~ Rapport de ZHPDiag v2014.2.23.20 - Nicolas Coolman (23/02/2014) ~ Lancé par Admin (27/02/2014 21:00:12) ~ Adresse du Site Web http://nicolascoolman.webs.com ~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Not Found ---\\ Navigateurs Internet MSIE: Internet Explorer v6.0.2900.2180 GCIE: Google Chrome v33.0.1750.117 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Microsoft Windows XP, 32-bit Service Pack 2 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : KO ---\\ Logiciels de protection du système avast! Free Antivirus v9.0.2013 ---\\ Logiciels d'optimisation du système CCleaner v4.10 =>Piriform Ltd ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 12 ActiveX Adobe Reader XI Java 7 Update 51 ---\\ Informations sur le système ~ Processor: x86 Family 15 Model 3 Stepping 4, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (43% free) System Restore: Activé (Enable) System drive C: has 175 GB (93%) free of 186 GB ---\\ Mode de connexion au système ~ Computer Name: XPSP2-D111B5EA1 ~ User Name: Admin ~ All Users Names: SUPPORT_388945a0, HelpAssistant, Administrateur, Admin, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Documents and Settings\Admin\Application Data\ZHP\ ~ %AppData% : C:\Documents and Settings\Admin\Application Data\ ~ %Desktop% : C:\Documents and Settings\Admin\Bureau\ ~ %Favorites% : C:\Documents and Settings\Admin\Favoris\ ~ %LocalAppData% : C:\Documents and Settings\Admin\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\Admin\Menu Démarrer\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 175 Go of 186 Go) D: Floppy drive, Flash card reader, USB Key (Not Inserted) E: Floppy drive, Flash card reader, USB Key (Not Inserted) F: Floppy drive, Flash card reader, USB Key (Not Inserted) G: Floppy drive, Flash card reader, USB Key (Not Inserted) H: CD-ROM drive (Not Inserted) I: CD-ROM drive (Not Inserted) K: Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ~ Security Center: 41 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.0BEE3B07ACE3303EE57698808E1D2DE3] - (.Microsoft Corporation - Explorateur Windows.) (.26/07/2005 - 14:01:30.) -- C:\WINDOWS\Explorer.exe [1036288] [MD5.E41E8FDF62CF20F2E2B16D800D96EB51] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/12/2005 - 12:12:00.) -- C:\WINDOWS\system32\wininet.dll [662528] [MD5.123EEA158F74D0F67A51DCDF065D1091] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.19/08/2004 - 15:10:06.) -- C:\WINDOWS\system32\Winlogon.exe [506368] [MD5.5AC495F4CB807B2B98AD2AD591E6D92E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.03/08/2004 - 22:14:16.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.03/08/2004 - 21:59:44.) -- C:\WINDOWS\system32\Drivers\atapi.sys [95360] [MD5.CD7D5152DF32B47F4E36F710B35AAE02] - (.Microsoft Corporation - CD-ROM File System Driver.) (.03/08/2004 - 22:14:12.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.AF9C19B3100FE010496B1A27181FBF72] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.03/08/2004 - 21:59:54.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [49536] [MD5.8B121FF880683607AB2AEF0340721718] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.02/10/2001 - 17:16:24.) -- C:\WINDOWS\system32\Drivers\Fips.sys [35072] [MD5.CBC3DEF409549672B915FB9403D63F74] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.27/10/2004 - 15:21:36.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [138240] [MD5.D1EFCBD693B5BA21314D06368C471070] - (.Microsoft Corporation - Pilote de port i8042.) (.19/08/2004 - 14:56:40.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54400] [MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.03/08/2004 - 22:00:16.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [41856] [MD5.E2168CBC7098FFE963C6F23F472A3593] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2005 - 14:01:32.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [134912] [MD5.64537AA5C003A6AFEEE1DF819062D0D1] - (.Microsoft Corporation - IPSec Driver.) (.03/08/2004 - 22:14:30.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [74752] [MD5.5DDC9A1B2EB5A4BF010CE8C019A18C1F] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/07/2005 - 14:01:33.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [451584] [MD5.0C80E410CD2F47134407EE7DD19CC86B] - (.Microsoft Corporation - MBT Transport driver.) (.03/08/2004 - 22:14:38.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816] [MD5.B78BE402C3F63DD55521F73876951CDD] - (.Microsoft Corporation - NT File System Driver.) (.03/08/2004 - 22:15:10.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574592] [MD5.318696359AC7DF48D1E51974EC527DD2] - (.Microsoft Corporation - Pilote de port parallèle.) (.12/10/2005 - 09:33:32.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384] [MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.03/08/2004 - 22:14:24.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.26/07/2005 - 13:44:02.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196864] [MD5.2CC30B68DD62B73D444A41322CD7FC4C] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.26/07/2005 - 14:44:00.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58496] [MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/08/2004 - 14:59:14.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/5 ~ Mes Favoris (My Favorites) : 1/4 ~ Mes Documents (My Documents) : 1/189 ~ Mon Bureau (My Desktop) : 0/533 ~ Menu demarrer (Programs) : 1/26 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1264] [MD5.B9436A665A8621073A12338B16D7BFD4] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.492] [MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096] [PID.2012] [MD5.6E6656C6618C4B0B000267D9AF9EF743] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [859464] [PID.3084] [MD5.42FEDBCB3ED926F6F529E0FDDF750BE0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8339968] [PID.2328] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences ~ Google Browser: 0 Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.51.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.51.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.51.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.06.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll ~ Firefox Browser: 5 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.06.) (No version) -- (.not file.) ~ IE Browser: 13 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 20 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll ~ BHO: 4 Scanned in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Program [AllUsers]: ABBYY FineReader 5.0 Sprint Plus.lnk . (.ABBYY (BIT Software) - FineReader Shell.) -- C:\Program Files\ABBYY FineReader 5.0 Sprint\Sprint.exe O4 - GS\Program [AllUsers]: Adobe Reader XI.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico O4 - GS\Program [AllUsers]: SumatraPDF.lnk . (.Krzysztof Kowalczyk - SumatraPDF.) -- C:\Program Files\SumatraPDF\SumatraPDF.exe O4 - GS\Program [Administrateur]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe =>.Microsoft Corporation O4 - GS\Program [Administrateur]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\Program [Admin]: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.) -- C:\WINDOWS\system32\rcimlby.exe =>.Microsoft Corporation O4 - GS\Program [Admin]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O4 - GS\Program [Admin]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\Program [Admin]: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.) -- C:\Program Files\Outlook Express\msimn.exe =>.Microsoft Corporation ~ Global Startup: 9 Scanned in 00mn 00s ---\\ Applications lancées au démarrage du sytème (O4) O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - HKCU\..\Run: [Connexion SFR 9props.exe] C:\Program Files\SFR\Kit\9props.exe (.not file.) O4 - HKUS\.DEFAULT\..\RunOnce: [Config] . (...) -- C:\WINDOWS\system32\run.cmd O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] . (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe O4 - HKUS\S-1-5-18\..