Bonjour,

D'abord un grand merci pour les efforts que fait les intervenants de ce forum pour l'aide qu'ils octroient au gens afin de garder leurs pc clean.

J'aurais aimé que quelqu'un m'aide, par ce que je pense que mon ordinateur est infecté avec un spyware.

Je vous explique :

D'abord mes disques dur ne s'ouvrent pas avec le double click. J'ai compris après avoir fait des recherches sur le web que ce est causé par un certain fichier autorun.inf qui est caché et qu'il faut le supprimer.

Le problème c'est lorsque j'essaie d'afficher les fichiers caché, j'ai beau coché cette options a chaque fois que je ferme la fenêtre outils>options des dossier et je la réouvre je trouve cette option désactivé.

Donc j'ai essayé de créer ce fichier autorun.inf il me dit que ce fichier existe déjà et qu'il peut pas le créer donc il est belle est bien là. Pout afficher le contenu de ce fichier je vais dans executer et je tape ----> file:///C:/autorun.inf

et voici le contenu de ce fichier :

Code: Tout sélectionner


[AutoRun]
open=wfx062.exe
shell\open\Command=wfx062.exe



J'essaie de supprimer le contenu de ce fichier il me donne pas la main.

Je pense que wfx062.exe doit etre un trojan. qui me laisse pas afficher les fichier caché.

Comment pourrais-je desinfecter mon pc ?

Et merci de votre aide d'avances

Bonjour Yanass,

Oui effectivement comme tu l'as compris, wfx062.exe n'est pas sain et s'éxécute via un autorun.
Je ne pense pas qu'il soit venu seul, on va vérifier, pour les attributs des fichiers cachés cela provient de l'infection.
Fais ceci pour qu'on y voie plus clair:

Télécharge ZHPDiag crée par Nicolas Coolman

• Enregistre le sur ton bureau
• Double clique sur l'icône
• Suis les instructions à l'ecran
• Clique sur pour lancer l'analyse
• Clique sur pour copier le rapport
• Puis colle le dans ta prochaine réponses
• Le rapport se situe aussi sous C:\Program Files\ZebHelpProcess\ZHPDiag.txt

A++

Désolé !

j'ai pas pu répondre entre temps.

Pour info entre temps j'ai réussi a suprimer les autorun et j'ai plus ce problème.

Mais j'aimerai voir si il y a d'autres problème.

Je vous envoie le rapport tt de suite

Voici le rapport

Code: Tout sélectionner


Rapport de ZHPDiag v1.24.44 par Nicolas Coolman
Run by user at 11/02/2010 15:18:52
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox (3.0.11)

Boot mode: Normal (Normal boot)
Total RAM: 1977 MB (53% free)
System drive C: has 69 GB (62%) free of 111 GB

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 69 Go of 111 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 1 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 3 Go of 9 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Hard drive, Flash drive, Thumb drive (Free 101 Go of 111 Go)

---\\ Processus lancés
[MD5.F694AB7005D50B6B51CBE6A6DAEA8048] - C:\Program Files\Analog Devices\Core\smax4pnp.exe
[MD5.04FEB6C7E08E941CA300CFB3FA78C976] - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
[MD5.1F618DBA55297ECBF6C32ACF29202B7F] - C:\WINDOWS\system32\AccelerometerSt.Exe
[MD5.66B24E2EB8F8A8340F238A346F231C79] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
[MD5.23E8D8A4001CCB62A5B648C962C64FE7] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[MD5.443ADA6FE624132C76D3CBF47F371D7C] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
[MD5.D20A853716B2EFCEAFA6064203F83E6A] - C:\PROGRA~1\AVG\AVG8\avgtray.exe
[MD5.452FA961163EF4AEE4815796A13AB2CF] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[MD5.90E0F7FDCAC66FB50C1CE1A1C7396642] - C:\Program Files\Java\jre6\bin\jusched.exe
[MD5.4C784423B8F0DAE1392398356C9BE1FC] - C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
[MD5.5D456B9ED2D715DB4BA09C3DA88E0567] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
[MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - C:\WINDOWS\system32\ctfmon.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.626A24ED1228580B9518C01930936DF9] - C:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
[MD5.8ED60797908FD394EEE0D6949F493224] - C:\WINDOWS\system32\agrsmsvc.exe
[MD5.E4BDF223CD75478BF44567B4D5C2634D] - C:\WINDOWS\System32\svchost.exe
[MD5.DB338A6BD3976904EB0F8343F51E64EB] - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
[MD5.F3845C2AE550443297601C2909B30049] - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
[MD5.9C71560AD568AAA68975433782E35942] - C:\Program Files\Fichiers communs\DeviceHelper\DeviceManager.exe
[MD5.C3FB1D70CB88722267949694BA51759E] - C:\WINDOWS\system32\services.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.3AD7614C487C948ADD435662265750FB] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
[MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - C:\WINDOWS\system32\inetsrv\inetinfo.exe
[MD5.112325F53AB720CA77825726D427FBDC] - C:\Program Files\Java\jre6\bin\jqs.exe
[MD5.E4D20625DBD37ADEE96383B1B010EDA0] - C:\WINDOWS\system32\mqsvc.exe
[MD5.9D33A0FFF7798747F9C98A75912C0042] - C:\WINDOWS\system32\mqtgsvc.exe
[MD5.D31F88C5F19EEFA366A415D6BC5F2ABC] - C:\WINDOWS\system32\HPZipm12.exe
[MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - C:\WINDOWS\system32\lsass.exe
[MD5.67949CC8A865296C1333C96A4E1A2D66] - C:\WINDOWS\System32\SCardSvr.exe
[MD5.460E4CE148BD07218DA0B6A3D31885A9] - C:\WINDOWS\system32\spoolsv.exe
[MD5.BEE8C1F7838A1D69D5E5A36A3EFBD722] - C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe
[MD5.7778BDFA3F6F6FBA0E75B9594098F737] - C:\WINDOWS\system32\SearchIndexer.exe

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.Exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] C:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data=1
O4 - HKCU\..\policies\Explorer: [NoDriveTypeAutoRun] Data=145
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - Global Startup: BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
O4 - Global Startup: Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File - C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\WINDOWS\system32\mswsock.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1243425871359
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\Windows\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\Windows\system32\SHELL32.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\System32\avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\System32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\System32\WgaLogon.dll

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: DeviceManager (DeviceManager) - C:\Program Files\Fichiers communs\DeviceHelper\DeviceManager.exe -start
O23 - Service: Service Google Update (gupdate) (gupdate) - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Administration IIS (IISADMIN) - C:\WINDOWS\system32\inetsrv\inetinfo.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf
O23 - Service: Message Queuing (MSMQ) - C:\WINDOWS\system32\mqsvc.exe
O23 - Service: Message Queuing Triggers (MSMQTriggers) - C:\WINDOWS\system32\mqtgsvc.exe
O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Simple Mail Transfer Protocol (SMTP) (SMTPSVC) - C:\WINDOWS\system32\inetsrv\inetinfo.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: UltiDev Cassini Web Server for ASP.NET 2.0 (UltiDev Cassini Web Server for ASP.NET 2.0) - C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe
O23 - Service: Publication World Wide Web (W3SVC) - C:\WINDOWS\system32\inetsrv\inetinfo.exe
O23 - Service: Windows Search (WSearch) - C:\WINDOWS\system32\SearchIndexer.exe /Embedding

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-562591055-725345543-1003Core.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-562591055-725345543-1003UA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{F57316A6-5BBC-4B90-B65A-84A3F31C77FD}.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: Personnalisation du navigateur - >{DFB17AA8-042A-429D-987C-26CE244A4189} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: .NET Framework - {3F7924B9-D148-3141-87B1-68F36043A940} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.8 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)
O40 - ASIC: Web Folders - {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: AFD (AFD) - C:\WINDOWS\System32\drivers\afd.sys
O41 - Driver: AVG Free AVI Loader Driver x86 (AvgLdx86) - C:\WINDOWS\System32\Drivers\avgldx86.sys
O41 - Driver: AVG Free On-access Scanner Minifilter Driver x86 (AvgMfx86) - C:\WINDOWS\System32\Drivers\avgmfx86.sys
O41 - Driver: AVG Free8 Network Redirector (AvgTdiX) - C:\WINDOWS\System32\Drivers\avgtdix.sys
O41 - Driver: Pilote de CD-ROM (Cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de filtre de gravure CD (Imapi) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: Pilote de processeur Intel (intelppm) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: Pilote de la classe Clavier (Kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (Mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (no object) (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) - C:\WINDOWS\System32\drivers\vga.sys
O41 - Driver: Interface de gestion Microsoft Windows pour ACPI (WmiAcpi) - C:\WINDOWS\system32\DRIVERS\wmiacpi.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: ASP.NET Maker 7.0.0
O42 - Logiciel: AVG Free 8.5
O42 - Logiciel: Acapela Telecom TTS 6.1
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - Arabic Female HQ Voice Salma 22kHz
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - Arabic Female HQ Voice Salma 8kHz
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - French Female HQ Voice Claire 22kHz
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - French Female HQ Voice Claire 8kHz
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - French Male HQ Voice Bruno 22kHz
O42 - Logiciel: Acapela Telecom TTS 6.1.0.0 - French Male HQ Voice Bruno 8kHz
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Reader 9.1.3 - Français
O42 - Logiciel: Adobe Shockwave Player 11.5
O42 - Logiciel: Agere Systems HDA Modem
O42 - Logiciel: Audacity 1.2.6
O42 - Logiciel: BCS001
O42 - Logiciel: Color LaserJet 2600n
O42 - Logiciel: Crystal Reports Basic French Language Pack for Visual Studio 2008
O42 - Logiciel: Crystal Reports Basic for Visual Studio 2008
O42 - Logiciel: DivX Web Player
O42 - Logiciel: EBP Devis et Facturation Classic 2010 7.0
O42 - Logiciel: EBP Utilitaire d'échanges 1.1
O42 - Logiciel: Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: Google Update Helper
O42 - Logiciel: HP 3D DriveGuard
O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology
O42 - Logiciel: HP Photosmart and Officejet 7.0.A Corporate Edition
O42 - Logiciel: HP Quick Launch Buttons 6.40 E1
O42 - Logiciel: HP Webcam
O42 - Logiciel: HSDPA USB MODEM version 4.083
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)
O42 - Logiciel: Hotfix for Windows XP (KB915800-v4)
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5)
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver
O42 - Logiciel: Intel® Matrix Storage Manager
O42 - Logiciel: Internet Mobile
O42 - Logiciel: Internet Mobile+
O42 - Logiciel: Java(TM) 6 Update 15
O42 - Logiciel: K-Lite Codec Pack 4.8.0 (Full)
O42 - Logiciel: MSVC80_x86
O42 - Logiciel: MSVC80_x86_v2
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: Marvell Miniport Driver
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP
O42 - Logiciel: Microsoft Device Emulator version 3.0 - FRA
O42 - Logiciel: Microsoft Document Explorer 2008
O42 - Logiciel: Microsoft Document Explorer 2008 Language Pack - FRA
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Access MUI (French) 2007
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007
O42 - Logiciel: Microsoft Office Outlook Connector
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
O42 - Logiciel: Microsoft Office Professional Plus 2007
O42 - Logiciel: Microsoft Office Project 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Project MUI (English) 2007
O42 - Logiciel: Microsoft Office Project Standard 2007
O42 - Logiciel: Microsoft Office Project Standard 2007 Trial
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
O42 - Logiciel: Microsoft Office Proof (English) 2007
O42 - Logiciel: Microsoft Office Proof (French) 2007
O42 - Logiciel: Microsoft Office Proof (German) 2007
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
O42 - Logiciel: Microsoft Office Proofing (English) 2007
O42 - Logiciel: Microsoft Office Proofing (French) 2007
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007
O42 - Logiciel: Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Shared MUI (English) 2007
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2007
O42 - Logiciel: Microsoft Office Visual Web Developer 2007
O42 - Logiciel: Microsoft Office Visual Web Developer MUI (French) 2007
O42 - Logiciel: Microsoft Office Word MUI (French) 2007
O42 - Logiciel: Microsoft SQL Server 2008 Report Builder 2.0
O42 - Logiciel: Microsoft SQL Server 2008 Setup Support Files
O42 - Logiciel: Microsoft SQL Server Compact 3.5 Design Tools FRA
O42 - Logiciel: Microsoft SQL Server Compact 3.5 FRA
O42 - Logiciel: Microsoft SQL Server Compact 3.5 for Devices FRA
O42 - Logiciel: Microsoft SQL Server Database Publishing Wizard 1.2
O42 - Logiciel: Microsoft SQL Server Native Client
O42 - Logiciel: Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.7
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime
O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack
O42 - Logiciel: Microsoft Visual Studio 2008 Professional Edition - Français
O42 - Logiciel: Microsoft Visual Studio Web Authoring Component
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Tools
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Win32 Tools
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra
O42 - Logiciel: Module linguistique Microsoft Document Explorer 2008 - FRA
O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FRA
O42 - Logiciel: Mozilla Firefox (3.0.11)
O42 - Logiciel: Nokia Connectivity Cable Driver
O42 - Logiciel: Nokia Software Updater
O42 - Logiciel: One Touch X200 MODEM
O42 - Logiciel: PC Connectivity Solution
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
O42 - Logiciel: PowerpointImageExtractor
O42 - Logiciel: RealPlayer
O42 - Logiciel: SCR3xxx Smart Card Reader
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704)
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593)
O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363)
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789)
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB969693)
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB969604)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234)
O42 - Logiciel: Security Update for Windows Search 4 - KB963093
O42 - Logiciel: Segoe UI
O42 - Logiciel: Sentinel Protection Installer 7.3.0
O42 - Logiciel: SoundMAX
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: UltiDev Cassini Web Server Explorer
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416)
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb977839)
O42 - Logiciel: VC80CRTRedist - 8.0.50727.762
O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime
O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime
O42 - Logiciel: WinRAR archiver
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474)
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130)
O42 - Logiciel: Windows Internet Explorer 8
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Essentials
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Sign-in Assistant
O42 - Logiciel: Windows Live Upload Tool
O42 - Logiciel: Windows Media Format 11 runtime
O42 - Logiciel: Windows Media Player 11
O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Pocket PC
O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Smartphone
O42 - Logiciel: Windows PowerShell(TM) 1.0
O42 - Logiciel: Windows Presentation Foundation
O42 - Logiciel: Windows Search 4.0
O42 - Logiciel: Windows XP Service Pack 3
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0

