdet (316fd7c31cd57ca793fb10912aeeb2d2) C:\WINDOWS\system32\drivers\mferkdet.sys
20:09:36.0687 3996 mferkdet - ok
20:09:36.0734 3996 mfetdi2k (2026fe7c9e6b26ffeb08cd89c6326b91) C:\WINDOWS\system32\drivers\mfetdi2k.sys
20:09:36.0734 3996 mfetdi2k - ok
20:09:36.0796 3996 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
20:09:36.0796 3996 mnmdd - ok
20:09:36.0843 3996 MOBKFilter (e896775837a8bce436348df460522394) C:\WINDOWS\system32\DRIVERS\MOBK.sys
20:09:36.0843 3996 MOBKFilter - ok
20:09:36.0906 3996 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
20:09:36.0906 3996 Modem - ok
20:09:36.0906 3996 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:09:36.0921 3996 Mouclass - ok
20:09:36.0968 3996 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:09:36.0968 3996 mouhid - ok
20:09:36.0984 3996 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
20:09:36.0984 3996 MountMgr - ok
20:09:36.0984 3996 mraid35x - ok
20:09:37.0015 3996 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:09:37.0015 3996 MRxDAV - ok
20:09:37.0078 3996 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:09:37.0156 3996 MRxSmb - ok
20:09:37.0218 3996 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
20:09:37.0218 3996 Msfs - ok
20:09:37.0281 3996 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:09:37.0281 3996 MSKSSRV - ok
20:09:37.0296 3996 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:09:37.0296 3996 MSPCLOCK - ok
20:09:37.0312 3996 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
20:09:37.0312 3996 MSPQM - ok
20:09:37.0359 3996 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:09:37.0359 3996 mssmbios - ok
20:09:37.0375 3996 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
20:09:37.0390 3996 Mup - ok
20:09:37.0437 3996 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
20:09:37.0437 3996 NDIS - ok
20:09:37.0500 3996 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:09:37.0500 3996 NdisTapi - ok
20:09:37.0515 3996 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:09:37.0531 3996 Ndisuio - ok
20:09:37.0546 3996 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:09:37.0546 3996 NdisWan - ok
20:09:37.0609 3996 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
20:09:37.0609 3996 NDProxy - ok
20:09:37.0625 3996 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
20:09:37.0625 3996 NetBIOS - ok
20:09:37.0656 3996 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
20:09:37.0656 3996 NetBT - ok
20:09:37.0703 3996 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
20:09:37.0703 3996 NIC1394 - ok
20:09:37.0718 3996 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
20:09:37.0718 3996 Npfs - ok
20:09:37.0765 3996 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
20:09:37.0781 3996 Ntfs - ok
20:09:37.0828 3996 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
20:09:37.0828 3996 Null - ok
20:09:37.0859 3996 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:09:37.0859 3996 NwlnkFlt - ok
20:09:37.0906 3996 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:09:37.0906 3996 NwlnkFwd - ok
20:09:37.0953 3996 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
20:09:37.0968 3996 ohci1394 - ok
20:09:38.0000 3996 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\drivers\Parport.sys
20:09:38.0000 3996 Parport - ok
20:09:38.0015 3996 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
20:09:38.0015 3996 PartMgr - ok
20:09:38.0078 3996 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
20:09:38.0078 3996 ParVdm - ok
20:09:38.0093 3996 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
20:09:38.0171 3996 PCI - ok
20:09:38.0187 3996 PCIDump - ok
20:09:38.0203 3996 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
20:09:38.0218 3996 PCIIde - ok
20:09:38.0234 3996 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys
20:09:38.0234 3996 Pcmcia - ok
20:09:38.0250 3996 PDCOMP - ok
20:09:38.0265 3996 PDFRAME - ok
20:09:38.0265 3996 PDRELI - ok
20:09:38.0281 3996 PDRFRAME - ok
20:09:38.0296 3996 perc2 - ok
20:09:38.0312 3996 perc2hib - ok
20:09:38.0359 3996 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:09:38.0359 3996 PptpMiniport - ok
20:09:38.0390 3996 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\WINDOWS\system32\DRIVERS\processr.sys
20:09:38.0390 3996 Processor - ok
20:09:38.0406 3996 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
20:09:38.0406 3996 PSched - ok
20:09:38.0421 3996 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:09:38.0421 3996 Ptilink - ok
20:09:38.0421 3996 ql1080 - ok
20:09:38.0437 3996 Ql10wnt - ok
20:09:38.0437 3996 ql12160 - ok
20:09:38.0453 3996 ql1240 - ok
20:09:38.0468 3996 ql1280 - ok
20:09:38.0484 3996 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:09:38.0484 3996 RasAcd - ok
20:09:38.0500 3996 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:09:38.0500 3996 Rasl2tp - ok
20:09:38.0500 3996 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:09:38.0500 3996 RasPppoe - ok
20:09:38.0515 3996 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
20:09:38.0515 3996 Raspti - ok
20:09:38.0546 3996 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:09:38.0546 3996 Rdbss - ok
20:09:38.0562 3996 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:09:38.0562 3996 RDPCDD - ok
20:09:38.0578 3996 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:09:38.0578 3996 rdpdr - ok
20:09:38.0625 3996 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
20:09:38.0625 3996 RDPWD - ok
20:09:38.0671 3996 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERS\redbook.sys
20:09:38.0671 3996 redbook - ok
20:09:38.0718 3996 rimmptsk (d85e3fa9f5b1f29bb4ed185c450d1470) C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
20:09:38.0718 3996 rimmptsk - ok
20:09:38.0734 3996 rimsptsk (db8eb01c58c9fada00c70b1775278ae0) C:\WINDOWS\system32\DRIVERS\rimsptsk.sys
20:09:38.0734 3996 rimsptsk - ok
20:09:38.0750 3996 rismxdp (6c1f93c0760c9f79a1869d07233df39d) C:\WINDOWS\system32\DRIVERS\rixdptsk.sys
20:09:38.0750 3996 rismxdp - ok
20:09:38.0781 3996 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
20:09:38.0781 3996 sdbus - ok
20:09:38.0812 3996 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:09:38.0812 3996 Secdrv - ok
20:09:38.0859 3996 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\drivers\Serial.sys
20:09:38.0859 3996 Serial - ok
20:09:38.0890 3996 sffdisk (0fa803c64df0914b41f807ea276bf2a6) C:\WINDOWS\system32\DRIVERS\sffdisk.sys
20:09:38.0890 3996 sffdisk - ok
20:09:38.0906 3996 sffp_sd (c17c331e435ed8737525c86a7557b3ac) C:\WINDOWS\system32\DRIVERS\sffp_sd.sys
20:09:38.0906 3996 sffp_sd - ok
20:09:38.0937 3996 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
20:09:38.0937 3996 Sfloppy - ok
20:09:38.0953 3996 Simbad - ok
20:09:38.0968 3996 Sparrow - ok
20:09:39.0015 3996 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
20:09:39.0015 3996 splitter - ok
20:09:39.0046 3996 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
20:09:39.0046 3996 sr - ok
20:09:39.0078 3996 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
20:09:39.0078 3996 Srv - ok
20:09:39.0406 3996 STHDA (951801dfb54d86f611f0af47825476f9) C:\WINDOWS\system32\drivers\sthda.sys
20:09:39.0421 3996 STHDA - ok
20:09:39.0453 3996 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
20:09:39.0453 3996 swenum - ok
20:09:39.0500 3996 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
20:09:39.0500 3996 swmidi - ok
20:09:39.0515 3996 symc810 - ok
20:09:39.0515 3996 symc8xx - ok
20:09:39.0531 3996 sym_hi - ok
20:09:39.0546 3996 sym_u3 - ok
20:09:39.0609 3996 SynTP (fa2daa32bed908023272a0f77d625dae) C:\WINDOWS\system32\DRIVERS\SynTP.sys
20:09:39.0609 3996 SynTP - ok
20:09:39.0625 3996 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
20:09:39.0625 3996 sysaudio - ok
20:09:39.0703 3996 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:09:39.0703 3996 Tcpip - ok
20:09:39.0734 3996 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
20:09:39.0734 3996 TDPIPE - ok
20:09:39.0750 3996 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
20:09:39.0765 3996 TDTCP - ok
20:09:39.0796 3996 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
20:09:39.0796 3996 TermDD - ok
20:09:39.0812 3996 TosIde - ok
20:09:39.0875 3996 TrueSight (4bfab463e1d1f20dfa83a04a9698934d) c:\windows\system32\drivers\TrueSight.sys
20:09:39.0890 3996 TrueSight - ok
20:09:39.0921 3996 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
20:09:39.0921 3996 Udfs - ok
20:09:39.0937 3996 ultra - ok
20:09:40.0000 3996 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
20:09:40.0015 3996 Update - ok
20:09:40.0062 3996 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
20:09:40.0062 3996 usbccgp - ok
20:09:40.0171 3996 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:09:40.0187 3996 usbehci - ok
20:09:40.0375 3996 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:09:40.0375 3996 usbhub - ok
20:09:40.0437 3996 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
20:09:40.0437 3996 usbscan - ok
20:09:40.0468 3996 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:09:40.0468 3996 USBSTOR - ok
20:09:40.0515 3996 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:09:40.0515 3996 usbuhci - ok
20:09:40.0531 3996 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
20:09:40.0531 3996 VgaSave - ok
20:09:40.0609 3996 ViaIde - ok
20:09:40.0703 3996 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
20:09:40.0703 3996 VolSnap - ok
20:09:40.0828 3996 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:09:40.0828 3996 Wanarp - ok
20:09:40.0921 3996 WDICA - ok
20:09:40.0984 3996 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
20:09:41.0015 3996 wdmaud - ok
20:09:41.0390 3996 winachsf (74cf3f2e4e40c4a2e18d39d6300a5c24) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
20:09:41.0578 3996 winachsf - ok
20:09:41.0671 3996 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
20:09:41.0671 3996 WmiAcpi - ok
20:09:41.0765 3996 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
20:09:41.0765 3996 WudfPf - ok
20:09:41.0781 3996 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
20:09:41.0781 3996 WudfRd - ok
20:09:41.0796 3996 MBR (0x1B8) (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
20:09:41.0937 3996 \Device\Harddisk0\DR0 - ok
20:09:41.0937 3996 Boot (0x1200) (c74fbbc3f321d1f416ed935e7f688159) \Device\Harddisk0\DR0\Partition0
20:09:41.0937 3996 \Device\Harddisk0\DR0\Partition0 - ok
20:09:41.0937 3996 ============================================================
20:09:41.0937 3996 Scan finished
20:09:41.0937 3996 ============================================================
20:09:41.0953 5244 Detected object count: 2
20:09:41.0953 5244 Actual detected object count: 2
20:10:21.0718 5244 HKLM\SYSTEM\ControlSet001\services\bba18499 - will be deleted on reboot
20:10:21.0718 5244 HKLM\SYSTEM\ControlSet002\services\bba18499 - will be deleted on reboot
20:10:21.0718 5244 C:\WINDOWS\2575606203:1147042662.exe - will be deleted on reboot
20:10:21.0718 5244 bba18499 ( HiddenFile.Multi.Generic ) - User select action: Delete
20:10:21.0734 5244 HKLM\SYSTEM\ControlSet001\services\IPSec - will be deleted on reboot
20:10:21.0734 5244 HKLM\SYSTEM\ControlSet002\services\IPSec - will be deleted on reboot
20:10:21.0734 5244 C:\WINDOWS\system32\DRIVERS\ipsec.sys - will be deleted on reboot
20:10:21.0734 5244 IPSec ( ForgedFile.Multi.Generic ) - User select action: Delete
20:10:27.0062 2928 Deinitialize success