\RunOnce: [Config] . (...) -- C:\WINDOWS\system32\run.cmd O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] . (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe O4 - HKUS\S-1-5-20\..\RunOnce: [Config] . (...) -- C:\WINDOWS\system32\run.cmd O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] . (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe O4 - HKUS\S-1-5-21-343818398-963894560-839522115-1003\..\Run: [Connexion SFR 9props.exe] C:\Program Files\SFR\Kit\9props.exe (.not file.) ~ Application: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation ~ Winsock: 3 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1364481647937 ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{B8DC828B-7540-48D6-8644-F21AE91B68FA}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{B8DC828B-7540-48D6-8644-F21AE91B68FA}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{B8DC828B-7540-48D6-8644-F21AE91B68FA}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll ~ SSODL: 4 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe ~ Services: 3 Scanned in 00mn 02s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop Component 0: (no name) - file:http://capmosaique.com/wp-content/uploads/2012/11/modele.jpg O24 - Default MHTML Editor: Last - .(...) - (.not file.) O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (sdnclean.exe) - File not found ~ BEX: 2 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At1.job [408] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\avast! Emergency Update.job [364] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\BitGuard.job [280] =>PUP.BitGuard O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1050] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1054] [MD5.F7AB315A4D400CA876381D1E188A2E20] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [257928] [MD5.00000000000000000000000000000000] [APT] [At1] (...) -- C:\DOCUME~1\Admin\APPLIC~1\Dealply\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.DealPly [MD5.F82F374417148CF545221DD88876219F] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [783728] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] ~ Scheduled Task: 14 Scanned in 00mn 00s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'installation individualisée de Internet Explorer.) -- C:\WINDOWS\system32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_12_0_0_70.ocx O40 - ASIC: Installed Component - S-1-5-21-343818398-963894560-839522115-1003 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID ~ Active Setup: 18 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (AswRdr) . (.AVAST Software - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys O41 - Driver: (aswTdi) . (.AVAST Software - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys ~ Drivers: 69 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 5.0 Sprint Plus - (.ABBYY Software House.) [HKLM] -- {D1696920-9794-4BBC-8A30-7A88763DE5A2} O42 - Logiciel: Adobe Flash Player 12 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd O42 - Logiciel: EPSON CardMonitor - (...) [HKLM] -- {109D28C7-FB38-483A-9C91-001CB59E2699} O42 - Logiciel: EPSON Copy Utility - (...) [HKLM] -- {B69CC1A5-0404-11D6-ABCB-005004C21D30} O42 - Logiciel: EPSON Logiciel imprimante - (...) [HKLM] -- EPSON Printer and Utilities O42 - Logiciel: EPSON PRINT Image Framer Tool2.1 - (...) [HKLM] -- {23B59ED4-C360-11D7-875B-0090CC005647} O42 - Logiciel: EPSON Photo Print - (...) [HKLM] -- {057B1FBC-DA65-4FE3-ADC7-C1476E19F392} O42 - Logiciel: EPSON PhotoQuicker3.5 - (...) [HKLM] -- {65F5B7AF-3363-11D7-BB6B-00018021113F} O42 - Logiciel: EPSON PhotoStarter3.1 - (...) [HKLM] -- {C48817E7-AA05-4151-A99D-1E1E550CE801} O42 - Logiciel: EPSON Scan - (...) [HKLM] -- {0E0131B2-CF18-40D9-A331-60A3746C1204} O42 - Logiciel: EPSON Smart Panel - (...) [HKLM] -- {6C11D561-620B-47DA-A693-4C597F3CDF40} O42 - Logiciel: ESPRX500 Guide de référence - (...) [HKLM] -- ESPRX500 Guide de référence O42 - Logiciel: ESPRX500 Guide des logiciels - (...) [HKLM] -- ESPRX500 Guide des logiciels O42 - Logiciel: ESPRX500 Guide fonctionnement - (...) [HKLM] -- ESPRX500 Guide fonctionnement O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Update Helper - (.DealPly Technologies Ltd.) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.DealPly O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Java 7 Update 51 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217051FF} O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7} O42 - Logiciel: SumatraPDF 2.4 - (.Krzysztof Kowalczyk.) [HKLM] -- SumatraPDF O42 - Logiciel: Windows Genuine Advantage v1.3.0254.0 - (.Microsoft.) [HKLM] -- {63569CE9-FA00-469C-AF5C-E5D4D93ACF91} O42 - Logiciel: WordBiz 1.8.7 - (...) [HKLM] -- WordBiz_0 O42 - Logiciel: avast! Free Antivirus v9.0.2013 - (.Avast Software.) [HKLM] -- avast ~ Logic: 27 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\77-Zip] [HKCU\Software\ABBYY] [HKCU\Software\AVAST Software] [HKCU\Software\Adobe] [HKCU\Software\Aurigma] [HKCU\Software\BearShare] =>PUP.BearShare [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Conduit] =>Toolbar.Conduit [HKCU\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\DealPlyLive] =>PUP.DealPly [HKCU\Software\EPSON] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Gr] [HKCU\Software\Intel] [HKCU\Software\Internet Scrabble Club] [HKCU\Software\JavaSoft] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Netscape] [HKCU\Software\OfferBox] =>PUP.OfferBox [HKCU\Software\OpenOffice.org] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\RG] [HKCU\Software\SEIKO EPSON] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Smart Panel] [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Software] [HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKCU\Software\Torch] [HKCU\Software\Trolltech] [HKCU\Software\TuneUp] [HKCU\Software\USyndication] =>Trojan.Trojan.USyndication [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\eSupport.com] [HKCU\Software\iLivid] =>Adware.Bandoo [HKCU\Software\iMesh] =>PUP.iMesh [HKCU\Software\kde.org] [HKCU\Software\mozilla] [HKCU\Software\telecharger-gratuit] [HKCU\Software\usyndication.com] =>Trojan.Trojan.USyndication [HKLM\Software\ABBYY] [HKLM\Software\AVAST Software] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\C07ft5Y] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Dofus2Beta] [HKLM\Software\Dofus2] [HKLM\Software\EPSON Photo Print] [HKLM\Software\EPSON] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\MusicNet] [HKLM\Software\NewSoft] [HKLM\Software\ODBC] [HKLM\Software\OfferBox] =>PUP.OfferBox [HKLM\Software\OpenOffice.org] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RegisteredApplications] [HKLM\Software\SEIKO EPSON CORP.] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Smart Panel] [HKLM\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKLM\Software\Speedchecker Limited] [HKLM\Software\Torch] [HKLM\Software\TuneUp] [HKLM\Software\VBMZ] =>PUP.Duuqu [HKLM\Software\Vittalia] =>Adware.PUP.Vittalia [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Wow6432Node] [HKLM\Software\mozilla] ~ Key Software: 142 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 23/10/2013 - 22:16:44 - [0] ----D C:\Program Files\7-Zip O43 - CFD: 16/03/2013 - 21:43:44 - [31,805] ----D C:\Program Files\ABBYY FineReader 5.0 Sprint O43 - CFD: 23/10/2013 - 22:17:20 - [120,874] ----D C:\Program Files\Adobe O43 - CFD: 16/03/2013 - 21:56:24 - [337,082] ----D C:\Program Files\AVAST Software O43 - CFD: 07/02/2014 - 22:36:36 - [0] ----D C:\Program Files\BearShare Applications =>PUP.BearShare O43 - CFD: 01/02/2014 - 21:57:57 - [6,612] ----D C:\Program Files\CCleaner =>Piriform Ltd O43 - CFD: 16/03/2013 - 21:24:58 - [0] ----D C:\Program Files\ComPlus Applications O43 - CFD: 04/10/2013 - 21:09:10 - [0,851] ----D C:\Program Files\DealPly =>PUP.DealPly O43 - CFD: 04/10/2013 - 22:05:25 - [0] ----D C:\Program Files\DealPlyLive =>PUP.DealPly O43 - CFD: 19/11/2013 - 17:01:20 - [85,075] ----D C:\Program Files\EPSON O43 - CFD: 26/06/2013 - 12:17:29 - [1,810] ----D C:\Program Files\eSupport.com O43 - CFD: 28/01/2014 - 15:41:17 - [27,792] ----D C:\Program Files\Fichiers communs O43 - CFD: 13/09/2013 - 22:23:02 - [483,748] ----D C:\Program Files\Google O43 - CFD: 16/03/2013 - 22:04:53 - [0] ----D C:\Program Files\GUMD3.tmp O43 - CFD: 19/11/2013 - 17:01:19 - [25,343] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 17/09/2013 - 20:15:30 - [1,353] ----D C:\Program Files\Internet Explorer O43 - CFD: 24/01/2014 - 11:38:20 - [123,110] ----D C:\Program Files\Java O43 - CFD: 26/02/2014 - 20:37:18 - [0,024] ----D C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 16/04/2013 - 17:42:06 - [91,436] ----D C:\Program Files\Metin2 O43 - CFD: 16/03/2013 - 21:28:46 - [0] ----D C:\Program Files\microsoft frontpage O43 - CFD: 13/05/2013 - 10:18:49 - [0,015] ----D C:\Program Files\Microsoft.NET O43 - CFD: 28/11/2013 - 17:08:51 - [1,584] ----D C:\Program Files\Mobogenie =>PUP.Mobogenie O43 - CFD: 16/03/2013 - 21:28:46 - [0] ----D C:\Program Files\movie maker O43 - CFD: 13/05/2013 - 10:14:47 - [0] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 26/06/2013 - 16:21:09 - [26,600] ----D C:\Program Files\MSECache O43 - CFD: 16/03/2013 - 21:28:46 - [0] ----D C:\Program Files\msn gaming zone O43 - CFD: 16/03/2013 - 21:26:06 - [3,133] ----D C:\Program Files\NetMeeting O43 - CFD: 09/07/2013 - 21:06:19 - [285,319] ----D C:\Program Files\OpenOffice.org 3 O43 - CFD: 16/03/2013 - 21:30:27 - [4,173] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation O43 - CFD: 16/03/2013 - 21:26:45 - [0,001] ----D C:\Program Files\Services en ligne O43 - CFD: 16/03/2013 - 21:42:41 - [62,348] ----D C:\Program Files\Smart Panel O43 - CFD: 04/10/2013 - 20:56:38 - [0] ----D C:\Program Files\Software O43 - CFD: 27/02/2014 - 20:44:21 - [0,259] ----D C:\Program Files\Spybot - Search & Destroy 2 O43 - CFD: 17/09/2013 - 20:15:16 - [9,642] ----D C:\Program Files\SumatraPDF O43 - CFD: 01/10/2013 - 20:12:30 - [7,204] ----D C:\Program Files\TuneUp Utilities 2014 O43 - CFD: 21/07/2013 - 16:53:38 - [1,389] --H-D C:\Program Files\Uninstall Information O43 - CFD: 17/09/2013 - 20:31:09 - [0,047] ----D C:\Program Files\Uninstaller O43 - CFD: 16/03/2013 - 21:28:13 - [3,084] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 16/03/2013 - 21:28:46 - [0,742] ----D C:\Program Files\Windows NT O43 - CFD: 16/03/2013 - 21:26:48 - [0] --H-D C:\Program Files\WindowsUpdate O43 - CFD: 19/03/2013 - 17:38:32 - [66,883] ----D C:\Program Files\WordBiz O43 - CFD: 16/03/2013 - 21:28:46 - [0] ----D C:\Program Files\xerox O43 - CFD: 27/02/2014 - 20:59:35 - [17,259] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 17/03/2013 - 11:00:28 - [6,238] ----D C:\Program Files\Fichiers communs\Adobe O43 - CFD: 02/10/2013 - 20:04:54 - [1,305] ----D C:\Program Files\Fichiers communs\InstallShield O43 - CFD: 17/09/2013 - 16:04:04 - [1,191] ----D C:\Program Files\Fichiers communs\Java O43 - CFD: 17/09/2013 - 20:15:32 - [8,683] ----D C:\Program Files\Fichiers communs\Microsoft Shared O43 - CFD: 16/03/2013 - 21:26:01 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap O43 - CFD: 16/03/2013 - 22:19:50 - [0] ----D C:\Program Files\Fichiers communs\ODBC O43 - CFD: 16/03/2013 - 21:26:04 - [0,008] ----D C:\Program Files\Fichiers communs\Services O43 - CFD: 16/03/2013 - 22:19:47 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines O43 - CFD: 16/03/2013 - 21:25:38 - [6,485] ----D C:\Program Files\Fichiers communs\System O43 - CFD: 17/03/2013 - 12:43:29 - [147,185] ----D C:\Documents and Settings\All Users\Application Data\Adobe O43 - CFD: 02/12/2013 - 20:52:15 - [86,200] ----D C:\Documents and Settings\All Users\Application Data\AVAST Software O43 - CFD: 28/09/2013 - 17:25:39 - [0] --H-D C:\Documents and Settings\All Users\Application Data\Common Files O43 - CFD: 04/10/2013 - 21:00:29 - [0,057] ----D C:\Documents and Settings\All Users\Application Data\DealPlyLive =>PUP.DealPly O43 - CFD: 25/02/2014 - 21:02:38 - [0,001] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes O43 - CFD: 27/02/2014 - 20:42:48 - [1,437] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 28/01/2014 - 15:41:17 - [0] ----D C:\Documents and Settings\All Users\Application Data\SpeedMaxPc =>PUP.SpeedMaxPc O43 - CFD: 26/02/2014 - 21:55:23 - [0,559] ----D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy O43 - CFD: 17/09/2013 - 16:04:07 - [0] ----D C:\Documents and Settings\All Users\Application Data\Sun O43 - CFD: 17/09/2013 - 20:14:38 - [0] ----D C:\Documents and Settings\All Users\Application Data\TEMP O43 - CFD: 28/09/2013 - 17:32:15 - [0,168] ----D C:\Documents and Settings\All Users\Application Data\TuneUp Software O43 - CFD: 16/03/2013 - 21:44:10 - [3,070] ----D C:\Documents and Settings\All Users\Application Data\UDL O43 - CFD: 28/09/2013 - 17:44:08 - [0] -SH-D C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} O43 - CFD: 17/03/2013 - 12:43:29 - [2,033] ----D C:\Documents and Settings\Admin\Application Data\Adobe O43 - CFD: 17/03/2013 - 17:13:34 - [0,004] ----D C:\Documents and Settings\Admin\Application Data\AnkamaCertificates O43 - CFD: 17/03/2013 - 13:19:29 - [0,005] ----D C:\Documents and Settings\Admin\Application Data\app O43 - CFD: 15/10/2013 - 10:08:53 - [0] ----D C:\Documents and Settings\Admin\Application Data\ArchiFacile O43 - CFD: 17/03/2013 - 12:32:54 - [0] ----D C:\Documents and Settings\Admin\Application Data\ATI O43 - CFD: 05/12/2013 - 17:22:05 - [6,981] ----D C:\Documents and Settings\Admin\Application Data\AVAST Software O43 - CFD: 04/10/2013 - 21:00:03 - [0] ----D C:\Documents and Settings\Admin\Application Data\Dealply =>PUP.DealPly O43 - CFD: 28/06/2013 - 12:17:59 - [0] ----D C:\Documents and Settings\Admin\Application Data\Dofus O43 - CFD: 28/06/2013 - 13:28:53 - [0] ----D C:\Documents and Settings\Admin\Application Data\Dofus-2 O43 - CFD: 28/06/2013 - 13:56:19 - [0] ----D C:\Documents and Settings\Admin\Application Data\Dofus-3 O43 - CFD: 13/07/2013 - 10:05:21 - [0] ----D C:\Documents and Settings\Admin\Application Data\Dofus-4 O43 - CFD: 08/08/2013 - 15:52:50 - [13,929] ----D C:\Documents and Settings\Admin\Application Data\Dofus2 O43 - CFD: 08/08/2013 - 16:25:44 - [1,406] ----D C:\Documents and Settings\Admin\Application Data\Dofus2Beta O43 - CFD: 02/08/2013 - 18:08:41 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusBeta O43 - CFD: 06/08/2013 - 07:52:07 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusBeta-2 O43 - CFD: 17/03/2013 - 15:57:20 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusTesting O43 - CFD: 17/03/2013 - 13:19:27 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusTesting-2 O43 - CFD: 04/05/2013 - 15:53:44 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusTesting-3 O43 - CFD: 19/05/2013 - 10:43:17 - [0] ----D C:\Documents and Settings\Admin\Application Data\DofusTesting-4 O43 - CFD: 28/01/2014 - 15:37:08 - [0] ----D C:\Documents and Settings\Admin\Application Data\DriverCure =>PUP.DriverCure O43 - CFD: 17/06/2013 - 10:29:57 - [0] ----D C:\Documents and Settings\Admin\Application Data\EPSON O43 - CFD: 30/07/2013 - 21:39:59 - [0] ----D C:\Documents and Settings\Admin\Application Data\Google O43 - CFD: 23/04/2013 - 20:35:23 - [0] ----D C:\Documents and Settings\Admin\Application Data\Help O43 - CFD: 16/03/2013 - 21:37:15 - [0] ----D C:\Documents and Settings\Admin\Application Data\Identities O43 - CFD: 13/09/2013 - 22:14:31 - [0] ----D C:\Documents and Settings\Admin\Application Data\LiveCAD3 O43 - CFD: 16/03/2013 - 22:15:52 - [0,001] ----D C:\Documents and Settings\Admin\Application Data\Macromedia O43 - CFD: 25/02/2014 - 21:03:47 - [0] ----D C:\Documents and Settings\Admin\Application Data\Malwarebytes O43 - CFD: 09/12/2013 - 19:01:39 - [8,325] -S--D C:\Documents and Settings\Admin\Application Data\Microsoft O43 - CFD: 21/07/2013 - 16:53:35 - [0,840] ----D C:\Documents and Settings\Admin\Application Data\Mozilla O43 - CFD: 25/02/2014 - 20:42:56 - [0,004] ----D C:\Documents and Settings\Admin\Application Data\newnext.me =>PUP.NextLive O43 - CFD: 04/10/2013 - 20:57:13 - [0,286] ----D C:\Documents and Settings\Admin\Application Data\OfferBox =>PUP.OfferBox O43 - CFD: 28/09/2013 - 17:22:44 - [31,497] ----D C:\Documents and Settings\Admin\Application Data\OpenCandy =>Adware.OpenCandy O43 - CFD: 04/05/2013 - 09:11:59 - [21,422] ----D C:\Documents and Settings\Admin\Application Data\OpenOffice.org O43 - CFD: 31/07/2013 - 10:05:30 - [0] ----D C:\Documents and Settings\Admin\Application Data\Reg O43 - CFD: 17/03/2013 - 13:19:29 - [0] ----D C:\Documents and Settings\Admin\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 02/08/2013 - 18:08:52 - [0] ----D C:\Documents and Settings\Admin\Application Data\RegBeta O43 - CFD: 17/03/2013 - 17:12:54 - [0] ----D C:\Documents and Settings\Admin\Application Data\RegBeta.