---\\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Acapela Group
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Analog Devices
O43 - CFD:Common File Directory ----D- C:\Program Files\AnalogX
O43 - CFD:Common File Directory ----D- C:\Program Files\ASP.NET Maker 7
O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity
O43 - CFD:Common File Directory ----D- C:\Program Files\AVG
O43 - CFD:Common File Directory ----D- C:\Program Files\Business Objects
O43 - CFD:Common File Directory ----D- C:\Program Files\cdmaroc
O43 - CFD:Common File Directory ----D- C:\Program Files\CE Remote Tools
O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
O43 - CFD:Common File Directory ----D- C:\Program Files\DyLogic
O43 - CFD:Common File Directory ----D- C:\Program Files\EBP
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
O43 - CFD:Common File Directory ----D- C:\Program Files\HP
O43 - CFD:Common File Directory ----D- C:\Program Files\HPQ
O43 - CFD:Common File Directory ----D- C:\Program Files\HSDPA USB MODEM
O43 - CFD:Common File Directory ----D- C:\Program Files\HSPA USB MODEM
O43 - CFD:Common File Directory ----D- C:\Program Files\HTML Help Workshop
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Mobile
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Mobile+
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD:Common File Directory ----D- C:\Program Files\Marvell
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Device Emulator
O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Picture It! PhotoPub
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SDKs
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Synchronization Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 9.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Web Designer Tools
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
O43 - CFD:Common File Directory ----D- C:\Program Files\Nokia
O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
O43 - CFD:Common File Directory ----D- C:\Program Files\PC Connectivity Solution
O43 - CFD:Common File Directory ----D- C:\Program Files\PowerpointImageExtractor_V1_2
O43 - CFD:Common File Directory ----D- C:\Program Files\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\SafeNet Sentinel
O43 - CFD:Common File Directory ----D- C:\Program Files\SCM Microsystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
O43 - CFD:Common File Directory ----D- C:\Program Files\SOS jeux de lettres
O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics
O43 - CFD:Common File Directory ----D- C:\Program Files\UltiDev
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\WIDCOMM
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Desktop Search
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mobile 5.0 SDK R2
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Script Control
O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
O43 - CFD:Common File Directory --H-D- C:\Program Files\Zenographics
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DeviceHelper
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DivX Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\e.World
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Merge Modules
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nokia
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SafeNet Sentinel
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SNP2UVC
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\xing shared

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.4AD3B647ADC07F1196E76BDFD29FC838] - 11/02/2010 - 15:13:38 ---A- C:\WINDOWS\System32\perfc00C.dat
O44 - LFC:[MD5.F82F717473BB44B94DE2CCF367CE0746] - 11/02/2010 - 15:13:38 ---A- C:\WINDOWS\System32\perfc040.dat
O44 - LFC:[MD5.FAA1350CEE23D4A11ED5592F84917806] - 11/02/2010 - 15:13:38 ---A- C:\WINDOWS\System32\perfh00C.dat
O44 - LFC:[MD5.90B1ECFDCD33F0428082753422746139] - 11/02/2010 - 15:13:38 ---A- C:\WINDOWS\System32\perfh040.dat
O44 - LFC:[MD5.CA711BC445265EAF3DE84B76FAB0557D] - 11/02/2010 - 15:13:37 ---A- C:\WINDOWS\System32\perfc009.dat
O44 - LFC:[MD5.D5BC75359D550EFEB1E91542C8254B14] - 11/02/2010 - 15:13:37 ---A- C:\WINDOWS\System32\perfh009.dat
O44 - LFC:[MD5.00000000000000000000000000000000] - 11/02/2010 - 14:55:19 ---A- C:\WINDOWS\WindowsUpdate.log
O44 - LFC:[MD5.BF3E69F4D95E3576BA4C864273E94DAA] - 11/02/2010 - 13:27:35 ---A- C:\WINDOWS\KB978037.log
O44 - LFC:[MD5.743D91F8BAC05951081BDCA2A98D0C17] - 11/02/2010 - 13:27:32 ---A- C:\WINDOWS\KB975713.log
O44 - LFC:[MD5.7A5ECFD8C3C76358455E7EF6F707C558] - 11/02/2010 - 13:27:28 ---A- C:\WINDOWS\KB975560.log
O44 - LFC:[MD5.1BC4E5F08EC550C625CB1A9EAE1A91C1] - 11/02/2010 - 13:27:27 ---A- C:\WINDOWS\setupapi.log
O44 - LFC:[MD5.EC61774906F1476AD41BBD02931888A8] - 11/02/2010 - 13:27:21 ---A- C:\WINDOWS\KB977914.log
O44 - LFC:[MD5.0A088215B6674AB20A0D1BC6C811C1CC] - 11/02/2010 - 13:27:12 ---A- C:\WINDOWS\KB978706.log
O44 - LFC:[MD5.2D704437363229C059F3B414E2660332] - 11/02/2010 - 13:26:01 ---A- C:\WINDOWS\System32\wpa.dbl
O44 - LFC:[MD5.684A1C1D97BF83A689C863A96F6AD6FF] - 11/02/2010 - 13:25:02 ---A- C:\WINDOWS\spupdsvc.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 11/02/2010 - 13:24:53 ---A- C:\WINDOWS\wiadebug.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 11/02/2010 - 13:24:53 ---A- C:\WINDOWS\wiaservc.log
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 11/02/2010 - 13:24:52 ---A- C:\WINDOWS\0.log
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 11/02/2010 - 13:24:26 -S-A- C:\WINDOWS\bootstat.dat
O44 - LFC:[MD5.00000000000000000000000000000000] - 11/02/2010 - 11:44:24 ---A- C:\WINDOWS\SchedLgU.Txt
O44 - LFC:[MD5.5E88974E0703634CD0775F2DD5A7F29F] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\KB926140-v5.log
O44 - LFC:[MD5.28013CA441D10FBDA146A57B29549FC0] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\comsetup.log
O44 - LFC:[MD5.1C83FD63B9EC93421BEF4A1E423C1A9F] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\iis6.log
O44 - LFC:[MD5.C98C823484CC931C4B06BCF715F757AD] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\imsins.log
O44 - LFC:[MD5.E8A1B1C8EFF27170E0A8F09A40EEAB6A] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\ntdtcsetup.log
O44 - LFC:[MD5.8835F95D6002B5918DDEFF10DA957C44] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\ocmsn.log
O44 - LFC:[MD5.5B2003BACEC8AB8E88A2BA7BDFA986D7] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\tabletoc.log
O44 - LFC:[MD5.8AAC26CEF13A00EFEA0B131A268B3A8A] - 11/02/2010 - 11:28:00 ---A- C:\WINDOWS\tsoc.log
O44 - LFC:[MD5.7DCC982493852973A7484C50E173341B] - 11/02/2010 - 11:26:57 ---A- C:\WINDOWS\FaxSetup.log
O44 - LFC:[MD5.7E5D7C328305F0D4A401EF50B75C7DB1] - 11/02/2010 - 11:26:57 ---A- C:\WINDOWS\MedCtrOC.log
O44 - LFC:[MD5.21844EEF61367EC39C02D5D18B05293B] - 11/02/2010 - 11:26:57 ---A- C:\WINDOWS\msgsocm.log
O44 - LFC:[MD5.B1F852D9A4A0AF2EBE6A86321FB9E400] - 11/02/2010 - 11:26:57 ---A- C:\WINDOWS\netfxocm.log
O44 - LFC:[MD5.54CD86EB96E3AFCADA7FC0402E51BA61] - 11/02/2010 - 11:26:57 ---A- C:\WINDOWS\ocgen.log
O44 - LFC:[MD5.A24416958A90C0C0C52E2E4972A305A0] - 11/02/2010 - 11:26:56 ---A- C:\WINDOWS\msmqinst.log
O44 - LFC:[MD5.225A3169EFA2CD381079A88A0939D41A] - 11/02/2010 - 11:26:17 ---A- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
O44 - LFC:[MD5.FCCA52023E8D5188E4AE613069180639] - 11/02/2010 - 10:49:05 ---A- C:\WINDOWS\KB926141.log
O44 - LFC:[MD5.675A796C0B65991A3606A4347127C7EE] - 09/02/2010 - 12:48:44 ---A- C:\WINDOWS\win.ini
O44 - LFC:[MD5.300A6E1DBBA05440D61C271C79BFECCD] - 08/02/2010 - 16:44:54 ---A- C:\WINDOWS\KB942288-v3.log
O44 - LFC:[MD5.B0F995A0B3CF964B0E4B2E632A9ADCB1] - 08/02/2010 - 16:44:54 ---A- C:\WINDOWS\imsins.BAK
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 07/02/2010 - 22:02:31 ---A- C:\WINDOWS\system.ini
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\System32\cdplayer.exe.manifest
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\System32\ncpa.cpl.manifest
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\System32\nwc.cpl.manifest
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\System32\sapi.cpl.manifest
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\System32\wuaucpl.cpl.manifest
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 07/02/2010 - 21:25:51 R-HA- C:\WINDOWS\WindowsShell.Manifest
O44 - LFC:[MD5.D0FD5D45A4A2F510261C85CC78A915A1] - 04/02/2010 - 16:42:09 ---A- C:\WINDOWS\DPINST.LOG
O44 - LFC:[MD5.7E89E438CAB3E621D6E9BAE1CC338B41] - 04/02/2010 - 16:36:01 ---A- C:\WINDOWS\.picasa.ini
O44 - LFC:[MD5.11DC32D7AFD34DC5CCEEEC7581CAAC93] - 03/02/2010 - 15:52:53 ---A- C:\WINDOWS\ModemLog_Mobile Connector #3.txt
O44 - LFC:[MD5.F27FFEE00351971A7E1519F58812072D] - 01/02/2010 - 19:01:50 ---A- C:\WINDOWS\ModemLog_Mobile Connector.txt
O44 - LFC:[MD5.855F53677A7535D97DF50D341DAC03F8] - 01/02/2010 - 15:12:48 ---A- C:\WINDOWS\ModemLog_Agere Systems HDA Modem.txt
O44 - LFC:[MD5.2FFAE335EC5BC858A00491CD228E8817] - 28/01/2010 - 19:03:16 ---A- C:\WINDOWS\setupact.log
O44 - LFC:[MD5.D51FC1D9C1B804CF7C2983A4DF4BC9B8] - 23/01/2010 - 09:45:50 ---A- C:\WINDOWS\KB978207-IE8.log
O44 - LFC:[MD5.85361931F0428EABFC25365F7F294932] - 23/01/2010 - 09:45:41 ---A- C:\WINDOWS\updspapi.log
O44 - LFC:[MD5.4EB44A300B3F9E9D3E75C7DE69E4F593] - 18/01/2010 - 03:17:13 ---A- C:\WINDOWS\System32\PerfStringBackup.INI
O44 - LFC:[MD5.8798B79A1E567346F4B7F36E332CEFC0] - 13/01/2010 - 15:30:59 ---A- C:\WINDOWS\KB955759.log
O44 - LFC:[MD5.91DBE326B9E512465AD5A2E67A37B04F] - 13/01/2010 - 15:30:53 ---A- C:\WINDOWS\KB972270.log