Bonjour CanadienneEnPéril, pas très pratique le decalage horaire

Essaye de télécharger ZHPDiag , cette fois l'outil, devrait fonctionner


En cas d'échec de la manip, passe ce scan à la place



Télécharge OTL sur le Bureau. http://oldtimer.geekstogo.com/OTL.exe

- Fait un double clic sur l'icône pour le lancer. Vérifie que toutes les autres fenêtres sont fermées afin qu'il s'exécute sans interruption.

- Quand la fenêtre apparaît, sous Rapport en haut, coche Rapport minimal.

- Sous Registre: standard coche Tous.

- Coche les cases à coté de Recherche Lop et Recherche Purity.

- Clique sur le bouton Analyse. Ne modifie aucun paramètre sans qu'on ait dit de le faire. L'analyse ne va pas durer longtemps.


* Quand l'analyse est terminée, deux fenêtres du Bloc-notes vont s'ouvrir. OTL.Txt et Extras.Txt.
Ces fichiers sont sauvegardés au même endroit que OTL.

Pour poster le rapport:

- Rend toi sur Cjoint

- Clique sur Parcourir dans la partie Joindre un fichier

- Séléctionne le rapport OTL.Txt qui se trouve sur ton bureau

- Clique ensuite sur " Créer le lien cjoint " et copie/colle le dans ton prochain message

- Recommence avec le rapport Extras.Txt.

Bonjour Zaede,

Pas pratique le décalage en effet.

Comme je le dsiais dans mon message précédent, je n'arrive plus à afficher aucune page web quand je lance Internet Explorer.

J'ai réinstaller ZHPDiag à partir de l'icône qui était sur mon bureau, mais quand je lance l'appllication, j'ai le message suivant dans une boîte ZHPDiag : Problème de connexion Internet (Could no bind socket. Address and port are already in use.)

Je n'arrive pas à ouvrir quelque page web que ce soit sur Internet Explorer. Je ne peux donc pas télécharger OTL car je ne peux pas afficher Libellules.ch....

Là, je suis vraiment découragée.... ((((

Attends!!! Fausse alerte. ZHPDIag a fini par donner un rapport. Je le copie sur ma clé USB et je vais le copier ici.

Voici le rapport ZHPDiag. Je te rappelle que sur mon PC infecté, je n'arrive pas à ouvrir de page web. Je ne peux donc pas me connecter à libellules.ch pour télécharger quoi que ce soir. À moins que tu ne saches ce que je dois faire.


Rapport de ZHPDiag v1.28.1367 par Nicolas Coolman, Update du 05/10/2011
Run by MForget at 2011-10-10 12:03:02
Web site : http://www.premiumorange.com/zeb-help-p ... pdiag.html
State :


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

---\\ Windows Product Information
Windows XP Professional Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ System Information
~ Processor: x86 Family 6 Model 15 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (75% free)
System Restore: Activé (Enable)
System drive C: has 57 GB (64%) free of 88 GB