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll



Suite :

Code: Tout sélectionner


---\\ Export de clé d'application autorisée (ECAA)(O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"
O47 - AAKE:Key Export SP - "C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe"="C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe:LocalSubNet:Enabled:UltiDev Cassini Web Server for ASP.NET 2.0"
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
O47 - AAKE:Key Export SP - "F:\SETUP.EXE"="F:\SETUP.EXE:*:Enabled:Setup"
O47 - AAKE:Key Export SP - "C:\Program Files\Acapela Group\Acapela Telecom TTS\Bin\acatel_srv.exe"="C:\Program Files\Acapela Group\Acapela Telecom TTS\Bin\acatel_srv.exe:*:Enabled:Acapela Telecom TTS Server"
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
O47 - AAKE:Key Export SP - "C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
O47 - AAKE:Key Export SP - "C:\Program Files\AnalogX\Proxy\proxy.exe"="C:\Program Files\AnalogX\Proxy\proxy.exe:*:Enabled:AnalogX Proxy"
O47 - AAKE:Key Export SP - "C:\Program Files\DyLogic\BCS001\bin\BCS001.exe"="C:\Program Files\DyLogic\BCS001\bin\BCS001.exe:*:Enabled:Mirial"
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export DP - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\Wdf01000.sys

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{01f0a49e-eb38-11de-a1ae-002186eb305d}\Shell\AutoRun\command - H:\autorun.exe
O51 - MPSK:{0dd07c68-ee3e-11de-a1b6-002186eb305d}\Shell\AutoRun\command - H:\p0ijj.bat
O51 - MPSK:{0dd07c68-ee3e-11de-a1b6-002186eb305d}\Shell\open\command - H:\p0ijj.bat
O51 - MPSK:{3ab394bc-e666-11de-a1a3-00216b58349c}\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cftmonn.exe
O51 - MPSK:{3cd14c0c-96e6-11de-a0fe-002186eb305d}\Shell\AutoRun\command - H:\mt2.exe
O51 - MPSK:{3cd14c0c-96e6-11de-a0fe-002186eb305d}\Shell\open\command - H:\mt2.exe
O51 - MPSK:{3fabad5f-d8dc-11de-a184-002186eb305d}\Shell\AutoRun\command - H:\wfx062.exe
O51 - MPSK:{3fabad5f-d8dc-11de-a184-002186eb305d}\Shell\open\command - H:\wfx062.exe
O51 - MPSK:{6f5e7e5a-7c57-11de-a0c9-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{6f5e7e5d-7c57-11de-a0c9-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{83a8b942-16fe-11df-a20d-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{83a8b945-16fe-11df-a20d-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{9c996600-507e-11de-a087-00216b58349c}\Shell\AutoRun\command - H:\2id9.exe
O51 - MPSK:{9c996600-507e-11de-a087-00216b58349c}\Shell\open\command - H:\2id9.exe
O51 - MPSK:{9c996602-507e-11de-a087-00216b58349c}\Shell\AutoRun\command - I:\yhh.bat
O51 - MPSK:{9c996602-507e-11de-a087-00216b58349c}\Shell\open\command - I:\yhh.bat
O51 - MPSK:{b122ae99-8490-11de-a0d6-002186eb305d}\Shell\AutoRun\command - H:\RECYCLER\lassas.exe
O51 - MPSK:{b122ae99-8490-11de-a0d6-002186eb305d}\Shell\open\command - H:\RECYCLER\lassas.exe
O51 - MPSK:{be640cad-4d32-11de-a081-00216b58349c}\Shell\AutoRun\command - H:\Memorybar.exe
O51 - MPSK:{c62e9390-55a9-11de-a090-00216b58349c}\Shell\AutoRun\command - I:\.\ShowModem.exe
O51 - MPSK:{c62e9393-55a9-11de-a090-00216b58349c}\Shell\AutoRun\command - J:\e9naq.exe
O51 - MPSK:{c62e9393-55a9-11de-a090-00216b58349c}\Shell\open\command - J:\e9naq.exe
O51 - MPSK:{d1427dd1-7603-11de-a0c0-002186eb305d}\Shell\AutoRun\command - H:\RECYCLER32\dmgr.exe
O51 - MPSK:{d1427dd1-7603-11de-a0c0-002186eb305d}\Shell\open\command - H:\RECYCLER32\dmgr.exe

---\\ Trojan Driver Search Data (TDSD) (O52)
O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.I420"="msh263.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="ir50_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm"
O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.DIVX"="divx.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.XVID"="xvidvfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YV12"="yv12vfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.ac3acm"="ac3acm.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.lameacm"="lameACM.acm"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.FFDS"="ff_vfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"
O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"wave2"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi2"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer2"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"wave3"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi3"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer3"="wdmaud.drv"
O52 - TDSD:HKLM\...\drivers.desc\"vfwwdm32.dll"="Vidéo WDM pour le pilote de capture Windows (Win32)"
O52 - TDSD:HKLM\...\drivers.desc\"msaud32.acm"="Windows Media Audio Codec"
O52 - TDSD:HKLM\...\drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec"
O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software"
O52 - TDSD:HKLM\...\drivers.desc\"ir50_32.dll"="Indeo® video 5.10"
O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"
O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Audio Bluetooth"
O52 - TDSD:HKLM\...\drivers.desc\"divx.dll"="DivX 6.8.5"
O52 - TDSD:HKLM\...\drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.1"
O52 - TDSD:HKLM\...\drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2"
O52 - TDSD:HKLM\...\drivers.desc\"ac3acm.acm"="AC-3 ACM Codec"
O52 - TDSD:HKLM\...\drivers.desc\"ff_vfw.dll"="ffdshow video encoder"
O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"