---\\ Logged in mode
~ Computer Name: INSPIRON6400
~ User Name: MForget
~ All Users Names: SUPPORT_388945a0, Pierre, HelpAssistant, ASPNET, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\MForget\Application Data\
~ %Desktop% : C:\Documents and Settings\MForget\Bureau\
~ %Favorites% : C:\Documents and Settings\MForget\Favoris\
~ %LocalAppData% : C:\Documents and Settings\MForget\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\MForget\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 57 Go of 88 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.2011-10-10 - 21:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.2011-10-10 - 21:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.3008D2F793F23FF0DDBC5A1FB9F8374F] - (.Microsoft Corporation - Internet Extensions for Win32.) (.2011-10-10 - 13:31:31.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.2011-10-10 - 21:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.355556D9E580915118CD7EF736653A89] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-10-10 - 08:22:48.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496] *1868
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.2011-10-10 - 13:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512] *1788
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2011-10-10 - 14:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744] *1804
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2011-10-10 - 13:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976] *1780
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.2011-10-10 - 20:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672] *1852
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.2011-10-10 - 11:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384] *1940
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.2011-10-10 - 21:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144] *1852
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.2011-10-10 - 13:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112] *1780
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.2011-10-10 - 13:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832] *1820
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-10-10 - 08:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320] *1844
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.2011-10-10 - 14:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816] *1788
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.2011-10-10 - 14:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976] *1788
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.2011-10-10 - 21:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384] *1852
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2011-10-10 - 14:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328] *1876
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2011-10-10 - 13:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224] *1828
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.2011-10-10 - 20:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752] *1892
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/11
~ Mes musiques (My Musics) : 1/2
~ Mes Favoris (My Favorites) : 2/73
~ Mes Documents (My Documents) : 5/70
~ Mon Bureau (My Desktop) : 0/20
~ Menu demarrer (Programs) : 5/27
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.3B11BE07AF444314794372AF5D7C9A5A] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [409600] [PID.]
[MD5.60714B1C15F815F55798C0B3D4819BEB] - (...) -- C:\WINDOWS\System32\WLTRYSVC.EXE [20480] [PID.]
[MD5.7C19764A2EC7AC4AE8DB4BBF0B7F20C5] - (.Dell Inc. - Dell Wireless WLAN Card Wireless Network Co.) -- C:\WINDOWS\System32\bcmwltry.exe [1253376] [PID.]
[MD5.ABB85828C394CEACACBC90373C59C529] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [761947] [PID.1564]
[MD5.17CEC1CB41C5580DBE20984FC73BC4F4] - (.Dell Inc. - Dell Wireless WLAN Card Wireless Network Tr.) -- C:\WINDOWS\system32\WLTRAY.exe [1392640] [PID.1684]
[MD5.E731921DB2E17DCD3DB472FAD5549C57] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [PID.]
[MD5.394FE85B1D45F96E1E63D2E5AAB938D2] - (.IDT, Inc. - IDT Audio system tray application.) -- C:\WINDOWS\sttray.exe [405504] [PID.1924]
[MD5.102B0DC83D1038C7D249FD09C8DD7185] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328] [PID.1944]
[MD5.7B4FE89A896CFE357A8DB9CD75A5AB03] - (.McAfee, Inc. - McAfee Security Center.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe [1317016] [PID.1956]
[MD5.7E6932EEDA54C8EAF7DC6C2225261B85] - (.McAfee, Inc. - McAfee Service Host.) -- C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe [214904] [PID.]
[MD5.DDEF5E87913916C98EFE09763C277E3B] - (.Adobe Systems Incorporated. - Acrobat Distiller.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\AcroDist.exe [196608] [PID.2020]
[MD5.012844A8E13BE3941C9CAF1F91F47DF2] - (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe [405504] [PID.228]
[MD5.45A53818D5394B19AFEF7BD4C4A23192] - (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files\Druide\Antidote 7\Programmes32\agentantidote.exe [617152] [PID.248]
[MD5.C7EF568ED5C06096E96CF9978E65C0E7] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\WINDOWS\system32\mfevtps.exe [148520] [PID.]
[MD5.35176FA09A0FC58DB630991A81A0BA39] - (.McAfee, Inc. - Programme d'amorçage du service McAfee Onli.) -- C:\Program Files\McAfee Online Backup\MOBKbackup.exe [229688] [PID.]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\rundll32.exe [33792] [PID.2240]
[MD5.69EEA92FBB097BF3C5E13FEAD982FAA1] - (.McAfee, Inc. - McAfee Core Firewall Service.) -- C:\Program Files\Fichiers communs\McAfee\SystemCore\mfefire.exe [160344] [PID.]
[MD5.5A4DA252B2C0550AB83D129C02CF6C19] - (.Microsoft Corporation - Service de cliché instantané de volumes Mic.) -- C:\WINDOWS\System32\vssvc.exe [295424] [PID.]
[MD5.7B2E3899314974CC40D93A6CD7C855C8] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2134016] [PID.3496]
~ Scan Processes Running in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@mcafee.com/MSC,version=10] - (...) -- c:\progra~1\mcafee\msc\npmcsn~1.dll
P2 - FPN: [HKLM] [@mcafee.com/SAFFPlugin] - (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKUS\S-1-5-21-3262944035-370799113-1597781795-1114\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://ie.search.msn.com
R1 - HKUS\S-1-5-21-3262944035-370799113-1597781795-1114\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)) -- C:\WINDOWS\system32\ieframe.dll
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) (3,4,0,135) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} . (.TechSmith Corporation - SnagIt Browser Helper Object for Internet E.) -- C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files\Fichiers communs\McAfee\SystemCore\ScriptSn.20111005155752.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\Windo
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} . (.TechSmith Corporation - SnagIt Add-in for Internet Explorer.) -- C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Extensions du client Bing.) -- "C:\Program Files\Microsoft\BingBar\BingExt.dll"
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] . (.Dell Inc. - Dell Wireless WLAN Card Wireless Network Tr.) -- C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [IDTSysTrayApp] . (.IDT, Inc. - IDT Audio system tray application.) -- C:\WINDOWS\sttray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (.not file.)
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
O4 - HKLM\..\Run: [mcui_exe] . (.McAfee, Inc. - McAfee Security Center.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe
O4 - HKLM\..\Run: [ATICCC] . (.ATI Technologies Inc. - CLI Application (Command Line Interface).) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] . (.SigmaTel, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [agentantidote.exe] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files\Druide\Antidote 7\Programmes32\agentantidote.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-21-3262944035-370799113-1597781795-1114\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat 7.0 Distiller.lnk . (.Adobe Systems Incorporated..) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\acrodist.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\msn6.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Live ID.lnk . (.Microsoft Corporation.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: C:\Documents And Settings\MForget\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\MForget\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\MForget\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\MForget\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 5163953249
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 5184836312
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{15340E45-BAE5-4D29-AEC1-1AB19B213613}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CCS\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpNameServer = 8.8.8.8 10.1.1.245
O17 - HKLM\System\CCS\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpDomain = Alpha-Byte
O17 - HKLM\System\CS1\Services\Tcpip\..\{15340E45-BAE5-4D29-AEC1-1AB19B213613}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CS1\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpNameServer = 8.8.8.8 10.1.1.245
O17 - HKLM\System\CS1\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpDomain = Alpha-Byte
O17 - HKLM\System\CS2\Services\Tcpip\..\{15340E45-BAE5-4D29-AEC1-1AB19B213613}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CS2\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpNameServer = 8.8.8.8 10.1.1.245
O17 - HKLM\System\CS2\Services\Tcpip\..\{55D8FAFA-BABE-4B6E-843E-8263AD5028FA}: DhcpDomain = Alpha-Byte
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\System32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\System32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\System32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} . (.McAfee, Inc. - McAfee MSC IE plugin DLL.) -- c:\progra~1\mcafee\msc\mcsniepl.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\System32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee McShield (McShield) . (...) - C:\Program Files\Fichiers communs\McAfee\SystemCore\mcshield.exe
O23 - Service: Machine Debug Manager (MDM) . (...) - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe
O23 - Service: McAfee Firewall Core Service (mfefire) . (.McAfee, Inc. - McAfee Core Firewall Service.) - C:\Program Files\Fichiers communs\McAfee\SystemCore\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: 1% (MOBKbackup) . (.McAfee, Inc. - Programme d'amorçage du service McAfee Onli.) - C:\Program Files\McAfee Online Backup\MOBKbackup.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) . (...) - C:\WINDOWS\System32\WLTRYSVC.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe
~ Scan Desktop Component in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (APPDRV) . (.Dell Inc - App Support Driver.) - C:\WINDOWS\sysTEM32\DRIVERS\APPDRV.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (. - .) - C:\WINDOWS\system32\DRIVERS\ipsec.sys (.not file.)
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: McAfee Inc. mfetdi2k (mfetdi2k) . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) - C:\WINDOWS\system32\drivers\mfetdi2k.sys
O41 - Driver: (MOBKFilter) . (.Mozy, Inc. - Mozy Change Monitor Filter Driver.) - C:\WINDOWS\system32\DRIVERS\MOBK.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {A02ED372-22FA-448B-AB6A-1B0FC23B7D08}
O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver
O42 - Logiciel: Adobe Acrobat Distiller 7.0 - (.Adobe Systems.) [HKLM] -- Adobe Acrobat Distiller 7.0
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe FrameMaker v7.2 - (.Adobe Systems.) [HKLM] -- {7CF6E959-07C5-4F5B-AAEC-7406DFFDC20E}
O42 - Logiciel: Adobe Reader 9.4.6 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Antidote HD - (.Druide informatique inc..) [HKLM] -- {56CDB4FE-895F-4E0D-8BB4-9A8D4310898D}
O42 - Logiciel: Assistant de connexion Windows Live ID - (.Microsoft Corporation.) [HKLM] -- {0840B4D6-7DD1-4187-8523-E6FC0007EFB7}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}
O42 - Logiciel: Broadcom 440x 10/100 Integrated Controller - (.Broadcom Corporation.) [HKLM] -- {612B9183-67A9-4B44-9877-2F059E35B86A}
O42 - Logiciel: Broadcom Management Programs - (.Broadcom Corporation.) [HKLM] -- {C99C0593-3B48-41D9-B42F-6E035B320449}
O42 - Logiciel: CodeWright Libraries - (.Pas de propriétaire.) [HKLM] -- CodeWright Libraries
O42 - Logiciel: Conexant HDA D110 MDC V.92 Modem - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3
O42 - Logiciel: CuteFTP 7 Professional - (.GlobalSCAPE.) [HKLM] -- {1CCBCF78-EF12-4137-B3CA-99F30A2E7D21}
O42 - Logiciel: Dell Driver Download Manager - (.Dell Inc..) [HKCU] -- f031ef6ac137efc5
O42 - Logiciel: Dell Resource CD - (.Votre nom d'entreprise.) [HKLM] -- {42929F0F-CE14-47AF-9FC7-FF297A603021}
O42 - Logiciel: Dell Wireless WLAN Card - (.Dell Inc..) [HKLM] -- Broadcom 802.11b Network Adapter
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Idiom WorldServer Desktop Workbench - (.Idiom Technologies, Inc..) [HKLM] -- {7AD087F4-C7B6-4349-A9BF-0484BE301033}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 10 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150100}
O42 - Logiciel: Java(TM) 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014F0}
O42 - Logiciel: Java(TM) 6 Update 23 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216021FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: McAfee Online Backup - (.McAfee, Inc..) [HKLM] -- {27C467F8-F8EF-4f68-BD72-D63632B2096C}
O42 - Logiciel: McAfee Online Backup - (.McAfee, Inc..) [HKLM] -- {CFF4500E-C5D6-695D-A027-B3D4DDED2CC3}
O42 - Logiciel: McAfee Total Protection - (.McAfee, Inc..) [HKLM] -- MSC
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended
O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702}
O42 - Logiciel: Microsoft .NET Framework 4 Extended FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {043F86B7-EE12-3399-B2CA-D0B603D87963}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Office 2003 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {91490409-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft Office 2007 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {50120000-1105-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {90110409-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {D24DB8B9-BB6C-4334-9619-BA1C650E13D3}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 - (.Microsoft Corporation.) [HKLM] -- {6AFCA4E1-9B78-3640-8F72-A7BF33448200}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Extended FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended FRA Language Pack
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Package de base Microsoft de service de chiffrement pour cartes à puce - (.Microsoft Corporation.) [HKLM] -- KB909520
O42 - Logiciel: Package de pilotes Windows - Ricoh Company (rimsptsk) hdc (11/14/2006 6.00.01.04) - (.Ricoh Company.) [HKLM] -- 4569969E1360D2854474C661EF9B4D54F143EB16
O42 - Logiciel: QuickSet - (.Dell Computer Corporation.) [HKLM] -- {C5074CC4-0E26-4716-A307-960272A90040}
O42 - Logiciel: SDL MultiTerm 2009 Convert - (.SDL.) [HKLM] -- {B20D7ACA-AD82-4167-BCD8-038F6E39F012}
O42 - Logiciel: SDL MultiTerm 2009 Core SP3 - (.SDL.) [HKLM] -- {7FF1945C-4400-4EA4-B9B3-CD0EC21DCB5E}
O42 - Logiciel: SDL MultiTerm 2009 SP3 - (.SDL.) [HKLM] -- {5E457532-09EF-4D2C-8574-9E0DBF99517A}
O42 - Logiciel: SDL MultiTerm 2009 Word Integration - (.SDL.) [HKLM] -- {1F60A8E0-7B44-485D-8288-22F18FD8E49D}
O42 - Logiciel: SDL MultiTerm SideBySide Tools - (.SDL.) [HKLM] -- {18107EE8-6977-4181-A2D2-A9DF2DB609DD}
O42 - Logiciel: SDL Passolo 2009 Essential SR3 - (.SDL Passolo GmbH.) [HKLM] -- SDL Passolo 2009 Essential SR3
O42 - Logiciel: SDL Trados 2007 - (.SDL International.) [HKLM] -- {69C76448-D4B8-4886-A848-61CD4EB4B2C7}
O42 - Logiciel: SDL Trados Studio 2009 SP3 - (.SDL.) [HKLM] -- {399F2130-59E1-11DF-9F46-8091DFD72085}
O42 - Logiciel: SDL Trados Synergy 2007 - (.SDL International.) [HKLM] -- {7E62742F-1EEF-4532-B7FF-2D58004BDEAE}
O42 - Logiciel: SDLX - (.Pas de propriétaire.) [HKLM] -- {CE98383B-7BB4-457C-AEAB-D89E9537628F}
O42 - Logiciel: Secure File Encryption for Desktops - (.IBM.) [HKLM] -- {1D458301-CE90-4B46-B504-862E86E6A962}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Extended (KB2416472) - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2416472
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Extended (KB2487367) - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2487367
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: Security Update for Windows Search 4 - KB963093 - (.Microsoft Corporation.) [HKLM] -- KB963093
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: SigmaTel Audio - (.SigmaTel.) [HKLM] -- {A462213D-EED4-42C2-9A60-7BDD4D4B0B17}
O42 - Logiciel: SnagIt 8 - (.TechSmith Corporation.) [HKLM] -- {A1C4EE2B-DF14-4488-BC8A-F9336D588E97}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523
O42 - Logiciel: Update for Microsoft .NET Framework 4 Extended (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Extended (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2533523
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Search 4.0 - (.Microsoft Corporation.) [HKLM] -- KB940157
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
O42 - Logiciel: Zentom System Guard - (.Pas de propriétaire.) [HKCU] -- Zentom System Guard

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI Technologies Inc.]
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Broadcom]
[HKCU\Software\Classes]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\FLEXlm License Manager]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Idiom]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\McAfee Online Backup]
[HKCU\Software\McAfee]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\Qualcomm]
[HKCU\Software\SDL International]
[HKCU\Software\SDL]
[HKCU\Software\Synaptics]
[HKCU\Software\TechSmith]
[HKCU\Software\Trados]
[HKCU\Software\Trend Micro]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Zentom System Guard Inc]
[HKLM\Software\ASIO]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Adobe]
[HKLM\Software\Borland]
[HKLM\Software\Broadcom]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant]
[HKLM\Software\CyberLink]
[HKLM\Software\Dell Computer Corporation]
[HKLM\Software\Dell]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\FLEXlm License Manager]
[HKLM\Software\GODSP]
[HKLM\Software\Gemplus]
[HKLM\Software\GlobalSCAPE]
[HKLM\Software\Google]
[HKLM\Software\IBM]
[HKLM\Software\IDT]
[HKLM\Software\Idiom]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\L&H]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee Online Backup]
[HKLM\Software\McAfee.com]
[HKLM\Software\McAfeeMOBK]
[HKLM\Software\McAfee]
[HKLM\Software\MicroQuill]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SDL International]
[HKLM\Software\SDL Passolo GmbH]
[HKLM\Software\SDL]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Sigmatel]
[HKLM\Software\SiteAdvisor]
[HKLM\Software\Synaptics]
[HKLM\Software\TechSmith]
[HKLM\Software\Trados]
[HKLM\Software\TrendMicro]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
~ Scan Softwares in 00mn 00s