---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.A0BAABB7D3549460E3F8C5AD6F778683] - 23/05/2008 - 13:50:16 ---A- C:\WINDOWS\system32\drivers\Accelerometer.sys
O58 - SDL:[MD5.E5E6DBFC41EA8AAD005CB9A57A96B43B] - 14/04/2008 - 01:52:42 ---A- C:\WINDOWS\system32\drivers\acpi.sys
O58 - SDL:[MD5.E4ABC1212B70BB03D35E60681C447210] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\acpiec.sys
O58 - SDL:[MD5.FF60DB2ACA88543C025EACBA25CEE5C1] - 11/04/2008 - 16:19:42 R--A- C:\WINDOWS\system32\drivers\ADIHdAud.sys
O58 - SDL:[MD5.FFF87A9B1AB36EE4B7BEC98A4CB01B79] - 13/07/2007 - 10:26:12 R--A- C:\WINDOWS\system32\drivers\aeaudio.sys
O58 - SDL:[MD5.8BED39E3C35D6A489438B8141717A557] - 13/04/2008 - 16:39:23 ---A- C:\WINDOWS\system32\drivers\aec.sys
O58 - SDL:[MD5.7E775010EF291DA96AD17CA4B17137D7] - 14/08/2008 - 10:04:36 ---A- C:\WINDOWS\system32\drivers\afd.sys
O58 - SDL:[MD5.38325C6AA8EAE011897D61CE48EC6435] - 29/02/2008 - 16:13:38 ---A- C:\WINDOWS\system32\drivers\AGRSM.sys
O58 - SDL:[MD5.C6C0F974AB7E825813F8E6B4E5581750] - 14/04/2008 - 01:54:28 ---A- C:\WINDOWS\system32\drivers\amdk6.sys
O58 - SDL:[MD5.D3DABC57BE6D456DFD4BC026CFA582FF] - 14/04/2008 - 01:54:29 ---A- C:\WINDOWS\system32\drivers\amdk7.sys
O58 - SDL:[MD5.B5B8A80875C1DEDEDA8B02765642C32F] - 13/04/2008 - 18:51:25 ---A- C:\WINDOWS\system32\drivers\arp1394.sys
O58 - SDL:[MD5.B153AFFAC761E7F5FCFA822B9C4E97BC] - 13/04/2008 - 18:57:27 ---A- C:\WINDOWS\system32\drivers\asyncmac.sys
O58 - SDL:[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - 18:40:30 ---A- C:\WINDOWS\system32\drivers\atapi.sys
O58 - SDL:[MD5.9916C1225104BA14794209CFA8012159] - 13/04/2008 - 18:51:25 ---A- C:\WINDOWS\system32\drivers\atmarpc.sys
O58 - SDL:[MD5.39A0A59180F19946374275745B21AEBA] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\atmepvc.sys
O58 - SDL:[MD5.AE76348A2605FB197FA8FF1D6F547836] - 13/04/2008 - 18:51:30 ---A- C:\WINDOWS\system32\drivers\atmlane.sys
O58 - SDL:[MD5.E7EF69B38D17BA01F914AE8F66216A38] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\atmuni.sys
O58 - SDL:[MD5.D9F724AA26C010A217C97606B160ED68] - 17/08/2001 - 21:59:44 ---A- C:\WINDOWS\system32\drivers\audstub.sys
O58 - SDL:[MD5.BC12F2404BB6F2B6B2FF3C4C246CB752] - 15/08/2009 - 11:08:01 ---A- C:\WINDOWS\system32\drivers\avgldx86.sys
O58 - SDL:[MD5.5903D729D4F0C5BCA74123C96A1B29E0] - 15/08/2009 - 11:08:01 ---A- C:\WINDOWS\system32\drivers\avgmfx86.sys
O58 - SDL:[MD5.92D8E1E8502E649B60E70074EB29C380] - 26/05/2009 - 16:37:38 ---A- C:\WINDOWS\system32\drivers\avgtdix.sys
O58 - SDL:[MD5.0D93976F7801B7FCD8135CC77257BBD0] - 13/04/2008 - 18:36:32 ---A- C:\WINDOWS\system32\drivers\battc.sys
O58 - SDL:[MD5.DA1F27D85E0D1525F6621372E7B685E9] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\beep.sys
O58 - SDL:[MD5.F934D1B230F84E1D19DD00AC5A7A83ED] - 13/04/2008 - 18:53:23 ---A- C:\WINDOWS\system32\drivers\bridge.sys
O58 - SDL:[MD5.5BCF6090B825DEF29065BDBD59691DBE] - 03/04/2008 - 16:40:44 ---A- C:\WINDOWS\system32\drivers\btaudio.sys
O58 - SDL:[MD5.EF5E0DE0A7CA2977A9255F36F4D915AB] - 03/04/2008 - 16:40:44 ---A- C:\WINDOWS\system32\drivers\btkrnl.sys
O58 - SDL:[MD5.58A49BD10E08D3D4333A60DEDCB1CED8] - 03/04/2008 - 16:40:44 ---A- C:\WINDOWS\system32\drivers\btport.sys
O58 - SDL:[MD5.80F61DE965C116051614AC2F04222FF7] - 03/04/2008 - 16:40:44 ---A- C:\WINDOWS\system32\drivers\btwdndis.sys
O58 - SDL:[MD5.053DC5BE74621B63BB48C2B86BAFC7B0] - 03/04/2008 - 16:40:44 ---A- C:\WINDOWS\system32\drivers\btwusb.sys
O58 - SDL:[MD5.90A673FC8E12A79AFBED2576F6A7AAF9] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\cbidf2k.sys
O58 - SDL:[MD5.0BE5AEF125BE881C4F854C554F2B025C] - 13/04/2008 - 18:46:23 ---A- C:\WINDOWS\system32\drivers\ccdecode.sys
O58 - SDL:[MD5.C1B486A7658353D33A10CC15211A873B] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\cdaudio.sys
O58 - SDL:[MD5.C885B02847F5D2FD45A24E219ED93B32] - 13/04/2008 - 19:14:21 ---A- C:\WINDOWS\system32\drivers\cdfs.sys
O58 - SDL:[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 13/04/2008 - 18:40:46 ---A- C:\WINDOWS\system32\drivers\cdrom.sys
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\cinemst2.sys
O58 - SDL:[MD5.FE47DD8FE6D7768FF94EBEC6C74B2719] - 13/04/2008 - 19:16:22 ---A- C:\WINDOWS\system32\drivers\classpnp.sys
O58 - SDL:[MD5.0F6C187D38D98F8DF904589A5F94D411] - 13/04/2008 - 18:36:37 ---A- C:\WINDOWS\system32\drivers\cmbatt.sys
O58 - SDL:[MD5.562DCDD45902F1863B4B120F0633258B] - 16/10/2007 - 11:40:50 ---A- C:\WINDOWS\system32\drivers\cmusbser.sys
O58 - SDL:[MD5.6E4C9F21F0FAE8940661144F41B13203] - 13/04/2008 - 18:36:37 ---A- C:\WINDOWS\system32\drivers\compbatt.sys
O58 - SDL:[MD5.407E41DDB2BFECE109132AEC296E0D98] - 28/04/2008 - 15:22:10 ---A- C:\WINDOWS\system32\drivers\CPQBttn.sys
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\cpqdap01.sys
O58 - SDL:[MD5.D68AE021109A74E491B83F3F69FB92CD] - 14/04/2008 - 02:02:47 ---A- C:\WINDOWS\system32\drivers\crusoe.sys
O58 - SDL:[MD5.044452051F3E02E7963599FC8F4F3E25] - 13/04/2008 - 18:40:47 ---A- C:\WINDOWS\system32\drivers\disk.sys
O58 - SDL:[MD5.E65E2353A5D74EA89971CB918EEEB2F6] - 13/04/2008 - 18:40:44 ---A- C:\WINDOWS\system32\drivers\diskdump.sys
O58 - SDL:[MD5.F5DEADD42335FB33EDCA74ECB2F36CBA] - 14/04/2008 - 02:05:07 ---A- C:\WINDOWS\system32\drivers\dmboot.sys
O58 - SDL:[MD5.5A7C47C9B3F9FB92A66410A7509F0C71] - 14/04/2008 - 02:05:12 ---A- C:\WINDOWS\system32\drivers\dmio.sys
O58 - SDL:[MD5.E9317282A63CA4D188C0DF5E09C6AC5F] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\dmload.sys
O58 - SDL:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 13/04/2008 - 18:45:01 ---A- C:\WINDOWS\system32\drivers\dmusic.sys
O58 - SDL:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 13/04/2008 - 18:45:14 ---A- C:\WINDOWS\system32\drivers\drmk.sys
O58 - SDL:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 13/04/2008 - 18:45:13 ---A- C:\WINDOWS\system32\drivers\drmkaud.sys
O58 - SDL:[MD5.FE97D0343ACFDEBDD578FC67CC91FA87] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\dxapi.sys
O58 - SDL:[MD5.AC7280566A7BB85CB3291F04DDC1198E] - 13/04/2008 - 18:38:29 ---A- C:\WINDOWS\system32\drivers\dxg.sys
O58 - SDL:[MD5.A73F5D6705B1D820C19B18782E176EFD] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\dxgthk.sys
O58 - SDL:[MD5.4183BE439981BBC77EF2C1D66629F124] - 26/09/2008 - 18:00:06 ---A- C:\WINDOWS\system32\drivers\ewdcsc.sys
O58 - SDL:[MD5.008ADA74E3028FCED5145F4F74230D4B] - 26/09/2008 - 18:01:00 ---A- C:\WINDOWS\system32\drivers\ewusbmdm.sys
O58 - SDL:[MD5.97AAAD1E796F53546D1D0BC4F763CCE7] - 26/09/2008 - 18:01:12 ---A- C:\WINDOWS\system32\drivers\ewusbnet.sys
O58 - SDL:[MD5.38D332A6D56AF32635675F132548343E] - 13/04/2008 - 19:14:29 ---A- C:\WINDOWS\system32\drivers\fastfat.sys
O58 - SDL:[MD5.92CDD60B6730B9F50F6A1A0C1F8CDC81] - 13/04/2008 - 18:40:25 ---A- C:\WINDOWS\system32\drivers\fdc.sys
O58 - SDL:[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - 01:57:38 ---A- C:\WINDOWS\system32\drivers\fips.sys
O58 - SDL:[MD5.9D27E7B80BFCDF1CDD9B555862D5E7F0] - 13/04/2008 - 18:40:25 ---A- C:\WINDOWS\system32\drivers\flpydisk.sys
O58 - SDL:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 13/04/2008 - 18:32:59 ---A- C:\WINDOWS\system32\drivers\fltmgr.sys
O58 - SDL:[MD5.B71A69BB9CC88803F455341BD3992E0C] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\fsvga.sys
O58 - SDL:[MD5.3E1E2BD4F39B0E2B7DC4F4D2BCC2779A] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\fs_rec.sys
O58 - SDL:[MD5.A86859B77B908C18C2657F284AA29FE3] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\ftdisk.sys
O58 - SDL:[MD5.1AF592532532A402ED7C060F6954004F] - 13/04/2008 - 18:45:26 ---A- C:\WINDOWS\system32\drivers\hidclass.sys
O58 - SDL:[MD5.96ECCF28FDBF1B2CC12725818A63628D] - 13/04/2008 - 18:45:22 ---A- C:\WINDOWS\system32\drivers\hidparse.sys
O58 - SDL:[MD5.CCF82C5EC8A7326C3066DE870C06DAF1] - 13/04/2008 - 18:45:28 ---A- C:\WINDOWS\system32\drivers\hidusb.sys
O58 - SDL:[MD5.9F620E11B80B74F4DAB50A81A5DF357F] - 23/05/2008 - 13:51:02 ---A- C:\WINDOWS\system32\drivers\hpdskflt.sys
O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 17:12:04 ---A- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys
O58 - SDL:[MD5.30CA91E657CEDE2F95359D6EF186F650] - 13/04/2006 - 00:04:40 ---A- C:\WINDOWS\system32\drivers\HPZid412.sys
O58 - SDL:[MD5.EFD31AFA752AA7C7BBB57BCBE2B01C78] - 13/04/2006 - 00:04:40 ---A- C:\WINDOWS\system32\drivers\HPZipr12.sys
O58 - SDL:[MD5.7AC43C38CA8FD7ED0B0A4466F753E06E] - 13/04/2006 - 00:04:40 ---A- C:\WINDOWS\system32\drivers\HPZius12.sys
O58 - SDL:[MD5.F80A415EF82CD06FFAF0D971528EAD38] - 20/10/2009 - 16:20:16 ---A- C:\WINDOWS\system32\drivers\http.sys
O58 - SDL:[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - 02:00:52 ---A- C:\WINDOWS\system32\drivers\i8042prt.sys
O58 - SDL:[MD5.DB0CC620B27A928D968C1A1E9CD9CB87] - 15/04/2008 - 17:53:44 R--A- C:\WINDOWS\system32\drivers\iaStor.sys
O58 - SDL:[MD5.F592A1B020723CFBD3D2722514066449] - 21/05/2008 - 17:48:46 R--A- C:\WINDOWS\system32\drivers\igxpmp32.sys
O58 - SDL:[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 13/04/2008 - 18:40:58 ---A- C:\WINDOWS\system32\drivers\imapi.sys