2e partie


---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2010-10-12 - 11:13:24 - [520164192] ----D- C:\Program Files\Adobe
O43 - CFD: 2010-09-27 - 09:41:02 - [130914604] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 2010-09-24 - 12:36:56 - [241665716] ----D- C:\Program Files\Borland
O43 - CFD: 2010-09-22 - 12:28:40 - [3363163] ----D- C:\Program Files\Broadcom
O43 - CFD: 2010-09-21 - 16:33:20 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 2010-09-27 - 10:24:56 - [577536] ----D- C:\Program Files\CONEXANT
O43 - CFD: 2010-09-22 - 12:29:20 - [9962404] ----D- C:\Program Files\Dell
O43 - CFD: 2010-09-22 - 12:27:46 - [2916690] ----D- C:\Program Files\DIFX
O43 - CFD: 2010-11-05 - 09:06:26 - [237175687] ----D- C:\Program Files\Druide
O43 - CFD: 2011-01-20 - 16:23:46 - [721392874] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 2010-09-23 - 16:27:06 - [9644340] ----D- C:\Program Files\GlobalSCAPE
O43 - CFD: 2010-09-30 - 13:03:22 - [2688646] ----D- C:\Program Files\IBM
O43 - CFD: 2011-05-05 - 09:12:30 - [47925774] ----D- C:\Program Files\Idiom
O43 - CFD: 2010-09-22 - 12:40:40 - [12700060] ----D- C:\Program Files\IDT
O43 - CFD: 2010-09-27 - 09:40:28 - [15410527] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2010-09-22 - 09:43:50 - [41139] ----D- C:\Program Files\Intel
O43 - CFD: 2011-08-11 - 13:21:54 - [4793376] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 2011-01-20 - 16:21:04 - [232260618] ----D- C:\Program Files\Java
O43 - CFD: 2011-09-27 - 15:24:18 - [4932534] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 2011-09-28 - 09:08:34 - [275994406] ----D- C:\Program Files\McAfee
O43 - CFD: 2010-09-24 - 15:13:56 - [59174918] ----D- C:\Program Files\McAfee Online Backup
O43 - CFD: 2010-09-24 - 15:12:42 - [2185569] ----D- C:\Program Files\McAfee.com
O43 - CFD: 2010-09-24 - 15:14:16 - [5232348] ----D- C:\Program Files\McAfeeMOBK
O43 - CFD: 2010-10-06 - 16:40:22 - [2175507] ----D- C:\Program Files\Messenger
O43 - CFD: 2011-03-10 - 09:17:08 - [21444860] ----D- C:\Program Files\Microsoft
O43 - CFD: 2010-09-22 - 14:48:58 - [208979] ----D- C:\Program Files\Microsoft ActiveSync
O43 - CFD: 2010-09-21 - 16:36:24 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 2011-06-29 - 08:56:22 - [219563929] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 2010-09-22 - 17:33:40 - [1559148] ----D- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD: 2011-06-20 - 09:02:32 - [38411899] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2010-09-22 - 17:32:22 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 2010-09-22 - 17:33:02 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 2010-09-22 - 14:48:38 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2010-09-22 - 15:43:22 - [4368271] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 2011-01-20 - 16:19:16 - [8175999] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 2010-09-22 - 14:08:08 - [11350841] ----D- C:\Program Files\Movie Maker
O43 - CFD: 2011-01-20 - 16:25:10 - [1240541] ----D- C:\Program Files\MSBuild
O43 - CFD: 2010-09-28 - 11:09:02 - [39944647] ----D- C:\Program Files\MSECache
O43 - CFD: 2010-09-21 - 16:33:12 - [32853033] ----D- C:\Program Files\MSN
O43 - CFD: 2010-09-21 - 16:32:56 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 2010-09-24 - 09:26:42 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 2010-09-22 - 11:42:44 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 2010-12-16 - 08:58:56 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 2010-09-27 - 10:14:52 - [3247434218] ----D- C:\Program Files\Qualcomm
O43 - CFD: 2010-09-23 - 18:00:12 - [37949185] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 2011-01-20 - 16:29:00 - [1221771861] ----D- C:\Program Files\SDL
O43 - CFD: 2011-01-20 - 17:04:48 - [369692488] ----D- C:\Program Files\SDL International
O43 - CFD: 2011-01-20 - 16:20:40 - [151671493] ----D- C:\Program Files\SDL Passolo 2009
O43 - CFD: 2010-09-21 - 16:33:12 - [2679] ----D- C:\Program Files\Services en ligne
O43 - CFD: 2011-05-09 - 12:05:26 - [82432] ----D- C:\Program Files\Shared
O43 - CFD: 2010-09-22 - 09:57:30 - [32851228] ----D- C:\Program Files\SigmaTel
O43 - CFD: 2010-09-22 - 12:26:54 - [27527243] ----D- C:\Program Files\Synaptics
O43 - CFD: 2010-09-23 - 16:21:46 - [28104381] ----D- C:\Program Files\TechSmith
O43 - CFD: 2010-09-23 - 16:03:06 - [0] ----D- C:\Program Files\TRADOS
O43 - CFD: 2011-10-09 - 10:28:32 - [388096] ----D- C:\Program Files\Trend Micro
O43 - CFD: 2010-09-21 - 16:51:40 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 2010-09-23 - 09:41:02 - [5418300] ----D- C:\Program Files\Windows Desktop Search
O43 - CFD: 2010-09-22 - 17:33:28 - [138864836] ----D- C:\Program Files\Windows Live
O43 - CFD: 2010-09-22 - 17:31:14 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2010-09-22 - 16:52:14 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 2010-09-22 - 16:52:14 - [11603234] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 2010-09-22 - 11:42:40 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 2010-09-22 - 10:01:08 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 2010-09-21 - 16:36:24 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 2011-10-10 - 11:58:08 - [5461420] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 2010-10-12 - 11:13:50 - [64286736] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 2010-09-22 - 14:48:52 - [86016] ----D- C:\Program Files\Fichiers Communs\DESIGNER
O43 - CFD: 2010-09-23 - 11:38:44 - [11206409] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 2010-09-27 - 08:33:00 - [26046553] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 2010-09-22 - 14:49:08 - [2742349] ----D- C:\Program Files\Fichiers Communs\L&H
O43 - CFD: 2011-01-20 - 16:19:46 - [648086] ----D- C:\Program Files\Fichiers Communs\Macrovision Shared
O43 - CFD: 2010-09-24 - 15:13:10 - [29683340] ----D- C:\Program Files\Fichiers Communs\Mcafee
O43 - CFD: 2010-09-28 - 11:09:16 - [199777926] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 2010-09-21 - 16:34:02 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 2010-09-21 - 11:24:58 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 2011-01-20 - 16:24:24 - [158917105] ----D- C:\Program Files\Fichiers Communs\SDL
O43 - CFD: 2010-09-21 - 16:34:12 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 2010-09-21 - 11:24:54 - [75623472] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 2010-09-22 - 17:33:40 - [30629319] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 2010-09-22 - 16:59:02 - [106714865] ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 2010-09-23 - 16:21:00 - [14738432] ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
O43 - CFD: 2011-10-05 - 15:19:22 - [2185464] ----D- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5
O43 - CFD: 2011-10-09 - 11:31:46 - [3393211] ----D- C:\Documents and Settings\MForget\Application Data\Adobe
O43 - CFD: 2010-09-27 - 09:57:02 - [0] ----D- C:\Documents and Settings\MForget\Application Data\ATI
O43 - CFD: 2010-11-05 - 09:07:20 - [2196] ----D- C:\Documents and Settings\MForget\Application Data\Druide
O43 - CFD: 2010-11-05 - 11:41:02 - [0] ----D- C:\Documents and Settings\MForget\Application Data\Help
O43 - CFD: 2010-09-27 - 09:55:12 - [0] ----D- C:\Documents and Settings\MForget\Application Data\Identities
O43 - CFD: 2011-05-05 - 09:15:56 - [28542141] ----D- C:\Documents and Settings\MForget\Application Data\Idiom Technologies, Inc
O43 - CFD: 2010-10-13 - 16:20:02 - [1216645] ----D- C:\Documents and Settings\MForget\Application Data\LANCITE
O43 - CFD: 2010-09-27 - 10:49:12 - [0] ----D- C:\Documents and Settings\MForget\Application Data\Macromedia
O43 - CFD: 2011-06-17 - 11:28:34 - [27358092] -S--D- C:\Documents and Settings\MForget\Application Data\Microsoft
O43 - CFD: 2011-05-27 - 08:59:30 - [636] ----D- C:\Documents and Settings\MForget\Application Data\MSN6
O43 - CFD: 2011-04-15 - 11:15:44 - [360130] ----D- C:\Documents and Settings\MForget\Application Data\SDL
O43 - CFD: 2011-08-10 - 09:21:50 - [268] ----D- C:\Documents and Settings\MForget\Application Data\SDL International
O43 - CFD: 2010-09-27 - 15:07:06 - [838126] ----D- C:\Documents and Settings\MForget\Application Data\Sun
O43 - CFD: 2010-09-27 - 15:51:00 - [53] ----D- C:\Documents and Settings\MForget\Application Data\Trados
O43 - CFD: 2010-09-27 - 09:55:52 - [196] ----D- C:\Documents and Settings\MForget\Application Data\Windows Desktop Search
O43 - CFD: 2010-09-27 - 10:48:56 - [0] ----D- C:\Documents and Settings\MForget\Application Data\Windows Search
O43 - CFD: 2010-10-14 - 11:27:20 - [9462846] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\Adobe
O43 - CFD: 2011-10-10 - 11:57:28 - [11503] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 2010-09-27 - 09:57:02 - [11688] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\ATI
O43 - CFD: 2010-10-27 - 10:36:10 - [0] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\Deployment
O43 - CFD: 2010-11-05 - 11:41:02 - [0] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\Help
O43 - CFD: 2010-09-27 - 09:56:06 - [223752] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\Identities
O43 - CFD: 2011-10-09 - 13:02:52 - [254956182] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\Microsoft
O43 - CFD: 2011-01-24 - 10:11:04 - [155830325] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\SDL
O43 - CFD: 2010-09-27 - 09:57:22 - [1129146] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\SDL International
O43 - CFD: 2010-09-27 - 10:00:10 - [1266014] ----D- C:\Documents and Settings\MForget\Local Settings\Application Data\TechSmith
~ Scan Program Folder in 00mn 37s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.120490DB2FECBBFDBD64A1D225B4A812] - 2011-09-14 - 10:16:57 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [191384]
O44 - LFC:[MD5.215B1371992D33F719880E0124699333] - 2011-09-14 - 15:32:57 ---A- . (...) -- C:\WINDOWS\wmsetup.log [25628]
O44 - LFC:[MD5.C172A99E48E371A8F4B81DD32825E333] - 2011-09-16 - 08:54:20 ---A- . (...) -- C:\WINDOWS\KB2570947.log [23299]
O44 - LFC:[MD5.51DFE2F349698A822F67CAC9E5CBFFA6] - 2011-09-16 - 08:59:02 ---A- . (...) -- C:\WINDOWS\win.ini [716]
O44 - LFC:[MD5.4EC274D6CB67ED1240911C72343B96D9] - 2011-09-16 - 09:00:21 ---A- . (...) -- C:\WINDOWS\KB2616676.log [30931]
O44 - LFC:[MD5.A9592ED7EEE221EDACD32D342DBDA9EA] - 2011-09-16 - 09:00:21 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
O44 - LFC:[MD5.E1B90B80C3EA395F9C121E3365861A74] - 2011-09-27 - 14:10:39 ---A- . (...) -- C:\TDSSKiller.2.5.0.0_27.09.2011_15.10.31_log.txt [412]
O44 - LFC:[MD5.B97AB0CB06F5AA2A4CD322DD84DE4352] - 2011-09-27 - 14:11:24 ---A- . (...) -- C:\TDSSKiller.2.5.0.0_27.09.2011_15.11.20_log.txt [412]
O44 - LFC:[MD5.FB4615BBCCDE739A1D33B87BBE7274E3] - 2011-09-27 - 14:15:34 ---A- . (...) -- C:\TDSSKiller.2.5.0.0_27.09.2011_15.15.31_log.txt [412]
O44 - LFC:[MD5.C225C6CB6AC48BE56CB85D4440B27E3E] - 2011-09-27 - 14:22:32 ---A- . (...) -- C:\TDSSKiller.2.6.2.0_27.09.2011_15.21.15_log.txt [96624]
O44 - LFC:[MD5.5CB30EAC3CB655DD9A296B9873A4D820] - 2011-09-27 - 14:23:21 ---A- . (...) -- C:\TDSSKiller.2.5.0.0_27.09.2011_15.22.42_log.txt [39450]
O44 - LFC:[MD5.EEBACD996A2059BAE2181BB60673B938] - 2011-09-28 - 08:20:39 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [404640]
O44 - LFC:[MD5.6FD4696601A784180425A9C7250D427E] - 2011-09-28 - 08:30:02 ---A- . (...) -- C:\WINDOWS\updspapi.log [205541]
O44 - LFC:[MD5.22F4B245F0BC4E1568E7D0D8180C1072] - 2011-09-28 - 08:30:08 ---A- . (...) -- C:\WINDOWS\msmqinst.log [361060]
O44 - LFC:[MD5.B332ADC79329922EA94BE8F9F7EBE8D3] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\KB2492386.log [10015]
O44 - LFC:[MD5.2F335D1E06BD66BE280D3E5FFCC7A1CA] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\comsetup.log [388092]
O44 - LFC:[MD5.4A9030F4635DB861916F9DFE7311D6EF] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\iis6.log [1279840]
O44 - LFC:[MD5.9EF8F28820148D14DD028E1E6C9A06E0] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.CB6BD9A2AF2BCC30AEF9DA6F0187441F] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\medctroc.Log [79986]
O44 - LFC:[MD5.F59DCDD116AA6CDE4C1366D8522B8B87] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\msgsocm.log [57159]
O44 - LFC:[MD5.F2C41EBB37130CCAF50870136D6A912B] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\netfxocm.log [196005]
O44 - LFC:[MD5.BED6E1FE75F9A9E9001425914317926F] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [233937]
O44 - LFC:[MD5.7680F5A99C05B146A77D72814FE77A21] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\ocmsn.log [63199]
O44 - LFC:[MD5.F5B7732DA5EDBB68E1F2814A2B7E869D] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\tabletoc.log [56575]
O44 - LFC:[MD5.CD7579B4CD9BC5810E7BB159FCE83519] - 2011-09-28 - 08:30:10 ---A- . (...) -- C:\WINDOWS\tsoc.log [525184]
O44 - LFC:[MD5.08C0E932C943439966591EBEC48E51F0] - 2011-09-28 - 08:54:27 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1282676]
O44 - LFC:[MD5.561E53CB7408A16C3C1F25AF5CEDF6D1] - 2011-09-28 - 08:54:27 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [89940]
O44 - LFC:[MD5.6E5A9DD939D5C0B15462838957A21F9A] - 2011-09-28 - 08:54:27 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [115526]
O44 - LFC:[MD5.19CEED7D3C18AD465FB03BE09F2812CA] - 2011-09-28 - 08:54:27 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [504972]
O44 - LFC:[MD5.F8BBF687BC69BFC38F5E5D9AEBC0385C] - 2011-09-28 - 08:54:27 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [601138]
O44 - LFC:[MD5.E9F8D4F5D62AFB7D955D076356672BF5] - 2011-10-05 - 14:13:51 ---A- . (...) -- C:\WINDOWS\srun.log [12]
O44 - LFC:[MD5.A806875DA42FB883A551B0FF1D93EB2D] - 2011-10-05 - 15:00:38 ---A- . (...) -- C:\WINDOWS\lsrslt.ini [8698]
O44 - LFC:[MD5.3124A58AF83F71F240B8E345934089AE] - 2011-10-05 - 15:11:15 ---A- . (...) -- C:\WINDOWS\ocgen.log [558896]
O44 - LFC:[MD5.0E6E3F53C0580810926849404DA36014] - 2011-10-05 - 15:11:18 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [1142026]
O44 - LFC:[MD5.E4951BCF016768350B587724842EAF0C] - 2011-10-09 - 09:29:36 ---A- . (...) -- C:\WINDOWS\hpbafd.ini [201]
O44 - LFC:[MD5.4BFAB463E1D1F20DFA83A04A9698934D] - 2011-10-09 - 10:35:51 ---A- . (...) -- C:\WINDOWS\system32\drivers\TrueSight.sys [111744]
O44 - LFC:[MD5.4B952EF194F7EDCC4FEDABBB737C5ABE] - 2011-10-09 - 12:02:50 ---A- . (...) -- C:\WINDOWS\setupact.log [218709]
O44 - LFC:[MD5.84A719609A3F857E9C089C20EA91B6D1] - 2011-10-09 - 14:32:41 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [1324]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2011-10-09 - 19:00:50 ---A- . (...) -- C:\WINDOWS\2575606203 [0]
O44 - LFC:[MD5.752ABF3C1CC6235FDEDDF6859CB9EE8D] - 2011-10-09 - 19:10:27 ---A- . (...) -- C:\TDSSKiller.2.6.6.0_09.10.2011_20.09.11_log.txt [52134]
O44 - LFC:[MD5.71E484B5CDA45C8CA59E3F6C80E9502D] - 2011-10-09 - 19:49:54 ---A- . (...) -- C:\WINDOWS\setupapi.log [882526]
O44 - LFC:[MD5.771DE1883E28E657E9D62F174EE0F72D] - 2011-10-10 - 07:24:22 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32484]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 2011-10-10 - 10:54:31 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2011-10-10 - 10:57:20 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.05937562CF05BEE84E0A826C994ECFBF] - 2011-10-10 - 10:57:20 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.60FC3A876082D44C547E40581EEDD2F2] - 2011-10-10 - 10:57:21 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.6010FA861C1129BBB9B6FB251BCA32AB] - 2011-10-10 - 10:58:32 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13002]
O44 - LFC:[MD5.30932FFB261792C47D13275AFB771715] - 2011-10-10 - 10:58:33 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1838422]
~ Scan Files in 00mn 06s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe" [Enabled] .(.McAfee, Inc. - McAfee Service Host.) -- C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe" [Enabled] .(.McAfee, Inc. - McAfee Service Host.) -- C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\24131651.sys . (...) -- C:\WINDOWS\system32\Drivers\24131651.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\24131651.sys . (...) -- C:\WINDOWS\system32\Drivers\24131651.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\mfefirek.sys . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\system32\Drivers\mfefirek.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\mfehidk.sys . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\system32\Drivers\mfehidk.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ Scan CSB in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\System32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.EC94E05B76D033B74394E7B2175103CF] - 2011-10-10 - 16:50:46 ---A- . (.Dell Inc - App Support Driver.) -- C:\WINDOWS\system32\drivers\APPDRV.SYS [16128]
O58 - SDL:[MD5.2573C08729DD52B7B4F18DF1592E0B37] - 2011-10-10 - 21:06:36 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [1578496]
O58 - SDL:[MD5.CD4646067CC7DCBA1907FA0ACF7E3966] - 2011-10-10 - 03:25:44 R--A- . (.Broadcom Corporation - Broadcom Corporation NDIS 5.1 ethernet driver.) -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys [45568]
O58 - SDL:[MD5.B89BCF0A25AEB3B47030AC83287F894A] - 2011-10-10 - 17:10:56 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS [604928]
O58 - SDL:[MD5.8C31C9DB77ED6143AD09DC5FD2C9D9CC] - 2011-10-10 - 17:10:52 ---A- . (.CACE Technologies - npf.) -- C:\WINDOWS\system32\drivers\BCMWLNPF.SYS [33664]
O58 - SDL:[MD5.142E4E00AD91600A2D20692ED52FAFC8] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\WINDOWS\system32\drivers\cfwids.sys [57432]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 2011-10-10 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 2011-10-10 - 07:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]
O58 - SDL:[MD5.1C8CAA80E91FB71864E9426F9EED048D] - 2011-10-10 - 10:01:08 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys [201600]
O58 - SDL:[MD5.74CF3F2E4E40C4A2E18D39D6300A5C24] - 2011-10-10 - 10:01:00 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys [717952]
O58 - SDL:[MD5.698204D9C2832E53633E53A30A53FC3D] - 2011-10-10 - 10:02:12 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys [1035008]
O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 2011-10-10 - 17:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]