O58 - SDL:[MD5.AD340800C35A42D4DE1641A37FEEA34C] - 14/04/2008 - 02:03:26 ---A- C:\WINDOWS\system32\drivers\intelppm.sys
O58 - SDL:[MD5.3BB22519A194418D5FEC05D800A19AD0] - 13/04/2008 - 18:53:34 ---A- C:\WINDOWS\system32\drivers\ip6fw.sys
O58 - SDL:[MD5.731F22BA402EE4B62748ADAF6363C182] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\ipfltdrv.sys
O58 - SDL:[MD5.B87AB476DCF76E72010632B5550955F5] - 13/04/2008 - 18:57:07 ---A- C:\WINDOWS\system32\drivers\ipinip.sys
O58 - SDL:[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 13/04/2008 - 18:57:15 ---A- C:\WINDOWS\system32\drivers\ipnat.sys
O58 - SDL:[MD5.23C74D75E36E7158768DD63D92789A91] - 13/04/2008 - 19:19:42 ---A- C:\WINDOWS\system32\drivers\ipsec.sys
O58 - SDL:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 13/04/2008 - 18:54:28 ---A- C:\WINDOWS\system32\drivers\irenum.sys
O58 - SDL:[MD5.355836975A67B6554BCA60328CD6CB74] - 14/04/2008 - 02:04:35 ---A- C:\WINDOWS\system32\drivers\isapnp.sys
O58 - SDL:[MD5.16813155807C6881F4BFBF6657424659] - 14/04/2008 - 02:05:14 ---A- C:\WINDOWS\system32\drivers\kbdclass.sys
O58 - SDL:[MD5.94C59CB884BA010C063687C3A50DCE8E] - 14/04/2008 - 02:05:15 ---A- C:\WINDOWS\system32\drivers\kbdhid.sys
O58 - SDL:[MD5.692BCF44383D056AED41B045A323D378] - 13/04/2008 - 18:45:09 ---A- C:\WINDOWS\system32\drivers\kmixer.sys
O58 - SDL:[MD5.0753515F78DF7F271A5E61C20BCD36A1] - 13/04/2008 - 19:16:36 ---A- C:\WINDOWS\system32\drivers\ks.sys
O58 - SDL:[MD5.B467646C54CC746128904E1654C750C1] - 24/06/2009 - 11:18:41 ---A- C:\WINDOWS\system32\drivers\ksecdd.sys
O58 - SDL:[MD5.D1F8BE91ED4DDB671D42E473E3FE71AB] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\mcd.sys
O58 - SDL:[MD5.A7DA20AB18A1BDAE28B0F349E57DA0D1] - 13/04/2008 - 18:36:41 ---A- C:\WINDOWS\system32\drivers\mf.sys
O58 - SDL:[MD5.4AE068242760A1FB6E1A44BF4E16AFA6] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\mnmdd.sys
O58 - SDL:[MD5.62C212678CA063DA233ED4B0B6FC9162] - 26/09/2008 - 18:01:30 ---A- C:\WINDOWS\system32\drivers\mod7700.sys
O58 - SDL:[MD5.510ADE9327FE84C10254E1902697E25F] - 14/04/2008 - 01:53:05 ---A- C:\WINDOWS\system32\drivers\modem.sys
O58 - SDL:[MD5.027C01BD7EF3349AAEBC883D8A799EFB] - 14/04/2008 - 01:53:18 ---A- C:\WINDOWS\system32\drivers\mouclass.sys
O58 - SDL:[MD5.124D6846040C79B9C997F78EF4B2A4E5] - 23/08/2001 - 17:04:42 ---A- C:\WINDOWS\system32\drivers\mouhid.sys
O58 - SDL:[MD5.A80B9A0BAD1B73637DBCBBA7DF72D3FD] - 13/04/2008 - 18:39:46 ---A- C:\WINDOWS\system32\drivers\mountmgr.sys
O58 - SDL:[MD5.70C14F5CCA5CF73F8A645C73A01D8726] - 13/04/2008 - 18:39:44 ---A- C:\WINDOWS\system32\drivers\mqac.sys
O58 - SDL:[MD5.11D42BB6206F33FBB3BA0288D3EF81BD] - 13/04/2008 - 18:32:44 ---A- C:\WINDOWS\system32\drivers\mrxdav.sys
O58 - SDL:[MD5.60AE98742484E7AB80C3C1450E708148] - 24/10/2008 - 11:21:09 ---A- C:\WINDOWS\system32\drivers\mrxsmb.sys
O58 - SDL:[MD5.C941EA2454BA8350021D774DAF0F1027] - 13/04/2008 - 18:32:39 ---A- C:\WINDOWS\system32\drivers\msfs.sys
O58 - SDL:[MD5.0A02C63C8B144BD8C86B103DEE7C86A2] - 13/04/2008 - 18:56:32 ---A- C:\WINDOWS\system32\drivers\msgpc.sys
O58 - SDL:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 13/04/2008 - 18:39:52 ---A- C:\WINDOWS\system32\drivers\mskssrv.sys
O58 - SDL:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 13/04/2008 - 18:39:50 ---A- C:\WINDOWS\system32\drivers\mspclock.sys
O58 - SDL:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 13/04/2008 - 18:39:51 ---A- C:\WINDOWS\system32\drivers\mspqm.sys
O58 - SDL:[MD5.AF5F4F3F14A8EA2C26DE30F7A1E17136] - 13/04/2008 - 18:36:46 ---A- C:\WINDOWS\system32\drivers\mssmbios.sys
O58 - SDL:[MD5.E53736A9E30C45FA9E7B5EAC55056D1D] - 13/04/2008 - 18:39:50 ---A- C:\WINDOWS\system32\drivers\mstee.sys
O58 - SDL:[MD5.2F625D11385B1A94360BFC70AAEFDEE1] - 13/04/2008 - 19:17:05 ---A- C:\WINDOWS\system32\drivers\mup.sys
O58 - SDL:[MD5.5B50F1B2A2ED47D560577B221DA734DB] - 13/04/2008 - 18:46:25 ---A- C:\WINDOWS\system32\drivers\nabtsfec.sys
O58 - SDL:[MD5.1DF7F42665C94B825322FAE71721130D] - 13/04/2008 - 19:20:37 ---A- C:\WINDOWS\system32\drivers\ndis.sys
O58 - SDL:[MD5.7FF1F1FD8609C149AA432F95A8163D97] - 13/04/2008 - 18:46:22 ---A- C:\WINDOWS\system32\drivers\ndisip.sys
O58 - SDL:[MD5.1AB3D00C991AB086E69DB84B6C0ED78F] - 13/04/2008 - 18:57:27 ---A- C:\WINDOWS\system32\drivers\ndistapi.sys
O58 - SDL:[MD5.F927A4434C5028758A842943EF1A3849] - 13/04/2008 - 18:55:58 ---A- C:\WINDOWS\system32\drivers\ndisuio.sys
O58 - SDL:[MD5.EDC1531A49C80614B2CFDA43CA8659AB] - 13/04/2008 - 19:20:42 ---A- C:\WINDOWS\system32\drivers\ndiswan.sys
O58 - SDL:[MD5.6215023940CFD3702B46ABC304E1D45A] - 13/04/2008 - 18:57:29 ---A- C:\WINDOWS\system32\drivers\ndproxy.sys
O58 - SDL:[MD5.5D81CF9A2F1A3A756B66CF684911CDF0] - 13/04/2008 - 18:56:02 ---A- C:\WINDOWS\system32\drivers\netbios.sys
O58 - SDL:[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 13/04/2008 - 19:21:00 ---A- C:\WINDOWS\system32\drivers\netbt.sys
O58 - SDL:[MD5.0888844230083CE3B47395102BCA8207] - 28/04/2008 - 06:14:54 ---A- C:\WINDOWS\system32\drivers\NETw5x32.sys
O58 - SDL:[MD5.E9E47CFB2D461FA0FC75B7A74C6383EA] - 13/04/2008 - 18:51:25 ---A- C:\WINDOWS\system32\drivers\nic1394.sys
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\nikedrv.sys
O58 - SDL:[MD5.1E421A6BCF2203CC61B821ADA9DE878B] - 13/04/2008 - 18:53:09 ---A- C:\WINDOWS\system32\drivers\nmnt.sys
O58 - SDL:[MD5.3182D64AE053D6FB034F44B6DEF8034A] - 13/04/2008 - 18:32:39 ---A- C:\WINDOWS\system32\drivers\npfs.sys
O58 - SDL:[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 13/04/2008 - 19:15:53 ---A- C:\WINDOWS\system32\drivers\ntfs.sys
O58 - SDL:[MD5.73C1E1F395918BC2C6DD67AF7591A3AD] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\null.sys
O58 - SDL:[MD5.B305F3FAD35083837EF46A0BBCE2FC57] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\nwlnkflt.sys
O58 - SDL:[MD5.C99B3415198D1AAB7227F2C88FD664B9] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\nwlnkfwd.sys
O58 - SDL:[MD5.8B8B1BE2DBA4025DA6786C645F77F123] - 13/04/2008 - 18:56:06 ---A- C:\WINDOWS\system32\drivers\nwlnkipx.sys
O58 - SDL:[MD5.56D34A67C05E94E16377C60609741FF8] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\nwlnknb.sys
O58 - SDL:[MD5.C0BB7D1615E1ACBDC99757F6CEAF8CF0] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\nwlnkspx.sys
O58 - SDL:[MD5.36B9B950E3D2E100970A48D8BAD86740] - 13/04/2008 - 18:34:12 ---A- C:\WINDOWS\system32\drivers\nwrdr.sys
O58 - SDL:[MD5.4BB30DDC53EBC76895E38694580CDFE9] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\oprghdlr.sys
O58 - SDL:[MD5.CECB679633523AC5EB7EB85F92DCD806] - 14/04/2008 - 02:09:37 ---A- C:\WINDOWS\system32\drivers\p3.sys
O58 - SDL:[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - 02:09:40 ---A- C:\WINDOWS\system32\drivers\parport.sys
O58 - SDL:[MD5.BEB3BA25197665D82EC7065B724171C6] - 13/04/2008 - 18:40:49 ---A- C:\WINDOWS\system32\drivers\partmgr.sys
O58 - SDL:[MD5.9575C5630DB8FB804649A6959737154C] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\parvdm.sys
O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- C:\WINDOWS\system32\drivers\pccsmcfd.sys
O58 - SDL:[MD5.043410877BDA580C528F45165F7125BC] - 14/04/2008 - 02:09:47 ---A- C:\WINDOWS\system32\drivers\pci.sys
O58 - SDL:[MD5.52E60F29221D0D1AC16737E8DBF7C3E9] - 13/04/2008 - 18:40:29 ---A- C:\WINDOWS\system32\drivers\pciidex.sys
O58 - SDL:[MD5.F0406CBC60BDB0394A0E17FFB04CDD3D] - 14/04/2008 - 02:09:53 ---A- C:\WINDOWS\system32\drivers\pcmcia.sys
O58 - SDL:[MD5.E82A496C3961EFC6828B508C310CE98F] - 13/04/2008 - 19:19:41 ---A- C:\WINDOWS\system32\drivers\portcls.sys
O58 - SDL:[MD5.E19C9632AC828F6F214391E2BDDA11CB] - 14/04/2008 - 01:55:30 ---A- C:\WINDOWS\system32\drivers\processr.sys
O58 - SDL:[MD5.09298EC810B07E5D582CB3A3F9255424] - 13/04/2008 - 18:56:38 ---A- C:\WINDOWS\system32\drivers\psched.sys
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\ptilink.sys
O58 - SDL:[MD5.9CCF89372C5A04E97CD89B58AE697796] - 07/01/2009 - 16:12:28 ---A- C:\WINDOWS\system32\drivers\qcusbser.sys
O58 - SDL:[MD5.FE0D99D6F31E4FAD8159F690D68DED9C] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\rasacd.sys
O58 - SDL:[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 13/04/2008 - 19:19:43 ---A- C:\WINDOWS\system32\drivers\rasl2tp.sys
O58 - SDL:[MD5.5BC962F2654137C9909C3D4603587DEE] - 13/04/2008 - 18:57:32 ---A- C:\WINDOWS\system32\drivers\raspppoe.sys
O58 - SDL:[MD5.EFEEC01B1D3CF84F16DDD24D9D9D8F99] - 13/04/2008 - 19:19:48 ---A- C:\WINDOWS\system32\drivers\raspptp.sys
O58 - SDL:[MD5.FDBB1D60066FCFBB7452FD8F9829B242] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\raspti.sys
O58 - SDL:[MD5.01524CD237223B18ADBB48F70083F101] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\rawwan.sys
O58 - SDL:[MD5.7AD224AD1A1437FE28D89CF22B17780A] - 13/04/2008 - 19:28:39 ---A- C:\WINDOWS\system32\drivers\rdbss.sys
O58 - SDL:[MD5.4912D5B403614CE99C28420F75353332] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\rdpcdd.sys
O58 - SDL:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - 18:32:51 ---A- C:\WINDOWS\system32\drivers\rdpdr.sys
O58 - SDL:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 14/04/2008 - 02:34:54 ---A- C:\WINDOWS\system32\drivers\rdpwd.sys
O58 - SDL:[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 14/04/2008 - 01:57:34 ---A- C:\WINDOWS\system32\drivers\redbook.sys
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\rio8drv.sys
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\riodrv.sys
O58 - SDL:[MD5.96F7A9A7BF0C9C0440A967440065D33C] - 08/05/2008 - 14:02:52 ---A- C:\WINDOWS\system32\drivers\rmcast.sys
O58 - SDL:[MD5.601844CBCF617FF8C868130CA5B2039D] - 13/04/2008 - 18:56:49 ---A- C:\WINDOWS\system32\drivers\rndismp.sys
O58 - SDL:[MD5.D8B0B4ADE32574B2D9C5CC34DC0DBBE7] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\rootmdm.sys
O58 - SDL:[MD5.FC87D5E0328AFA97BF6D39DF96D5D356] - 21/06/2007 - 04:40:02 ---A- C:\WINDOWS\system32\drivers\SCR3XX2K.sys
O58 - SDL:[MD5.76C465F570E90C28942D52CCB2580A10] - 13/04/2008 - 18:40:30 ---A- C:\WINDOWS\system32\drivers\scsiport.sys
O58 - SDL:[MD5.8D04819A3CE51B9EB47E5689B44D43C4] - 13/04/2008 - 18:36:44 ---A- C:\WINDOWS\system32\drivers\sdbus.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 16:39:15 ---A- C:\WINDOWS\system32\drivers\secdrv.sys
O58 - SDL:[MD5.0F29512CCD6BEAD730039FB4BD2C85CE] - 13/04/2008 - 18:40:12 ---A- C:\WINDOWS\system32\drivers\serenum.sys
O58 - SDL:[MD5.93D313C31F7AD9EA2B75F26075413C7C] - 14/04/2008 - 02:00:08 ---A- C:\WINDOWS\system32\drivers\serial.sys
O58 - SDL:[MD5.B6401608579B6431994425BA7653F774] - 28/03/2008 - 10:14:02 R--A- C:\WINDOWS\system32\drivers\sfaudio.sys
O58 - SDL:[MD5.0FA803C64DF0914B41F807EA276BF2A6] - 13/04/2008 - 18:40:47 ---A- C:\WINDOWS\system32\drivers\sffdisk.sys
O58 - SDL:[MD5.C17C331E435ED8737525C86A7557B3AC] - 13/04/2008 - 18:40:47 ---A- C:\WINDOWS\system32\drivers\sffp_sd.sys
O58 - SDL:[MD5.8E6B8C671615D126FDC553D1E2DE5562] - 13/04/2008 - 18:40:48 ---A- C:\WINDOWS\system32\drivers\sfloppy.sys
O58 - SDL:[MD5.866D538EBE33709A5C9F5C62B73B7D14] - 13/04/2008 - 18:46:23 ---A- C:\WINDOWS\system32\drivers\slip.sys
O58 - SDL:[MD5.017DAECF0ED3AA731313433601EC40FA] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\smclib.sys
O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 10/05/2007 - 06:16:40 ---A- C:\WINDOWS\system32\drivers\sncduvc.sys
O58 - SDL:[MD5.CF9CDE12FBC19DBA8DE528B7511A2F4F] - 10/04/2008 - 17:27:34 ---A- C:\WINDOWS\system32\drivers\snp2uvc.sys
O58 - SDL:[MD5.489703624DAC94ED943C2ABDA022A1CD] - 13/04/2008 - 18:46:07 ---A- C:\WINDOWS\system32\drivers\sonydcam.sys
O58 - SDL:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 13/04/2008 - 18:45:07 ---A- C:\WINDOWS\system32\drivers\splitter.sys
O58 - SDL:[MD5.39626E6DC1FB39434EC40C42722B660A] - 14/04/2008 - 02:10:03 ---A- C:\WINDOWS\system32\drivers\sr.sys
O58 - SDL:[MD5.3BB03F2BA89D2BE417206C373D2AF17C] - 11/12/2008 - 10:57:09 ---A- C:\WINDOWS\system32\drivers\srv.sys
O58 - SDL:[MD5.3E5D89099DED9E86E5639F411693218F] - 13/04/2008 - 18:45:15 ---A- C:\WINDOWS\system32\drivers\stream.sys
O58 - SDL:[MD5.77813007BA6265C4B6098187E6ED79D2] - 13/04/2008 - 18:46:21 ---A- C:\WINDOWS\system32\drivers\streamip.sys
O58 - SDL:[MD5.3941D127AEF12E93ADDF6FE6EE027E0F] - 13/04/2008 - 18:39:53 ---A- C:\WINDOWS\system32\drivers\swenum.sys
O58 - SDL:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 13/04/2008 - 18:45:09 ---A- C:\WINDOWS\system32\drivers\swmidi.sys
O58 - SDL:[MD5.926E0BB4CAC05D9A0C3B59DC16FE2F1C] - 27/03/2008 - 18:14:06 ---A- C:\WINDOWS\system32\drivers\SynTP.sys
O58 - SDL:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 13/04/2008 - 19:15:55 ---A- C:\WINDOWS\system32\drivers\sysaudio.sys
O58 - SDL:[MD5.FD6093E3DECD925F1CFFC8A0DD539D72] - 13/04/2008 - 18:40:50 ---A- C:\WINDOWS\system32\drivers\tape.sys
O58 - SDL:[MD5.9AEFA14BD6B182D61E3119FA5F436D3D] - 20/06/2008 - 11:51:12 ---A- C:\WINDOWS\system32\drivers\tcpip.sys
O58 - SDL:[MD5.FB9F32ACC1D3AD523F7EC900B66FC1BB] - 20/06/2008 - 11:08:27 ---A- C:\WINDOWS\system32\drivers\tcpip6.sys
O58 - SDL:[MD5.0539D5E53587F82D1B4FD74C5BE205CF] - 13/04/2008 - 19:00:05 ---A- C:\WINDOWS\system32\drivers\tdi.sys
O58 - SDL:[MD5.6471A66807F5E104E4885F5B67349397] - 14/04/2008 - 02:34:52 ---A- C:\WINDOWS\system32\drivers\tdpipe.sys
O58 - SDL:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 14/04/2008 - 02:34:53 ---A- C:\WINDOWS\system32\drivers\tdtcp.sys
O58 - SDL:[MD5.88155247177638048422893737429D9E] - 14/04/2008 - 02:34:52 ---A- C:\WINDOWS\system32\drivers\termdd.sys
O58 - SDL:[MD5.699450901C5CCFD82357CBC531CEDD23] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\tosdvd.sys
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\tsbvcap.sys
O58 - SDL:[MD5.8F861EDA21C05857EB8197300A92501C] - 13/04/2008 - 18:56:01 ---A- C:\WINDOWS\system32\drivers\tunmp.sys
O58 - SDL:[MD5.5787B80C2E3C5E2F56C2A233D91FA2C9] - 13/04/2008 - 18:32:36 ---A- C:\WINDOWS\system32\drivers\udfs.sys
O58 - SDL:[MD5.402DDC88356B1BAC0EE3DD1580C76A31] - 13/04/2008 - 18:39:46 ---A- C:\WINDOWS\system32\drivers\update.sys
O58 - SDL:[MD5.BEE793D4A059CAEA55D6AC20E19B3A8F] - 13/04/2008 - 18:56:49 ---A- C:\WINDOWS\system32\drivers\usb8023.sys
O58 - SDL:[MD5.1C1A47B40C23358245AA8D0443B6935E] - 13/04/2008 - 18:45:40 ---A- C:\WINDOWS\system32\drivers\usbcamd.sys
O58 - SDL:[MD5.CE97845D2E3F0D274B8BAC1ED07C6149] - 13/04/2008 - 18:45:41 ---A- C:\WINDOWS\system32\drivers\usbcamd2.sys
O58 - SDL:[MD5.173F317CE0DB8E21322E71B7E60A27E8] - 13/04/2008 - 18:45:39 ---A- C:\WINDOWS\system32\drivers\usbccgp.sys
O58 - SDL:[MD5.596EB39B50D6EBD9B734DC4AE0544693] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\usbd.sys
O58 - SDL:[MD5.65DCF09D0E37D4C6B11B5B0B76D470A7] - 13/04/2008 - 18:45:35 ---A- C:\WINDOWS\system32\drivers\usbehci.sys
O58 - SDL:[MD5.1AB3CDDE553B6E064D2E754EFE20285C] - 13/04/2008 - 18:45:37 ---A- C:\WINDOWS\system32\drivers\usbhub.sys
O58 - SDL:[MD5.290913DC4F1125E5A82DE52579A44C43] - 13/04/2008 - 18:45:43 ---A- C:\WINDOWS\system32\drivers\usbintel.sys
O58 - SDL:[MD5.810834AA294A79B3B718EF55A6A58A48] - 27/02/2008 - 16:02:34 ---A- C:\WINDOWS\system32\drivers\usbport.sys
O58 - SDL:[MD5.A717C8721046828520C9EDF31288FC00] - 13/04/2008 - 18:47:38 ---A- C:\WINDOWS\system32\drivers\usbprint.sys
O58 - SDL:[MD5.A0B8CF9DEB1184FBDD20784A58FA75D4] - 13/04/2008 - 18:45:34 ---A- C:\WINDOWS\system32\drivers\usbscan.sys
O58 - SDL:[MD5.1C888B000C2F9492F4B15B5B6B84873E] - 13/04/2008 - 18:45:36 ---A- C:\WINDOWS\system32\drivers\usbser.sys
O58 - SDL:[MD5.A32426D9B14A089EAA1D922E0C5801A9] - 13/04/2008 - 18:45:38 ---A- C:\WINDOWS\system32\drivers\usbstor.sys
O58 - SDL:[MD5.26496F9DEE2D787FC3E61AD54821FFE6] - 13/04/2008 - 18:45:35 ---A- C:\WINDOWS\system32\drivers\usbuhci.sys
O58 - SDL:[MD5.63BBFCA7F390F4C49ED4B96BFB1633E0] - 13/04/2008 - 18:46:20 ---A- C:\WINDOWS\system32\drivers\usbvideo.sys
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\vdmindvd.sys
O58 - SDL:[MD5.0D3A8FAFCEACD8B7625CD549757A7DF1] - 13/04/2008 - 18:44:40 ---A- C:\WINDOWS\system32\drivers\vga.sys
O58 - SDL:[MD5.E28726B72C46821A28830E077D39A55B] - 13/04/2008 - 18:44:40 ---A- C:\WINDOWS\system32\drivers\videoprt.sys
O58 - SDL:[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - 01:56:04 ---A- C:\WINDOWS\system32\drivers\volsnap.sys
O58 - SDL:[MD5.E20B95BAEDB550F32DD489265C1DA1F6] - 13/04/2008 - 18:57:21 ---A- C:\WINDOWS\system32\drivers\wanarp.sys
O58 - SDL:[MD5.6768ACF64B18196494413695F0C3A00F] - 13/04/2008 - 19:17:18 ---A- C:\WINDOWS\system32\drivers\wdmaud.sys
O58 - SDL:[MD5.C42584FD66CE9E17403AEBCA199F7BDB] - 13/04/2008 - 18:36:38 ---A- C:\WINDOWS\system32\drivers\wmiacpi.sys
O58 - SDL:[MD5.2F31B7F954BED437F2C75026C65CAF7B] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\wmilib.sys
O58 - SDL:[MD5.6ABE6E225ADB5A751622A9CC3BC19CE8] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\drivers\ws2ifsl.sys
O58 - SDL:[MD5.C98B39829C2BBD34E454150633C62C78] - 13/04/2008 - 18:46:24 ---A- C:\WINDOWS\system32\drivers\wstcodec.sys
O58 - SDL:[MD5.D57A909F1A9114D5D18A2EACB1AFECD5] - 04/04/2008 - 08:57:00 ---A- C:\WINDOWS\system32\drivers\yk51x86.sys
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ansi.sys
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\country.sys
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\himem.sys
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\key01.sys
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\keyboard.sys
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntdos.sys
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntdos404.sys
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntdos411.sys
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntdos412.sys
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntdos804.sys
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntio.sys
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntio404.sys
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntio411.sys
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntio412.sys
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 11:00:00 ---A- C:\WINDOWS\system32\ntio804.sys
O58 - SDL:[MD5.9A10AACBFDC4922715375FB4065EC930] - 13/04/2008 - 18:44:59 ---A- C:\WINDOWS\system32\watchdog.sys
O58 - SDL:[MD5.8441F8A5DC42BD5F2BEAA95297EE0E10] - 14/08/2009 - 15:13:59 ---A- C:\WINDOWS\system32\win32k.sys