O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 2011-10-10 - 17:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]
O58 - SDL:[MD5.3C318B9CD391371BED62126581EE9961] - 2011-10-10 - 10:04:14 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys [13059]
O58 - SDL:[MD5.C373A719D704D12F5A4503F6F10239FF] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - Access Protection Filter Driver.) -- C:\WINDOWS\system32\drivers\mfeapfk.sys [119808]
O58 - SDL:[MD5.851AD52871B62457152A8ACAFF0C632D] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\WINDOWS\system32\drivers\mfeavfk.sys [180072]
O58 - SDL:[MD5.5B9FFB027669A8AC30AAC0B4996BC603] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - Buffer Overflow Protection Driver.) -- C:\WINDOWS\system32\drivers\mfebopk.sys [59288]
O58 - SDL:[MD5.0B07B12A81D49077302EC76AC1F056CA] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee Driver Cleaning Driver.) -- C:\WINDOWS\system32\drivers\mfeclnk.sys [9344]
O58 - SDL:[MD5.2CABE72E53365834CB9969DDE47BD690] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\system32\drivers\mfefirek.sys [338040]
O58 - SDL:[MD5.46DB8F041E928BDC17B8DABA249A2148] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\system32\drivers\mfehidk.sys [461864]
O58 - SDL:[MD5.348E3DB31CF458ADAA3798FB8AF659C3] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee NDIS Intermediate Driver.) -- C:\WINDOWS\system32\drivers\mfendisk.sys [83688]
O58 - SDL:[MD5.316FD7C31CD57CA793FB10912AEEB2D2] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - McAfee Code Analysis Driver.) -- C:\WINDOWS\system32\drivers\mferkdet.sys [87808]
O58 - SDL:[MD5.2026FE7C9E6B26FFEB08CD89C6326B91] - 2011-10-10 - 09:00:06 ---A- . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\system32\drivers\mfetdi2k.sys [89624]
O58 - SDL:[MD5.E896775837A8BCE436348DF460522394] - 2011-10-10 - 19:10:22 ---A- . (.Mozy, Inc. - Mozy Change Monitor Filter Driver.) -- C:\WINDOWS\system32\drivers\MOBK.sys [54776]
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 2011-10-10 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 2011-10-10 - 07:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]
O58 - SDL:[MD5.D85E3FA9F5B1F29BB4ED185C450D1470] - 2011-10-10 - 23:16:24 ---A- . (.REDC - RICOH MMC Driver.) -- C:\WINDOWS\system32\drivers\rimmptsk.sys [32256]
O58 - SDL:[MD5.DB8EB01C58C9FADA00C70B1775278AE0] - 2011-10-10 - 18:42:46 ---A- . (.REDC - RICOH MS Driver.) -- C:\WINDOWS\system32\drivers\rimsptsk.sys [43520]
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 2011-10-10 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 2011-10-10 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]
O58 - SDL:[MD5.6C1F93C0760C9F79A1869D07233DF39D] - 2011-10-10 - 16:35:20 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\WINDOWS\system32\drivers\rixdptsk.sys [37376]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2011-10-10 - 11:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.951801DFB54D86F611F0AF47825476F9] - 2011-10-10 - 09:24:34 ---A- . (.SigmaTel, Inc. - NDRC.) -- C:\WINDOWS\system32\drivers\sthda.sys [1222840]
O58 - SDL:[MD5.FA2DAA32BED908023272A0F77D625DAE] - 2011-10-10 - 11:35:10 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [191872]
O58 - SDL:[MD5.4BFAB463E1D1F20DFA83A04A9698934D] - 2011-10-10 - 10:35:51 ---A- . (...) -- C:\WINDOWS\system32\drivers\TrueSight.sys [111744]
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 2011-10-10 - 07:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 2011-10-10 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.C1C748875DDCF61999D2E4AE8352BBA4] - 2011-10-10 - 16:49:34 ---A- . (.Jungo - WinDriver Device Driver 4.33.) -- C:\WINDOWS\system32\drivers\windrvr.sys [164180]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2011-10-10 - 00:46:54 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2011-10-10 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 2011-10-10 - 00:45:25 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 2011-10-10 - 00:45:14 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 2011-10-10 - 00:45:10 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 2011-10-10 - 00:45:15 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 2011-10-10 - 00:45:12 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Scan Drivers in 00mn 03s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 2005-08-12 - C:\WINDOWS\sysTEM32\DRIVERS\APPDRV.sys - APPDRV(APPDRV) .(.Dell Inc - App Support Driver.) - LEGACY_APPDRV
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\cfwids.sys - McAfee Inc. cfwids(cfwids) .(.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) - LEGACY_CFWIDS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 2001-08-24 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 2004-10-22 - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT
O64 - Services: CurCS - 1899-12-30 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (.not file.) - Pilote IPSEC (IPSec) .(...) - LEGACY_IPSEC
O64 - Services: CurCS - 2010-11-12 - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - Service McAfee Personal Firewall(McMPFSvc) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MCMPFSVC
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - McAfee Services(mcmscsvc) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MCMSCSVC
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - McAfee VirusScan Announcer(McNaiAnn) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MCNAIANN
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - McAfee Network Agent(McNASvc) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MCNASVC
O64 - Services: CurCS - 2011-03-17 - C:\Program Files\McAfee\VirusScan\mcods.exe - McAfee Scanner(McODS) .(.McAfee, Inc. - McAfee VirusScan On-Demand Scan.) - LEGACY_MCODS
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - McAfee Proxy Service(McProxy) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MCPROXY
O64 - Services: CurCS - 1899-12-30 - C:\Program Files\Fichiers communs\McAfee\SystemCore\mcshield.exe - McShield (McShield) .(...) - LEGACY_MCSHIELD
O64 - Services: CurCS - 1899-12-30 - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe - Machine Debug Manager (MDM) .(...) - LEGACY_MDM
O64 - Services: CurCS - 2004-03-17 - C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys - mdmxsdk(mdmxsdk) .(.Conexant - Diagnostic Interface DRIVER.) - LEGACY_MDMXSDK
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfeapfk.sys - McAfee Inc. mfeapfk(mfeapfk) .(.McAfee, Inc. - Access Protection Filter Driver.) - LEGACY_MFEAPFK
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfeavfk.sys - McAfee Inc. mfeavfk(mfeavfk) .(.McAfee, Inc. - Anti-Virus File System Filter Driver.) - LEGACY_MFEAVFK
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfebopk.sys - McAfee Inc. mfebopk(mfebopk) .(.McAfee, Inc. - Buffer Overflow Protection Driver.) - LEGACY_MFEBOPK
O64 - Services: CurCS - 2011-08-19 - C:\Program Files\Fichiers communs\McAfee\SystemCore\mfefire.exe - McAfee Firewall Core Service(mfefire) .(.McAfee, Inc. - McAfee Core Firewall Service.) - LEGACY_MFEFIRE
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfefirek.sys - McAfee Inc. mfefirek(mfefirek) .(.McAfee, Inc. - McAfee Core Firewall Engine Driver.) - LEGACY_MFEFIREK
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfehidk.sys - McAfee Inc. mfehidk(mfehidk) .(.McAfee, Inc. - McAfee Link Driver.) - LEGACY_MFEHIDK
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mferkdet.sys - McAfee Inc. mferkdet(mferkdet) .(.McAfee, Inc. - McAfee Code Analysis Driver.) - LEGACY_MFERKDET
O64 - Services: CurCS - 2011-08-15 - C:\WINDOWS\system32\drivers\mfetdi2k.sys - McAfee Inc. mfetdi2k(mfetdi2k) .(.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) - LEGACY_MFETDI2K
O64 - Services: CurCS - 2011-08-19 - C:\WINDOWS\system32\mfevtps.exe - McAfee Validation Trust Protection Service(mfevtp) .(.McAfee, Inc. - McAfee Process Validation Service.) - LEGACY_MFEVTP
O64 - Services: CurCS - 2010-04-13 - C:\Program Files\McAfee Online Backup\MOBKbackup.exe - 1%(MOBKbackup) .(.McAfee, Inc. - Programme d'amorçage du service McAfee Onli.) - LEGACY_MOBKBACKUP
O64 - Services: CurCS - 2010-04-13 - C:\WINDOWS\system32\DRIVERS\MOBK.sys - MOBKFilter(MOBKFilter) .(.Mozy, Inc. - Mozy Change Monitor Filter Driver.) - LEGACY_MOBKFILTER
O64 - Services: CurCS - 2011-01-27 - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe - McAfee Anti-Spam Service(MSK80Service) .(.McAfee, Inc. - McAfee Service Host.) - LEGACY_MSK80SERVICE
O64 - Services: CurCS - 2011-10-09 - c:\windows\system32\drivers\TrueSight.sys - TrueSight (TrueSight) .(...) - LEGACY_TRUESIGHT
O64 - Services: CurCS - 2007-03-16 - C:\WINDOWS\System32\WLTRYSVC.exe - Dell Wireless WLAN Tray Service (wltrysvc) .(...) - LEGACY_WLTRYSVC
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <MSN Explorer> <>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - msn.) -- C:\Program Files\MSN\MSNCoreFiles\MSN6.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {2EE17D82-E546-455C-A951-4434DE6E8A67} - (Secure Search) - http://ca.search.yahoo.com
~ Scan Keys in 00mn 00s