---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.24

---\\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - Acapela Telecom TTS Service (Acapela Telecom TTS) - LEGACY_ACAPELA_TELECOM_TTS
O64 - Services: CurCS - AFD (AFD) - LEGACY_AFD
O64 - Services: CurCS - Agere Modem Call Progress Audio (AgereModemAudio) - LEGACY_AGEREMODEMAUDIO
O64 - Services: CurCS - Service de la passerelle de la couche Application (ALG) - LEGACY_ALG
O64 - Services: CurCS - Gestion d'applications (AppMgmt) - LEGACY_APPMGMT
O64 - Services: CurCS - Audio Windows (AudioSrv) - LEGACY_AUDIOSRV
O64 - Services: CurCS - AVG Free8 WatchDog (avg8wd) - LEGACY_AVG8WD
O64 - Services: CurCS - AVG Free AVI Loader Driver x86 (AvgLdx86) - LEGACY_AVGLDX86
O64 - Services: CurCS - AVG Free On-access Scanner Minifilter Driver x86 (AvgMfx86) - LEGACY_AVGMFX86
O64 - Services: CurCS - AVG Free8 Network Redirector (AvgTdiX) - LEGACY_AVGTDIX
O64 - Services: CurCS - Beep (Beep) - LEGACY_BEEP
O64 - Services: CurCS - Service de transfert intelligent en arrière-plan (BITS) - LEGACY_BITS
O64 - Services: CurCS - Explorateur d'ordinateur (Browser) - LEGACY_BROWSER
O64 - Services: CurCS - Bluetooth Service (btwdins) - LEGACY_BTWDINS
O64 - Services: CurCS - cdfs (cdfs) - LEGACY_CDFS
O64 - Services: CurCS - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32
O64 - Services: CurCS - Com4QLBEx (Com4QLBEx) - LEGACY_COM4QLBEX
O64 - Services: CurCS - Application système COM+ (COMSysApp) - LEGACY_COMSYSAPP
O64 - Services: CurCS - Services de cryptographie (CryptSvc) - LEGACY_CRYPTSVC
O64 - Services: CurCS - Lanceur de processus serveur DCOM (DcomLaunch) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - DeviceManager (DeviceManager) - LEGACY_DEVICEMANAGER
O64 - Services: CurCS - Client DHCP (Dhcp) - LEGACY_DHCP
O64 - Services: CurCS - dmboot (dmboot) - LEGACY_DMBOOT
O64 - Services: CurCS - dmload (dmload) - LEGACY_DMLOAD
O64 - Services: CurCS - Gestionnaire de disque logique (dmserver) - LEGACY_DMSERVER
O64 - Services: CurCS - Client DNS (Dnscache) - LEGACY_DNSCACHE
O64 - Services: CurCS - Configuration automatique de réseau câblé (Dot3svc) - LEGACY_DOT3SVC
O64 - Services: CurCS - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) - LEGACY_EAPHOST
O64 - Services: CurCS - Service de rapport d'erreurs (ERSvc) - LEGACY_ERSVC
O64 - Services: CurCS - Système d'événements de COM+ (EventSystem) - LEGACY_EVENTSYSTEM
O64 - Services: CurCS - fastfat (fastfat) - LEGACY_FASTFAT
O64 - Services: CurCS - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY
O64 - Services: CurCS - Fips (Fips) - LEGACY_FIPS
O64 - Services: CurCS - FltMgr (FltMgr) - LEGACY_FLTMGR
O64 - Services: CurCS - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) - LEGACY_FONTCACHE3.0.0.0
O64 - Services: CurCS - Fs_Rec (Fs_Rec) - LEGACY_FS_REC
O64 - Services: CurCS - Google Desktop Manager 5.9.909.30391 (GoogleDesktopManager-093009-130223) - LEGACY_GOOGLEDESKTOPMANAGER-093009-130223
O64 - Services: CurCS - Classificateur de paquets générique (Gpc) - LEGACY_GPC
O64 - Services: CurCS - Service Google Update (gupdate) (gupdate) - LEGACY_GUPDATE
O64 - Services: CurCS - Google Software Updater (gusvc) - LEGACY_GUSVC
O64 - Services: CurCS - Aide et support (helpsvc) - LEGACY_HELPSVC
O64 - Services: CurCS - hpqwmiex (hpqwmiex) - LEGACY_HPQWMIEX
O64 - Services: CurCS - HTTP (HTTP) - LEGACY_HTTP
O64 - Services: CurCS - Intel(R) Matrix Storage Event Monitor (IAANTMON) - LEGACY_IAANTMON
O64 - Services: CurCS - InstallDriver Table Manager (IDriverT) - LEGACY_IDRIVERT
O64 - Services: CurCS - Windows CardSpace (idsvc) - LEGACY_IDSVC
O64 - Services: CurCS - Administration IIS (IISADMIN) - LEGACY_IISADMIN
O64 - Services: CurCS - Service COM de gravage de CD IMAPI (ImapiService) - LEGACY_IMAPISERVICE
O64 - Services: CurCS - Traducteur d'adresses réseau IP (IpNat) - LEGACY_IPNAT
O64 - Services: CurCS - Pilote IPSEC (IPSec) - LEGACY_IPSEC
O64 - Services: CurCS - Java Quick Starter (JavaQuickStarterService) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - ksecdd (ksecdd) - LEGACY_KSECDD
O64 - Services: CurCS - Serveur (lanmanserver) - LEGACY_LANMANSERVER
O64 - Services: CurCS - Station de travail (LanmanWorkstation) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - Assistance TCP/IP NetBIOS (LmHosts) - LEGACY_LMHOSTS
O64 - Services: CurCS - mnmdd (mnmdd) - LEGACY_MNMDD
O64 - Services: CurCS - mountmgr (mountmgr) - LEGACY_MOUNTMGR
O64 - Services: CurCS - Message Queuing access control (MQAC) - LEGACY_MQAC
O64 - Services: CurCS - Redirecteur client WebDav (MRxDAV) - LEGACY_MRXDAV
O64 - Services: CurCS - MRXSMB (MRxSmb) - LEGACY_MRXSMB
O64 - Services: CurCS - Distributed Transaction Coordinator (MSDTC) - LEGACY_MSDTC
O64 - Services: CurCS - Msfs (Msfs) - LEGACY_MSFS
O64 - Services: CurCS - Windows Installer (MSIServer) - LEGACY_MSISERVER
O64 - Services: CurCS - Message Queuing (MSMQ) - LEGACY_MSMQ
O64 - Services: CurCS - Message Queuing Triggers (MSMQTriggers) - LEGACY_MSMQTRIGGERS
O64 - Services: CurCS - Mup (Mup) - LEGACY_MUP
O64 - Services: CurCS - Agent de protection d'accès réseau (napagent) - LEGACY_NAPAGENT
O64 - Services: CurCS - Pilote système NDIS (NDIS) - LEGACY_NDIS
O64 - Services: CurCS - Pilote TAPI NDIS d'accès distant (NdisTapi) - LEGACY_NDISTAPI
O64 - Services: CurCS - NDIS mode utilisateur E/S Protocole (Ndisuio) - LEGACY_NDISUIO
O64 - Services: CurCS - NDProxy (NDProxy) - LEGACY_NDPROXY
O64 - Services: CurCS - Interface NetBIOS (NetBIOS) - LEGACY_NETBIOS
O64 - Services: CurCS - NetBIOS sur TCP/IP (NetBT) - LEGACY_NETBT
O64 - Services: CurCS - Connexions réseau (Netman) - LEGACY_NETMAN
O64 - Services: CurCS - NLA (Network Location Awareness) (Nla) - LEGACY_NLA
O64 - Services: CurCS - Npfs (Npfs) - LEGACY_NPFS
O64 - Services: CurCS - ntfs (ntfs) - LEGACY_NTFS
O64 - Services: CurCS - Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) - LEGACY_NTLMSSP
O64 - Services: CurCS - Null (Null) - LEGACY_NULL
O64 - Services: CurCS - Office Source Engine (ose) - LEGACY_OSE
O64 - Services: CurCS - PartMgr (PartMgr) - LEGACY_PARTMGR
O64 - Services: CurCS - ParVdm (ParVdm) - LEGACY_PARVDM
O64 - Services: CurCS - Pml Driver HPZ12 (Pml Driver HPZ12) - LEGACY_PML_DRIVER_HPZ12
O64 - Services: CurCS - Services IPSEC (PolicyAgent) - LEGACY_POLICYAGENT
O64 - Services: CurCS - Emplacement protégé (ProtectedStorage) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - Pilote de connexion automatique d'accès distant (RasAcd) - LEGACY_RASACD
O64 - Services: CurCS - Gestionnaire de connexions d'accès distant (RasMan) - LEGACY_RASMAN
O64 - Services: CurCS - Rdbss (Rdbss) - LEGACY_RDBSS
O64 - Services: CurCS - RDPCDD (RDPCDD) - LEGACY_RDPCDD
O64 - Services: CurCS - RDPNP (RDPNP) - LEGACY_RDPNP
O64 - Services: CurCS - Accès à distance au Registre (RemoteRegistry) - LEGACY_REMOTEREGISTRY
O64 - Services: CurCS - Reliable Multicast Protocol driver (RMCAST) - LEGACY_RMCAST
O64 - Services: CurCS - Appel de procédure distante (RPC) (RpcSs) - LEGACY_RPCSS
O64 - Services: CurCS - Gestionnaire de comptes de sécurité (SamSs) - LEGACY_SAMSS
O64 - Services: CurCS - Carte à puce (SCardSvr) - LEGACY_SCARDSVR
O64 - Services: CurCS - Planificateur de tâches (Schedule) - LEGACY_SCHEDULE
O64 - Services: CurCS - Connexion secondaire (seclogon) - LEGACY_SECLOGON
O64 - Services: CurCS - Notification d'événement système (SENS) - LEGACY_SENS
O64 - Services: CurCS - Serial (Serial) - LEGACY_SERIAL
O64 - Services: CurCS - ServiceLayer (ServiceLayer) - LEGACY_SERVICELAYER
O64 - Services: CurCS - Sonic Focus DSP Driver (SFAUDIO) - LEGACY_SFAUDIO
O64 - Services: CurCS - Pare-feu Windows / Partage de connexion Internet (SharedAccess) - LEGACY_SHAREDACCESS
O64 - Services: CurCS - Détection matériel noyau (ShellHWDetection) - LEGACY_SHELLHWDETECTION
O64 - Services: CurCS - Simple Mail Transfer Protocol (SMTP) (SMTPSVC) - LEGACY_SMTPSVC
O64 - Services: CurCS - Spouleur d'impression (Spooler) - LEGACY_SPOOLER
O64 - Services: CurCS - Pilote de filtre de restauration système (sr) - LEGACY_SR
O64 - Services: CurCS - Service de restauration système (srservice) - LEGACY_SRSERVICE
O64 - Services: CurCS - Srv (Srv) - LEGACY_SRV
O64 - Services: CurCS - Service de découvertes SSDP (SSDPSRV) - LEGACY_SSDPSRV
O64 - Services: CurCS - Acquisition d'image Windows (WIA) (stisvc) - LEGACY_STISVC
O64 - Services: CurCS - Téléphonie (TapiSrv) - LEGACY_TAPISRV
O64 - Services: CurCS - Pilote du protocole TCP/IP (Tcpip) - LEGACY_TCPIP
O64 - Services: CurCS - Services Terminal Server (TermService) - LEGACY_TERMSERVICE
O64 - Services: CurCS - Thèmes (Themes) - LEGACY_THEMES
O64 - Services: CurCS - Client de suivi de lien distribué (TrkWks) - LEGACY_TRKWKS
O64 - Services: CurCS - Udfs (Udfs) - LEGACY_UDFS
O64 - Services: CurCS - UltiDev Cassini Web Server for ASP.NET 2.0 (UltiDev Cassini Web Server for ASP.NET 2.0) - LEGACY_ULTIDEV_CASSINI_WEB_SERVER_FOR_ASP.NET_2.0
O64 - Services: CurCS - Hôte de périphérique universel Plug-and-Play (upnphost) - LEGACY_UPNPHOST
O64 - Services: CurCS - vga (vga) - LEGACY_VGA
O64 - Services: CurCS - VgaSave (VgaSave) - LEGACY_VGASAVE
O64 - Services: CurCS - VolSnap (VolSnap) - LEGACY_VOLSNAP
O64 - Services: CurCS - Horloge Windows (W32Time) - LEGACY_W32TIME
O64 - Services: CurCS - Publication World Wide Web (w3svc) - LEGACY_W3SVC
O64 - Services: CurCS - Pilote ARP IP d'accès distant (Wanarp) - LEGACY_WANARP
O64 - Services: CurCS - Wdf01000 (Wdf01000) - LEGACY_WDF01000
O64 - Services: CurCS - WebClient (WebClient) - LEGACY_WEBCLIENT
O64 - Services: CurCS - Infrastructure de gestion Windows (winmgmt) - LEGACY_WINMGMT
O64 - Services: CurCS - Carte de performance WMI (WmiApSrv) - LEGACY_WMIAPSRV
O64 - Services: CurCS - Centre de sécurité (wscsvc) - LEGACY_WSCSVC
O64 - Services: CurCS - Windows Search (WSearch) - LEGACY_WSEARCH
O64 - Services: CurCS - Mises à jour automatiques (wuauserv) - LEGACY_WUAUSERV
O64 - Services: CurCS - Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - LEGACY_WUDFPF
O64 - Services: CurCS - Windows Driver Foundation - User-mode Driver Framework (WudfSvc) - LEGACY_WUDFSVC
O64 - Services: CurCS - Configuration automatique sans fil (WZCSVC) - LEGACY_WZCSVC


End of the scan: 1179 lines



Bonjour Yanass,

Il reste des traces d'infection se transmettant par les voies USB (Autorun.exe).
Pour faire le scan qui va suivre il te faudrat absolument brancher tout tes supports externes (clés usb,disque dur externe).
Il est possible aussi que certaines infections aient étées transmises par d'autres supports que les tiens, quand tu as un doute, pour les ouvrir il te faut faire un clique droit , par le poste de travail, sur le lecteur concerné et choisir "explorer".
Cette technique evitera que l'infection éventuellement présente sur le support se propage sur ton système en lançant l'autorun.

Télécharge MBAM

• Installe le
• Lance l'outil
• Sélectionne tous tes lecteurs
• Coche "Executer un examen complet"
• Si tu es en présence d'une infection à la fin de l'examen clique sur "ok"
• Clique sur Supprimer la sélection
• Pour poster le rapport clique sur l'onglet Rapports/Log et
• Sélectionne celui t'intéresse et clique sur Ouvrir
• Fait copier coller et poste le rapport stp

Si MBAM ne les supprime pas on les supprimera différement.

A++

bonsoir,

j'ai fait ce que vous m'avez demandé, et j'ai trouvé deux infections que le programme a réussi a supprimé.

Mais malheuresement mon pc a redemaré sans que je puisse enregistré le rapport.

Et vu que le scan a pris des heures.... Je peux pas le refaire maintenant.

Je sais pas si c'est utile maintenant.

Si c le cas je le ferais ultérieurement.

Merci pour tout

Bonjour Yanass,

Oui, il est important de voir ce que MBAM a supprimé.
Regarde dans l'onglet "Rapport/Logs" de MBAM tu devrais le trouver.
Si ce n'est pas le cas il faut que tu refasses le scan comme spécifié plus haut.

A++

Désolé pour le retard le voici

Code: Tout sélectionner

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3726
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

11/02/2010 23:52:53
mbam-log-2010-02-11 (23-52-53).txt

Type de recherche: Examen complet (C:\|D:\|E:\|G:\|H:\|I:\|)
Eléments examinés: 318627
Temps écoulé: 2 hour(s), 27 minute(s), 2 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
G:\System Volume Information\_restore{988C3C2E-3FFC-4C0B-B5E7-0ECE89660994}\RP170\A0075106.exe (Trojan.Agent) -> Quarantined and deleted successfully.



Bonjour Yanass,

MBAM n'a pas sorti ce que j'avais pensé, fais ce qui suit, pour cela branche tout tes supports externes à la connexion que tu as l'habitude d'utiliser:

• Copie ces lignes ci dessous:

O51 - MPSK:{3ab394bc-e666-11de-a1a3-00216b58349c}\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cftmonn.exe
O51 - MPSK:{9c996602-507e-11de-a087-00216b58349c}\Shell\AutoRun\command - I:\yhh.bat
O51 - MPSK:{9c996602-507e-11de-a087-00216b58349c}\Shell\open\command - I:\yhh.bat
O51 - MPSK:{6f5e7e5a-7c57-11de-a0c9-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{6f5e7e5d-7c57-11de-a0c9-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{83a8b942-16fe-11df-a20d-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{83a8b945-16fe-11df-a20d-002186eb305d}\Shell\AutoRun\command - H:\AutoRun.exe
O51 - MPSK:{0dd07c68-ee3e-11de-a1b6-002186eb305d}\Shell\AutoRun\command - H:\p0ijj.bat
O51 - MPSK:{0dd07c68-ee3e-11de-a1b6-002186eb305d}\Shell\open\command - H:\p0ijj.bat
O51 - MPSK:{3cd14c0c-96e6-11de-a0fe-002186eb305d}\Shell\AutoRun\command - H:\mt2.exe
O51 - MPSK:{3cd14c0c-96e6-11de-a0fe-002186eb305d}\Shell\open\command - H:\mt2.exe
O51 - MPSK:{3fabad5f-d8dc-11de-a184-002186eb305d}\Shell\AutoRun\command - H:\wfx062.exe
O51 - MPSK:{3fabad5f-d8dc-11de-a184-002186eb305d}\Shell\open\command - H:\wfx062.exe
O51 - MPSK:{9c996600-507e-11de-a087-00216b58349c}\Shell\AutoRun\command - H:\2id9.exe
O51 - MPSK:{9c996600-507e-11de-a087-00216b58349c}\Shell\open\command - H:\2id9.exe
O51 - MPSK:{c62e9393-55a9-11de-a090-00216b58349c}\Shell\AutoRun\command - J:\e9naq.exe
O51 - MPSK:{c62e9393-55a9-11de-a090-00216b58349c}\Shell\open\command - J:\e9naq.exe
O51 - MPSK:{d1427dd1-7603-11de-a0c0-002186eb305d}\Shell\AutoRun\command - H:\RECYCLER32\dmgr.exe
O51 - MPSK:{d1427dd1-7603-11de-a0c0-002186eb305d}\Shell\open\command - H:\RECYCLER32\dmgr.exe

• Ouvre ZHPDiag, puis clique sur l'icône
• Clique successivement sur l'icône ,pour effacer le rapport qui s'est affiché
• Clique ensuite sur pour coller la sélection
• Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre
• Clique sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.
• Clique sur "Tous" puis sur "Nettoyer".
  Si on te demande de redémarrer l'ordi pour achever le nettoyage, fais le immmédiatement.
• Copie/colle le rapport dans ton prochain post.

Remarque:Le rapport se situe aussi sous C:\Program Files\ZebHelpProcess\ZHPFixReport.txt

A++