---\\ Internet Feature Controls (O81)
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
~ Scan Keys in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.BE84520552CF1F453EC403731513DD40] [SPRF][2011-10-09] (...) -- C:\Documents and Settings\MForget\Bureau\RogueKiller.exe [723968]
[MD5.608AD4EA0BB5090C96BD5EFE18AC0004] [SPRF][2011-10-09] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\MForget\Bureau\ZHPDiag2.exe [2563773]
~ Scan Files in 00mn 00s



---\\ Recherche d'infection Rogue (O86)
C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5
[MD5.A53278CFAFAAC5A7932F55D4D8787137] [SRI] (.©if system - ElevateSoft Grou.) -- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\finc70dkk.exe [2104832]
[MD5.0AEBCC563DF1A5A7F8996DF00AE16C69] [SRI] (...) -- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\hookdll.dll [16896]
~ Scan Files in 00mn 00s



---\\ Recherche détournement de DNS routeur (O89)
Serveur : UnKnown
Address: 127.0.0.1
~ Scan DNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 2011-10-10 409600 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe
SS - | Demand 0 | C:\WINDOWS\2575606203:1147042662.exe (bba18499) . (...) - C:\WINDOWS\2575606203:1147042662.exe
SS - | Demand 2011-10-10 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\BBSvc.exe
SS - | Demand 2011-10-10 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe
SS - | Demand 2011-10-10 647680 | (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Demand 2011-10-10 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
SR - | Auto 2011-10-10 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SR - | Auto 2011-10-10 214904 | (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SS - | Auto 2011-10-10 214904 | (McMPFSvc) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SR - | Auto 2011-10-10 214904 | (mcmscsvc) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SR - | Auto 2011-10-10 214904 | (McNaiAnn) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SR - | Auto 2011-10-10 214904 | (McNASvc) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SS - | Demand 2011-10-10 361712 | (McODS) . (.McAfee, Inc..) - C:\Program Files\McAfee\VirusScan\mcods.exe
SR - | Auto 2011-10-10 214904 | (McProxy) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SS - | Auto 166024 | (McShield) . (...) - C:\Program Files\Fichiers communs\McAfee\SystemCore\mcshield.exe
SS - | Auto 322120 | (MDM) . (...) - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe
SS - | Auto 2011-10-10 160344 | (mfefire) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\McAfee\SystemCore\mfefire.exe
SS - | Auto 2011-10-10 148520 | (mfevtp) . (.McAfee, Inc..) - C:\WINDOWS\system32\mfevtps.exe
SR - | Auto 2011-10-10 229688 | (MOBKbackup) . (.McAfee, Inc..) - C:\Program Files\McAfee Online Backup\MOBKbackup.exe
SR - | Auto 2011-10-10 214904 | (MSK80Service) . (.McAfee, Inc..) - C:\Program Files\Fichiers communs\Mcafee\McSvcHost\McSvHost.exe
SR - | Auto 20480 | (wltrysvc) . (...) - C:\WINDOWS\System32\WLTRYSVC.exe
~ Scan Services in 00mn 00s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by MForget at 2011-10-10 12:04:19

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89DD6AB8]
3 CLASSPNP[0xBA108FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000071[0x89D78E98]
5 ACPI[0xB9F7E620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP0T0L0-3[0x89DFBD98]
kernel: MBR read successfully
user & kernel MBR OK
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by MForget at 2011-10-10 12:04:21

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (1128 lines in 01mn 18s)(0)

Il en reste encore quelques uns a supprimer malgré les tools passés


Étape 1

- Surligne le texte en citation (sans le mot citation) ci-dessous ensuite clic droit dessus et choisis Copier dans la liste

O43 - CFD: 2011-10-05 - 15:19:22 - [2185464] ----D- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5
[MD5.A53278CFAFAAC5A7932F55D4D8787137] [SRI] (.©if system - ElevateSoft Grou.) -- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\finc70dkk.exe [2104832]
[MD5.0AEBCC563DF1A5A7F8996DF00AE16C69] [SRI] (...) -- C:\Documents and Settings\MForget\Application Data\07A3224B98304C30273B2F72518028C5\hookdll.dll [16896]

- Double clique sur ZHPFix qui est sur le bureau.

** Pour Vista et Seven fais un clic droit sur le raccourci de ZHPFix qui est sur le bureau et Exécuter en tant qu'administrateur

- Clique maintenant sur le H bleu

(coller les lignes helper)

- Le texte copié dans le presse papiers s'affichera dans la fenêtre de ZHPFix



- Clique sur Go patiente le temps du traitement

- Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau poste son contenu dans ta prochaine réponse



Étape 2


Télécharge :

Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :

http://www.malwarebytes.org/mbam.php
http://www.malwarebytes.org/


Mets le à jour


- Lance MalwareByte's Anti-Malware

- Onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

- A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.


- Si MalwareByte's a détecté des infections, clique sur:

Afficher les résultat

Ensuite:

Supprimer la sélection

- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

- Le rapport peut être retrouvé sous l'onglet Rapports/logs

- Ferme MBAM en cliquant sur Quitter.



Note : MalwareByte's peut être amené à redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Tutoriel pour MalwareByte's ici http://www.malekal.com/tutorial_Malware ... alware.php


-Poste le rapport de malwarebyte's

Voici le rapport de ZHPFix. Quant à l'étape 2, mon pc infecté ne me permet pas de me connecter à libellules.ch pour accéder à ce forum. Je ne peux donc rien télécharger. Actuellement, je copie les contenus des rapports sur une clé USB que je branche d'un pc à l'autre pour pouvoir te les transmettre.

Que dois-je faire?