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 21/07/2013 - 16:54:26 - [0,001] ----D C:\Documents and Settings\Admin\Application Data\RocketPDF O43 - CFD: 28/01/2014 - 14:27:17 - [0] ----D C:\Documents and Settings\Admin\Application Data\SFR O43 - CFD: 03/06/2013 - 19:24:06 - [0,116] ----D C:\Documents and Settings\Admin\Application Data\Smart Panel O43 - CFD: 17/09/2013 - 15:27:42 - [0,121] ----D C:\Documents and Settings\Admin\Application Data\SpeedAnalysis3 =>PUP.SpeedAnalysis O43 - CFD: 28/01/2014 - 15:37:07 - [0] ----D C:\Documents and Settings\Admin\Application Data\SpeedMaxPc =>PUP.SpeedMaxPc O43 - CFD: 04/11/2013 - 10:42:24 - [0,287] ----D C:\Documents and Settings\Admin\Application Data\SumatraPDF O43 - CFD: 17/09/2013 - 16:00:47 - [76,003] ----D C:\Documents and Settings\Admin\Application Data\Sun O43 - CFD: 17/09/2013 - 16:31:20 - [0] ----D C:\Documents and Settings\Admin\Application Data\TFP O43 - CFD: 28/09/2013 - 17:30:58 - [0,068] ----D C:\Documents and Settings\Admin\Application Data\TuneUp Software O43 - CFD: 17/09/2013 - 16:45:25 - [0] ----D C:\Documents and Settings\Admin\Application Data\WinRAR O43 - CFD: 27/02/2014 - 21:00:17 - [0,079] ----D C:\Documents and Settings\Admin\Application Data\ZHP =>.Nicolas Coolman O43 - CFD: 24/07/2013 - 21:28:51 - [0,055] ----D C:\Documents and Settings\Admin\Application Data\zulagames O43 - CFD: 26/06/2013 - 10:20:43 - [0,121] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\ABBYY O43 - CFD: 01/02/2014 - 21:13:16 - [11,690] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Adobe O43 - CFD: 17/03/2013 - 12:32:54 - [0,061] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\ATI O43 - CFD: 15/11/2013 - 10:26:25 - [6,825] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\cache O43 - CFD: 04/10/2013 - 21:00:29 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\DealPlyLive =>PUP.DealPly O43 - CFD: 04/10/2013 - 20:57:35 - [0,029] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\emaze O43 - CFD: 25/02/2014 - 20:48:10 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\genienext O43 - CFD: 30/07/2013 - 21:39:59 - [488,061] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Google O43 - CFD: 23/04/2013 - 20:35:23 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Help O43 - CFD: 23/03/2013 - 16:56:53 - [0,289] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Identities O43 - CFD: 25/12/2013 - 21:03:42 - [10,155] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft O43 - CFD: 28/11/2013 - 17:08:51 - [125,784] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Mobogenie =>PUP.Mobogenie O43 - CFD: 04/10/2013 - 20:55:36 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Software =>Adware.Boxore O43 - CFD: 17/09/2013 - 19:57:30 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Sun O43 - CFD: 23/12/2013 - 20:59:38 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\temp O43 - CFD: 17/09/2013 - 16:38:28 - [27,944] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\Torch O43 - CFD: 15/10/2013 - 08:49:00 - [0] ----D C:\Documents and Settings\Admin\Local Settings\Application Data\VisualBeeExe =>Adware.VisualBeeToolbar O43 - CFD: 16/03/2013 - 21:37:17 - [0,013] R---D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\Accessoires O43 - CFD: 17/09/2013 - 20:34:31 - [0] R---D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\Démarrage O43 - CFD: 16/03/2013 - 21:44:39 - [0,005] ----D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\EPSON O43 - CFD: 22/10/2013 - 19:58:49 - [0] R---D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\Outils d'administration O43 - CFD: 19/03/2013 - 17:38:13 - [0,001] ----D C:\Documents and Settings\Admin\Menu Démarrer\Programmes\WordBiz ~ Program Folder: 136 Scanned in 00mn 02s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.0245D0889C3443F5DC9194558583FE59] - 13/02/2014 - 20:43:28 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [43152] O44 - LFC:[MD5.CF915E66756D84260F92BB9016F155A1] - 13/02/2014 - 20:43:28 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\system32\aswBoot.exe [270240] O44 - LFC:[MD5.E6390554DCB2A730702188547267093C] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57672] O44 - LFC:[MD5.98C18C78B0C3E7EFBDDA7BD0C35F5903] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [54832] O44 - LFC:[MD5.8CD8710457FCC1CDE88CBFA3AA119B92] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [775952] O44 - LFC:[MD5.C1F95C9481F46B96E23A276639C55AC9] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [410784] O44 - LFC:[MD5.7021F01CCAC1538CCF9AE004723AF033] - 13/02/2014 - 20:43:52 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\system32\Drivers\aswmonflt.sys [67824] O44 - LFC:[MD5.147F614063F599875E8B76F0505D6E13] - 21/02/2014 - 17:52:32 ---A- . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\WINDOWS\system32\FlashPlayerInstaller.exe [17268616] O44 - LFC:[MD5.72F76B12C09B36F26219920D0B2E7EF3] - 21/02/2014 - 17:52:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe [692616] O44 - LFC:[MD5.FD38EBD137378FE594E7EFEBB5B3E096] - 21/02/2014 - 17:52:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [71048] O44 - LFC:[MD5.41BAF6A0CD8CA835FA7A55D6494D94DD] - 25/02/2014 - 20:41:41 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206] O44 - LFC:[MD5.0DB7527DB188C7D967A37BB51BBF3963] - 25/02/2014 - 21:07:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbamswissarmy.sys [40776] O44 - LFC:[MD5.DF614AEA27276759CDB22FFD845D444B] - 26/02/2014 - 21:45:23 -SH-- . (...) -- C:\boot.ini [246] O44 - LFC:[MD5.73FE8285D075FE7F0CD980870A09AF3D] - 27/02/2014 - 20:42:51 ---A- . (...) -- C:\WINDOWS\WININIT.INI [79] O44 - LFC:[MD5.7BB3C128D9BD4960FF2FDDE48EADE01D] - 27/02/2014 - 20:43:48 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32608] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/02/2014 - 20:44:27 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.E3897A6124018F25E61E9140B9F4687D] - 27/02/2014 - 20:44:46 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.ED265D58850725CDCA8E0387C1042EC6] - 27/02/2014 - 20:44:54 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/02/2014 - 20:45:27 ---A- . (...) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.9E2C5D3B9B92B1FBF917670D933F91B0] - 27/02/2014 - 20:47:18 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [664] O44 - LFC:[MD5.9907CF536C1B53E660DE07A72E155B80] - 27/02/2014 - 20:51:00 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [439917] ~ Files: 22 Scanned in 00mn 03s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.05E16A3D32E282AA5D0CB28972C515E1] - 01/02/2014 - 20:59:59 ---A- - C:\WINDOWS\Prefetch\18852707-FAAC-4780-80BC-82E19-11FE76AD.pf O45 - LFCP:[MD5.539E24F00B40F0557A08C30014D11FB9] - 01/02/2014 - 20:59:59 ---A- - C:\WINDOWS\Prefetch\37D6372D-62D2-40E2-BE47-9A128-1E2F2D07.pf O45 - LFCP:[MD5.99633BE4CD6DD433A4308FD8E4169183] - 01/02/2014 - 21:01:05 ---A- - C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf O45 - LFCP:[MD5.C6F7A1D55AB2AC48E048EC019098964C] - 01/02/2014 - 21:12:04 ---A- - C:\WINDOWS\Prefetch\INSTALL_FLASHPLAYER12X32AX_MS-2BFBD249.pf O45 - LFCP:[MD5.9CFC2D8E19FFF2E44AF17EA8F2B86731] - 01/02/2014 - 21:12:09 ---A- - C:\WINDOWS\Prefetch\INSTALL_FLASHPLAYER12X32AX_MS-130062AC.pf O45 - LFCP:[MD5.03EFCFA8E5808C6276F61924D19B6570] - 01/02/2014 - 21:12:18 ---A- - C:\WINDOWS\Prefetch\GTBCHECK.EXE-0359DC13.pf O45 - LFCP:[MD5.B4D2845FE7AE82B63E8C59A11BB44A00] - 01/02/2014 - 21:12:20 ---A- - C:\WINDOWS\Prefetch\GCCHECK.EXE-2F45300B.pf O45 - LFCP:[MD5.14C14ECE54F2CF5484DAEEBCFBB7DA09] - 01/02/2014 - 21:36:35 ---A- - C:\WINDOWS\Prefetch\SETUP.EXE-2297B145.pf O45 - LFCP:[MD5.36EA495092643A80660180FC5B679FE0] - 01/02/2014 - 21:47:43 ---A- - C:\WINDOWS\Prefetch\MEDIACENTER.EXE-02EB80DA.pf O45 - LFCP:[MD5.4984A69269FD0ABCAB3812BA0C0BE4F1] - 01/02/2014 - 21:49:01 ---A- - C:\WINDOWS\Prefetch\9LAUNCH.EXE-1CFF14BB.pf O45 - LFCP:[MD5.46C11400D71500971E28521727E1B001] - 03/02/2014 - 20:43:32 ---A- - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf O45 - LFCP:[MD5.5990B3169DC25DB05F4A792438DAE8E1] - 05/02/2014 - 20:46:11 ---A- - C:\WINDOWS\Prefetch\BROWSERCLEANUP.EXE-1A1409BD.pf O45 - LFCP:[MD5.8D8C3123AF7FC980E92634D9296EAD38] - 05/02/2014 - 20:46:27 ---A- - C:\WINDOWS\Prefetch\AVASTBCL-SFX.EXE-09C8D5DC.pf O45 - LFCP:[MD5.BC2F6263F927C1F2286E1011574A2733] - 05/02/2014 - 20:46:27 ---A- - C:\WINDOWS\Prefetch\BROWSERCLEANUP.EXE-088BEBEF.pf O45 - LFCP:[MD5.A19867680107875E9D95CD3CBA5A4309] - 05/02/2014 - 20:51:26 ---A- - C:\WINDOWS\Prefetch\UNINSTALL.EXE-36258B8B.pf O45 - LFCP:[MD5.DF848BD5D9B280DE83754FBD715ED166] - 05/02/2014 - 20:51:29 ---A- - C:\WINDOWS\Prefetch\9CONF.EXE-25F0D459.pf O45 - LFCP:[MD5.C68040070E5D7C44F10C1378CFF28CF4] - 05/02/2014 - 20:51:30 ---A- - C:\WINDOWS\Prefetch\9DIAGS.EXE-2F86E66A.pf O45 - LFCP:[MD5.4494E6394D48D2AE5B36F43E3FC11722] - 05/02/2014 - 20:51:30 ---A- - C:\WINDOWS\Prefetch\9PROPS.EXE-2DF7AAF6.pf O45 - LFCP:[MD5.7F28A43B265E673B23CDA5B4088EA7DF] - 05/02/2014 - 20:51:31 ---A- - C:\WINDOWS\Prefetch\9WIFI.EXE-231ED265.pf O45 - LFCP:[MD5.DDC12A0A089DFFD5FD4DA7812AC130A0] - 06/02/2014 - 20:42:00 ---A- - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf O45 - LFCP:[MD5.1E9D44C21104B60AD62C4DC081FD6CC3] - 06/02/2014 - 23:04:06 ---A- - C:\WINDOWS\Prefetch\JAVAW.EXE-021F87DA.pf O45 - LFCP:[MD5.6073255A37F671FC9D2733EE97347B35] - 06/02/2014 - 23:04:08 ---A- - C:\WINDOWS\Prefetch\JAVAWS.EXE-1EEF33AA.pf O45 - LFCP:[MD5.433CDA098E9B4D694C4F069E8626FF70] - 07/02/2014 - 20:46:01 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-28839C5E.pf O45 - LFCP:[MD5.2EF1FC107CB5B544AB38005C2F381402] - 07/02/2014 - 20:46:02 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf O45 - LFCP:[MD5.38968109323B9B27C9DBECB5CD5C4A29] - 07/02/2014 - 20:46:02 ---A- - C:\WINDOWS\Prefetch\JUSCHED.EXE-0173BDFB.pf O45 - LFCP:[MD5.D32064BA3D61A419F19EFF25DBE3FB1D] - 07/02/2014 - 20:46:02 ---A- - C:\WINDOWS\Prefetch\READER_SL.EXE-089975CC.pf O45 - LFCP:[MD5.F09EA3BB3506E40E47C3E56BD85ADE6B] - 07/02/2014 - 21:38:01 ---A- - C:\WINDOWS\Prefetch\JAVA.EXE-1E21D4DA.pf O45 - LFCP:[MD5.2D012EDD4F516F85999834C17521AC52] - 07/02/2014 - 22:29:18 ---A- - C:\WINDOWS\Prefetch\NETSH.EXE-085CFFDE.pf O45 - LFCP:[MD5.6D6068565D58CC5CA615F4F225D58065] - 07/02/2014 - 22:36:17 ---A- - C:\WINDOWS\Prefetch\AU_.EXE-34E9686B.pf O45 - LFCP:[MD5.904562FFBFD1D514DDCFEE967F83E92A] - 10/02/2014 - 21:56:56 ---A- - C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf O45 - LFCP:[MD5.390DC0358F2BFF0C51C9D8D7A944628A] - 10/02/2014 - 22:09:21 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-22E35C38.pf O45 - LFCP:[MD5.D6D7CCC8A4A7916570A8CC81AC50C721] - 13/02/2014 - 20:42:23 ---A- - C:\WINDOWS\Prefetch\INSTUP.EXE-01E50626.pf O45 - LFCP:[MD5.5A0C5651746BFD28C5DD68860ECF6B65] - 14/02/2014 - 21:37:15 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-EED5A24F.pf O45 - LFCP:[MD5.99CF1E5BAADAB2B0C165BEE5DF8F299A] - 16/02/2014 - 17:03:37 ---A- - C:\WINDOWS\Prefetch\SUMATRAPDF.EXE-1AA19E18.pf O45 - LFCP:[MD5.61E24BDE62944F47DFC486599181D3CF] - 17/02/2014 - 16:48:50 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-3B19D33B.pf O45 - LFCP:[MD5.EFFD362799E35F142D43D47E0CF43E68] - 17/02/2014 - 18:47:55 ---A- - C:\WINDOWS\Prefetch\SSMYST.SCR-1CCCF0DC.pf O45 - LFCP:[MD5.B3ABB17D8ACC47ED35F4BAF7802B66BA] - 21/02/2014 - 18:45:24 ---A- - C:\WINDOWS\Prefetch\POPOTANAGRAMME.EXE-0CD7FE1C.pf O45 - LFCP:[MD5.6932A6786AC5C396C5C0162DD4F1794C] - 21/02/2014 - 18:45:55 ---A- - C:\WINDOWS\Prefetch\WORDBIZ.EXE-0F1BAC1C.pf O45 - LFCP:[MD5.B1344939DE98EDF652EF337A042627DE] - 25/02/2014 - 20:43:12 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13C59DFD.pf O45 - LFCP:[MD5.398CA4E36AE10365C93C4DE16E96EBDA] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\AVASTSVC.EXE-2FF42CC2.pf O45 - LFCP:[MD5.BCC1895D34ED8A80D35B033AF6594CE5] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\CSRSS.EXE-12B63473.pf O45 - LFCP:[MD5.D673F996835E0C6128BA081B16585180] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\INSTUP.EXE-2B8BA16F.pf O45 - LFCP:[MD5.3365740DDCC2B312333FFABF4B3F946E] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\JQS.EXE-21B69FF4.pf O45 - LFCP:[MD5.C5345CBD3C1380ECB093C0B2D1F3CDE5] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\LSASS.EXE-20DB6D1B.pf O45 - LFCP:[MD5.D660E07ED16D1BCD0B9921D9366C24CC] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\MSCORSVW.EXE-1366B4F5.pf O45 - LFCP:[MD5.E203BF73FEBA464E4907E3907F6B0C58] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\SERVICES.EXE-2F433351.pf O45 - LFCP:[MD5.3EAA3E1FE109FC9BBE7F2ACF4FCB6387] - 25/02/2014 - 20:50:00 ---A- - C:\WINDOWS\Prefetch\WINLOGON.EXE-32C57D49.pf O45 - LFCP:[MD5.6A91E81E5BC516DE4E91F1DF1850BB45] - 25/02/2014 - 21:06:39 ---A- - C:\WINDOWS\Prefetch\ASWOFFERTOOL.EXE-1F51A021.pf O45 - LFCP:[MD5.181C7FFD51DC9016FC3155774F54ABD2] - 25/02/2014 - 21:29:53 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf O45 - LFCP:[MD5.C54972112D3D0901F930E540739FC387] - 25/02/2014 - 21:30:34 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf O45 - LFCP:[MD5.A3ABF705775D6904C0772132A2C146B8] - 25/02/2014 - 21:54:05 ---A- - C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf O45 - LFCP:[MD5.30C8AA6C6C5AC86852D7A7A3A879D8FF] - 26/02/2014 - 20:39:06 ---A- - C:\WINDOWS\Prefetch\SOFFICE.BIN-01E25E9C.pf O45 - LFCP:[MD5.FFE33A9D2F42F0A52B5E3EA6BF24A3A1] - 26/02/2014 - 20:39:06 ---A- - C:\WINDOWS\Prefetch\SOFFICE.EXE-358D937C.pf O45 - LFCP:[MD5.E1BBF38D201554AAEC8EA81F8FA0ABA4] - 27/02/2014 - 20:36:51 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf O45 - LFCP:[MD5.4326F17FEDCDE9489244C846332D3B61] - 27/02/2014 - 20:36:51 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf O45 - LFCP:[MD5.226CEBF70116EFA9F06715337584F8AC] - 27/02/2014 - 20:42:46 ---A- - C:\WINDOWS\Prefetch\TASKKILL.EXE-0A8306E3.pf O45 - LFCP:[MD5.68FB72D35E11C5F5A5254B8AAE5A1235] - 27/02/2014 - 20:42:56 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf O45 - LFCP:[MD5.C5DF0F731C26E988AA076144F1B882BD] - 27/02/2014 - 20:43:07 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf O45 - LFCP:[MD5.1D53545293F593D3CE59CB423FF9AA64] - 27/02/2014 - 20:43:17 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf O45 - LFCP:[MD5.6A593A91C9C0E131738910B9100FC226] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\AVASTEMUPDATE.EXE-033BD90D.pf O45 - LFCP:[MD5.4B94CA4BDA2251C87AE16B6B7FBDCF36] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-0B3C80E5.pf O45 - LFCP:[MD5.F21184315C9CAB1BD08FA80E5BEC7662] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\AVBUGREPORT.EXE-17B0B851.pf O45 - LFCP:[MD5.C025D1B753EEBE901D60E9C1B69F09B2] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf O45 - LFCP:[MD5.72EC0278E37E356852B00F0914CB2C19] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf O45 - LFCP:[MD5.5D1E598973156354DE8673E61E391B01] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.9CF203B0F4A5C40A5D5FF87AE34A13FE] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf O45 - LFCP:[MD5.F5A7D3AF75686E701A1DFF396D1F1D4E] - 27/02/2014 - 20:46:56 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf O45 - LFCP:[MD5.3E65755FF865C1673C925323708EE8D7] - 27/02/2014 - 20:47:12 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-06157C0F.pf O45 - LFCP:[MD5.68A657D1DF1E69941670E6902220FD50] - 27/02/2014 - 20:47:17 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-3715295A.pf O45 - LFCP:[MD5.EF2393CEDD21676646393C4A6FCECF3F] - 27/02/2014 - 20:48:12 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-E0603309.pf O45 - LFCP:[MD5.8F76B48E13D5D887DCC167451A52AB03] - 27/02/2014 - 20:52:10 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-34BC5027.pf O45 - LFCP:[MD5.4B5092196300D5358F9EA45526A96E4F] - 27/02/2014 - 20:52:42 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf O45 - LFCP:[MD5.6D1AB704F0AD4EA1162CB3A0C6397277] - 27/02/2014 - 20:55:15 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-DF9E35B6.pf O45 - LFCP:[MD5.1D6F14335D8254AEC916C4726232873F] - 27/02/2014 - 20:57:20 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-2E34A69E.pf O45 - LFCP:[MD5.DCBA81C7467BECD072AEDB69C8F8143E] - 27/02/2014 - 20:59:06 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf O45 - LFCP:[MD5.9ABA84A6F4F02DBA0A2A9F538ABACC31] - 27/02/2014 - 21:00:00 ---A- - C:\WINDOWS\Prefetch\SC.EXE-012262AF.pf O45 - LFCP:[MD5.0FCDB0E8EC1F791F316413E7AAD97DC7] - 28/01/2014 - 14:13:54 ---A- - C:\WINDOWS\Prefetch\NS71.TMP-067BC062.pf O45 - LFCP:[MD5.ED87B4A7F0B906154B46ABB9814013F7] - 28/01/2014 - 14:15:28 ---A- - C:\WINDOWS\Prefetch\INSTALLOPTIONS.EXE-0A96DDFD.pf O45 - LFCP:[MD5.BC6DEFF5AA6DE54915E85A49F829E1E1] - 28/01/2014 - 14:16:06 ---A- - C:\WINDOWS\Prefetch\INSTALLOPTION.EXE-07E805F0.pf O45 - LFCP:[MD5.F216F403E174AFDBFA9F7F132FA7422B] - 28/01/2014 - 14:28:30 ---A- - C:\WINDOWS\Prefetch\FLASH.EXE-2571B010.pf O45 - LFCP:[MD5.BF11747D9EEC979B5B4E3EA3D62C50F8] - 28/01/2014 - 14:28:32 ---A- - C:\WINDOWS\Prefetch\FLASHUTIL9K.EXE-3833FBC9.pf O45 - LFCP:[MD5.59928E81735EE60DEFF141EEEC216A0D] - 28/01/2014 - 14:28:32 ---A- - C:\WINDOWS\Prefetch\NS7.TMP-33068339.pf O45 - LFCP:[MD5.282B7CC1FB7073581103E4760A44C42A] - 28/01/2014 - 15:22:17 ---A- - C:\WINDOWS\Prefetch\9SUPPORT.EXE-2EF3F31A.pf O45 - LFCP:[MD5.0E1C6263E07F4E6A90895DF1AEB4FC9F] - 28/01/2014 - 15:22:48 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-34A1FC07.pf O45 - LFCP:[MD5.32C8CE236F6B046B95852E68B594DF1C] - 28/01/2014 - 15:37:28 ---A- - C:\WINDOWS\Prefetch\SPEEDMAXPC_INSTALLER_FR.EXE-1A103BCD.pf =>PUP.SpeedMaxPc O45 - LFCP:[MD5.95578B7492CDE7F51515F4C32FF0A4CB] - 28/01/2014 - 15:40:56 ---A- - C:\WINDOWS\Prefetch\UNINSTALL.EXE-05FA30DE.pf O45 - LFCP:[MD5.8AAA776981E5DFF6D64C4B68EFE5EB16] - 28/01/2014 - 15:40:59 ---A- - C:\WINDOWS\Prefetch\SPEEDMAXPC.EXE-19E6FC14.pf =>PUP.SpeedMaxPc O45 - LFCP:[MD5.AF518120CB5F94B253E9CA4BD25F37A6] - 28/01/2014 - 15:41:16 ---A- - C:\WINDOWS\Prefetch\UPDATE3.EXE-171755F2.pf O45 - LFCP:[MD5.36F07F7EBE123F6124AED53484466C14] - 28/01/2014 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\SLOWIN KILLER.EXE-28042020.pf O45 - LFCP:[MD5.86E8603CBA6A71AF2D4DE36CB39DCAE8] - 28/01/2014 - 16:05:56 ---A- - C:\WINDOWS\Prefetch\SWRITER.EXE-38A9F6BD.pf O45 - LFCP:[MD5.A26F22D4CFFE67E7AF06EB7AF6DF4213] - 28/01/2014 - 16:28:04 ---A- - C:\WINDOWS\Prefetch\E_S10MT2.EXE-0E680929.pf O45 - LFCP:[MD5.E1A359F050118C7DC3E452F9B4FF66C2] - 28/01/2014 - 16:28:04 ---A- - C:\WINDOWS\Prefetch\E_S10RN2.EXE-38983110.pf O45 - LFCP:[MD5.CBE8870987683F320F067EAA8C8F9F7E] - 28/01/2014 - 16:30:07 ---A- - C:\WINDOWS\Prefetch\KIT.EXE-04CE5F4C.pf O45 - LFCP:[MD5.5C9E5D7C838EFCED88DFEF2B0FF162BE] - 28/01/2014 - 16:30:46 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-38767B4D.pf ~ Prefetcher: 94 Scanned in 00mn 00s ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ~ ShellExecuteHooks: Scanned in 00mn 00s ---\\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\MaConfigAgent.exe" [Enabled] .(...) -- C:\Program Files\ma-config.com\MaConfigAgent.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\iMesh Applications\iMesh\iMesh.exe" [Enabled] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.iMesh O47 - AAKE:Key Export SP - "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" [Enabled] .(...) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\iMesh Applications\iMesh\iMesh.exe" [Enabled] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) =>PUP.iMesh O47 - AAKE:Key Export DP - "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" [Enabled] .(...) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare ~ Keys Export: 8 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll ~ LSA: 6 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) ~ CSB: 21 Scanned in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ IFEO: Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{477f075a-bbac-11e2-98ec-00112fa67f97}\AutoRun\command. (...) -- J:\sources\SetupError.exe (.not file.) O51 - MPSK:{5c48adc6-9030-11e3-aef9-00112fa67f97}\AutoRun\command. (...) -- C:\WINDOWS\system32\launcher.exe (.not file.) O51 - MPSK:{5c48adc7-9030-11e3-aef9-00112fa67f97}\AutoRun\command. (...) -- C:\WINDOWS\system32\launcher.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm ~ TDSD: 12 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\EPSON Stylus Photo RX500 [Key] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0K2.exe =>.Epson Seiko Corporation O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation ~ SMSR Keys: 3 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ~ MSCP: 6 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ~ MWPS: 5 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsMenu"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoCDBurning"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoStartBanner"= O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMHelp"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "MemCheckBoxInRunDlg"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMBalloonTip"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDesktopCleanupWizard"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoWelcomeScreen"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoAutoUpdate"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=1 ~ MWPE Keys: 12 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.009927DB8019C54477DABF6F9D795053] - 03/08/2004 - 22:10:08 ---A- . (.Microsoft Corporation - 1394 Bus Device Driver.) -- C:\WINDOWS\system32\Drivers\1394bus.sys [53248] O58 - SDL:[MD5.0BD94FBFC14EA3606CD6CA4C0255BAA3] - 19/08/2004 - 14:51:56 ---A- . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\system32\Drivers\acpi.sys [188672] O58 - SDL:[MD5.E4ABC1212B70BB03D35E60681C447210] - 02/10/2001 - 17:15:52 ---A- . (.Microsoft Corporation - Pilote de contrôleur intégré ACPI.) -- C:\WINDOWS\system32\Drivers\acpiec.sys [12032] O58 - SDL:[MD5.841F385C6CFAF66B58FBD898722BB4F0] - 26/07/2005 - 13:44:02 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142464] O58 - SDL:[MD5.5AC495F4CB807B2B98AD2AD591E6D92E] - 03/08/2004 - 22:14:16 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\system32\Drivers\afd.sys [138496] O58 - SDL:[MD5.F7DDE198231BE379DF7F9E1FD6777BFF] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\amdk6.sys [41216] O58 - SDL:[MD5.C0F59933070392E662B3C2BB2BE77955] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\amdk7.sys [41600] O58 - SDL:[MD5.F0D692B0BFFB46E30EB3CEA168BBC49F] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - IP/1394 Arp Client.) -- C:\WINDOWS\system32\Drivers\arp1394.sys [60800] O58 - SDL:[MD5.77D1BB80580EE1AC9F517D098DEBE5F6] - 30/08/2013 - 08:48:11 ---A- . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswKbd.sys [21576] O58 - SDL:[MD5.7021F01CCAC1538CCF9AE004723AF033] - 13/02/2014 - 20:43:52 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\WINDOWS\system32\Drivers\aswmonflt.sys [67824] O58 - SDL:[MD5.98C18C78B0C3E7EFBDDA7BD0C35F5903] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! TDI Redirect Driver.) -- C:\WINDOWS\system32\Drivers\aswRdr.sys [54832] O58 - SDL:[MD5.F385467DF95D0A73775CB3B076B8B969] - 02/12/2013 - 20:55:09 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944] O58 - SDL:[MD5.8CD8710457FCC1CDE88CBFA3AA119B92] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\system32\Drivers\aswSnx.sys [775952] O58 - SDL:[MD5.C1F95C9481F46B96E23A276639C55AC9] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\Drivers\aswSP.sys [410784] O58 - SDL:[MD5.E6390554DCB2A730702188547267093C] - 13/02/2014 - 20:43:29 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\Drivers\aswTdi.sys [57672] O58 - SDL:[MD5.1B0662514A68C3A42E60D240C5ABEF28] - 06/01/2014 - 13:08:25 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys [180248] O58 - SDL:[MD5.02000ABF34AF4C218C35D257024807D6] - 03/08/2004 - 22:05:04 ---A- . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\system32\Drivers\asyncmac.sys [14336] O58 - SDL:[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - 03/08/2004 - 21:59:44 ---A- . (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\system32\Drivers\atapi.sys [95360] O58 - SDL:[MD5.417352592432F5368A8296F7FB73BECF] - 26/07/2005 - 12:44:04 ---A- . (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) -- C:\WINDOWS\system32\Drivers\ati2mtag.sys [701440] O58 - SDL:[MD5.EC88DA854AB7D7752EC8BE11A741BB7F] - 03/08/2004 - 21:58:32 ---A- . (.Microsoft Corporation - IP/ATM Arp Client.) -- C:\WINDOWS\system32\Drivers\atmarpc.sys [59904] O58 - SDL:[MD5.39A0A59180F19946374275745B21AEBA] - 02/10/2001 - 17:15:54 ---A- . (.Microsoft Corporation - ATM Ethernet Encapsulation Intermediate Driver.) -- C:\WINDOWS\system32\Drivers\atmepvc.sys [31360] O58 - SDL:[MD5.0128E78FE835F074E469F03DB681CA9E] - 03/08/2004 - 21:58:36 ---A- . (.Microsoft Corporation - ATM Lan Emulation Driver.) -- C:\WINDOWS\system32\Drivers\atmlane.sys [55936] O58 - SDL:[MD5.E7EF69B38D17BA01F914AE8F66216A38] - 02/10/2001 - 17:15:54 ---A- . (.Microsoft Corporation - ATM UNI Call Manager.) -- C:\WINDOWS\system32\Drivers\atmuni.sys [352256] O58 - SDL:[MD5.D9F724AA26C010A217C97606B160ED68] - 26/07/2005 - 14:42:56 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072] O58 - SDL:[MD5.DA1F27D85E0D1525F6621372E7B685E9] - 02/10/2001 - 17:15:54 ---A- . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\system32\Drivers\beep.sys [4224] O58 - SDL:[MD5.E4E6A0922E3D983728C9AD4E8D466954] - 03/08/2004 - 21:59:58 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\system32\Drivers\bridge.sys [71552] O58 - SDL:[MD5.90A673FC8E12A79AFBED2576F6A7AAF9] - 02/10/2001 - 17:15:56 ---A- . (.Microsoft Corporation - CardBus/PCMCIA IDE Miniport Driver.) -- C:\WINDOWS\system32\Drivers\cbidf2k.sys [13952] O58 - SDL:[MD5.C1B486A7658353D33A10CC15211A873B] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - CD-ROM Audio Filter Driver.) -- C:\WINDOWS\system32\Drivers\cdaudio.sys [18688] O58 - SDL:[MD5.CD7D5152DF32B47F4E36F710B35AAE02] - 03/08/2004 - 22:14:12 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\system32\Drivers\cdfs.sys [63744] O58 - SDL:[MD5.AF9C19B3100FE010496B1A27181FBF72] - 03/08/2004 - 21:59:54 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\system32\Drivers\cdrom.sys [49536] O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 26/07/2005 - 12:59:55 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528] O58 - SDL:[MD5.D86173B401470F06D9810F7962969DDF] - 03/08/2004 - 22:14:28 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\system32\Drivers\classpnp.sys [49664] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 26/07/2005 - 12:59:55 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.3B2457605666FD854E738C3D25859CA3] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\crusoe.sys [40704] O58 - SDL:[MD5.00CA44E4534865F8A3B64F7C0984BFF0] - 03/08/2004 - 21:59:56 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\system32\Drivers\disk.sys [36352] O58 - SDL:[MD5.D16C81677A9BE399C63CD2EA486472A5] - 03/08/2004 - 21:59:54 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\system32\Drivers\diskdump.sys [14208] O58 - SDL:[MD5.E2D3B7620310FE56685F9B15A6B404B3] - 19/08/2004 - 15:01:16 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [800256] O58 - SDL:[MD5.C77F5C20AA70197A69AA84BAA9DE43C8] - 19/08/2004 - 15:01:22 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys [154496] O58 - SDL:[MD5.E9317282A63CA4D188C0DF5E09C6AC5F] - 02/10/2001 - 17:16:02 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888] O58 - SDL:[MD5.A6F881284AC1150E37D9AE47FF601267] - 26/07/2005 - 13:44:04 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864] O58 - SDL:[MD5.FF86422268DE771D571E123EB7092C6A] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60288] O58 - SDL:[MD5.1ED4DBBAE9F5D558DBBA4CC450E3EB2E] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944] O58 - SDL:[MD5.FE97D0343ACFDEBDD578FC67CC91FA87] - 02/10/2001 - 17:16:22 ---A- . (.Microsoft Corporation - DirectX API Driver.) -- C:\WINDOWS\system32\Drivers\dxapi.sys [10496] O58 - SDL:[MD5.D3DAC8432110AAD0B02A58B4459AB835] - 03/08/2004 - 22:00:56 ---A- . (.Microsoft Corporation - DirectX Graphics Driver.) -- C:\WINDOWS\system32\Drivers\dxg.sys [71040] O58 - SDL:[MD5.A73F5D6705B1D820C19B18782E176EFD] - 02/10/2001 - 17:16:22 ---A- . (.Microsoft Corporation - DirectX Graphics Driver Thunk.) -- C:\WINDOWS\system32\Drivers\dxgthk.sys [3328] O58 - SDL:[MD5.80D1B490B60E74E002DC116EC5D41748] - 26/07/2005 - 14:43:18 ---A- . (.Microsoft Corporation - Ndis 1394 Enumerator.) -- C:\WINDOWS\system32\Drivers\enum1394.sys [6400] O58 - SDL:[MD5.3117F595E9615E04F05A54FC15A03B20] - 03/08/2004 - 22:14:18 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\system32\Drivers\fastfat.sys [143360] O58 - SDL:[MD5.CED2E8396A8838E59D8FD529C680E02C] - 03/08/2004 - 21:59:28 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\system32\Drivers\fdc.sys [27392] O58 - SDL:[MD5.8B121FF880683607AB2AEF0340721718] - 02/10/2001 - 17:16:24 ---A- . (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\system32\Drivers\fips.sys [35072] O58 - SDL:[MD5.0DD1DE43115B93F4D85E889D7A86F548] - 03/08/2004 - 21:59:28 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\system32\Drivers\flpydisk.sys [20480] O58 - SDL:[MD5.157754F0DF355A9E0A6F54721914F9C6] - 03/08/2004 - 22:01:20 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [124800] O58 - SDL:[MD5.B71A69BB9CC88803F455341BD3992E0C] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - Pilote vidéo plein écran.) -- C:\WINDOWS\system32\Drivers\fsvga.sys [12416] O58 - SDL:[MD5.3E1E2BD4F39B0E2B7DC4F4D2BCC2779A] - 02/10/2001 - 17:16:24 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\system32\Drivers\fs_rec.sys [7936] O58 - SDL:[MD5.A86859B77B908C18C2657F284AA29FE3] - 02/10/2001 - 17:16:24 ---A- . (.Microsoft Corporation - Pilote de disque à FT.) -- C:\WINDOWS\system32\Drivers\ftdisk.sys [126080] O58 - SDL:[MD5.5F92FD09E5610A5995DA7D775EADCD12] - 26/07/2005 - 12:44:04 ---A- . (.Microsoft Corporation - Game Port Enumerator.) -- C:\WINDOWS\system32\Drivers\gameenum.sys [10624] O58 - SDL:[MD5.CBC3DEF409549672B915FB9403D63F74] - 27/10/2004 - 15:21:36 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudbus.sys [138240] O58 - SDL:[MD5.F58D2900C66A1E773E3375098E0E9337] - 27/10/2004 - 15:21:30 ----- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudio.sys [145920] O58 - SDL:[MD5.378055AB8DDA86228683C697C4E11685] - 03/08/2004 - 22:08:20 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\system32\Drivers\hidclass.sys [36224] O58 - SDL:[MD5.5FFF41CD5108E9051D255C37825AF697] - 03/08/2004 - 22:08:18 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\system32\Drivers\hidparse.sys [24960] O58 - SDL:[MD5.1DE6783B918F540149AA69943BDFEBA8] - 02/10/2001 - 17:16:28 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\system32\Drivers\hidusb.sys [9600] O58 - SDL:[MD5.BFB7B73C942E816C4FB4A5A7BAE87136] - 26/07/2005 - 14:01:30 ---A- . (.Microsoft Corporation - HTTP Protocol Stack.) -- C:\WINDOWS\system32\Drivers\http.sys [262400] O58 - SDL:[MD5.D1EFCBD693B5BA21314D06368C471070] - 19/08/2004 - 14:56:40 ---A- . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54400] O58 - SDL:[MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - 03/08/2004 - 22:00:16 ---A- . (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\system32\Drivers\imapi.sys [41856] O58 - SDL:[MD5.1367812F8A974E0C13A4888FA5E7EDE6] - 26/07/2005 - 14:44:04 ---A- . (.Microsoft Corporation - Pilote IDE Intel PCI.) -- C:\WINDOWS\system32\Drivers\intelide.sys [5504] O58 - SDL:[MD5.DD5AD1E79AC26D3F8D8828AD4627F160] - 19/08/2004 - 14:59:10 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\intelppm.sys [40320] O58 - SDL:[MD5.4448006B6BC60E6C027932CFC38D6855] - 03/08/2004 - 22:00:08 ---A- . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys [29056] O58 - SDL:[MD5.731F22BA402EE4B62748ADAF6363C182] - 02/10/2001 - 17:16:32 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\system32\Drivers\ipfltdrv.sys [32896] O58 - SDL:[MD5.E1EC7F5DA720B640CD8FB8424F1B14BB] - 03/08/2004 - 22:04:46 ---A- . (.Microsoft Corporation - IP in IP Encapsulation Driver.) -- C:\WINDOWS\system32\Drivers\ipinip.sys [20992] O58 - SDL:[MD5.E2168CBC7098FFE963C6F23F472A3593] - 26/07/2005 - 14:01:32 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys [134912] O58 - SDL:[MD5.64537AA5C003A6AFEEE1DF819062D0D1] - 03/08/2004 - 22:14:30 ---A- . (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\system32\Drivers\ipsec.sys [74752] O58 - SDL:[MD5.50708DAA1B1CBB7D6AC1CF8F56A24410] - 03/08/2004 - 22:00:48 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264] O58 - SDL:[MD5.54632F1A7DE61DC3615D756F2A90FA72] - 02/10/2001 - 17:16:32 ---A- . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\system32\Drivers\isapnp.sys [36224] O58 - SDL:[MD5.E798705E8DC7FAB596EF6BFDF167E007] - 19/08/2004 - 15:00:34 ---A- . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\WINDOWS\system32\Drivers\kbdclass.sys [25216] O58 - SDL:[MD5.62DD5EEFCEC4EF4163F1168D4262A9E4] - 19/08/2004 - 15:00:36 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\system32\Drivers\kbdhid.sys [14848] O58 - SDL:[MD5.D93CAD07C5683DB066B0B2D2D3790EAD] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [171776] O58 - SDL:[MD5.B9540E258F952650DE8DEC68719A5C97] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\system32\Drivers\ks.sys [140928] O58 - SDL:[MD5.EB7FFE87FD367EA8FCA0506F74A87FBB] - 03/08/2004 - 21:59:48 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\system32\Drivers\ksecdd.sys [92032] O58 - SDL:[MD5.0DB7527DB188C7D967A37BB51BBF3963] - 25/02/2014 - 21:07:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbamswissarmy.sys [40776] O58 - SDL:[MD5.D1F8BE91ED4DDB671D42E473E3FE71AB] - 02/10/2001 - 17:16:36 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\system32\Drivers\mcd.sys [7680] O58 - SDL:[MD5.729D83E56C29C510258A6E9E79FFDDC3] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Multifunction Enumerator.) -- C:\WINDOWS\system32\Drivers\mf.sys [63744] O58 - SDL:[MD5.4AE068242760A1FB6E1A44BF4E16AFA6] - 02/10/2001 - 17:16:38 ---A- . (.Microsoft Corporation - Frame buffer simulator.) -- C:\WINDOWS\system32\Drivers\mnmdd.sys [4224] O58 - SDL:[MD5.5AC7E16F5B40A6DA14B5F2B3ADA4693E] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\system32\Drivers\modem.sys [30336] O58 - SDL:[MD5.7D4F19411BD941E1D432A99E24230386] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\system32\Drivers\mouclass.sys [23680] O58 - SDL:[MD5.124D6846040C79B9C997F78EF4B2A4E5] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\system32\Drivers\mouhid.sys [12288] O58 - SDL:[MD5.65653F3B4477F3C63E68A9659F85EE2E] - 03/08/2004 - 21:58:32 ---A- . (.Microsoft Corporation - Mount Manager.) -- C:\WINDOWS\system32\Drivers\mountmgr.sys [42240] O58 - SDL:[MD5.DB07B0088CDFD20C2A22E675120EDE34] - 03/08/2004 - 21:58:22 ---A- . (.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) -- C:\WINDOWS\system32\Drivers\mqac.sys [72960] O58 - SDL:[MD5.46EDCC8F2DB2F322C24F48785CB46366] - 03/08/2004 - 22:00:58 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\system32\Drivers\mrxdav.sys [181248] O58 - SDL:[MD5.5DDC9A1B2EB5A4BF010CE8C019A18C1F] - 26/07/2005 - 14:01:33 ---A- . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\system32\Drivers\mrxsmb.sys [451584] O58 - SDL:[MD5.561B3A4333CA2DBDBA28B5B956822519] - 03/08/2004 - 22:00:42 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\system32\Drivers\msfs.sys [19072] O58 - SDL:[MD5.C0F1D4A21DE5A415DF8170616703DEBF] - 03/08/2004 - 22:04:14 ---A- . (.Microsoft Corporation - MS General Packet Classifier.) -- C:\WINDOWS\system32\Drivers\msgpc.sys [35072] O58 - SDL:[MD5.AE431A8DD3C1D0D0610CDBAC16057AD0] - 26/07/2005 - 13:44:04 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552] O58 - SDL:[MD5.13E75FEF9DFEB08EEDED9D0246E1F448] - 26/07/2005 - 13:44:04 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376] O58 - SDL:[MD5.1988A33FF19242576C3D0EF9CE785DA7] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992] O58 - SDL:[MD5.469541F8BFD2B32659D5D463A6714BCE] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\system32\Drivers\mssmbios.sys [15488] O58 - SDL:[MD5.82035E0F41C2DD05AE41D27FE6CF7DE1] - 03/08/2004 - 22:15:22 ---A- . (.Microsoft Corporation - Multiple UNC Provider driver.) -- C:\WINDOWS\system32\Drivers\mup.sys [107904] O58 - SDL:[MD5.558635D3AF1C7546D26067D5D9B6959E] - 03/08/2004 - 22:14:30 ---A- . (.Microsoft Corporation - NDIS 5.1 wrapper driver.) -- C:\WINDOWS\system32\Drivers\ndis.sys [182912] O58 - SDL:[MD5.08D43BBDACDF23F34D79E44ED35C1B4C] - 02/10/2001 - 17:16:48 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\system32\Drivers\ndistapi.sys [9600] O58 - SDL:[MD5.8D3CE6B579CDE8D37ACC690B67DC2106] - 20/04/2005 - 01:54:04 ---A- . (.Microsoft Corporation - NDIS User mode I/O Driver.) -- C:\WINDOWS\system32\Drivers\ndisuio.sys [14592] O58 - SDL:[MD5.0B90E255A9490166AB368CD55A529893] - 03/08/2004 - 22:14:32 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\system32\Drivers\ndiswan.sys [91776] O58 - SDL:[MD5.59FC3FB44D2669BC144FD87826BB571F] - 02/10/2001 - 17:16:48 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\system32\Drivers\ndproxy.sys [38016] O58 - SDL:[MD5.3A2ACA8FC1D7786902CA434998D7CEB4] - 03/08/2004 - 22:03:22 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\system32\Drivers\netbios.sys [34560] O58 - SDL:[MD5.0C80E410CD2F47134407EE7DD19CC86B] - 03/08/2004 - 22:14:38 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\system32\Drivers\netbt.sys [162816] O58 - SDL:[MD5.5C5C53DB4FEF16CF87B9911C7E8C6FBC] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - IEEE1394 Ndis Miniport and Call Manager.) -- C:\WINDOWS\system32\Drivers\nic1394.sys [61824] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 26/07/2005 - 12:59:55 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032] O58 - SDL:[MD5.60CF8C7192B3614F240838DDBAA4A245] - 03/08/2004 - 21:59:52 ---A- . (.Microsoft Corporation - Netmon NT Driver.) -- C:\WINDOWS\system32\Drivers\nmnt.sys [40320] O58 - SDL:[MD5.4F601BCB8F64EA3AC0994F98FED03F8E] - 03/08/2004 - 22:00:44 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\system32\Drivers\npfs.sys [30848] O58 - SDL:[MD5.B78BE402C3F63DD55521F73876951CDD] - 03/08/2004 - 22:15:10 ---A- . (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574592] O58 - SDL:[MD5.73C1E1F395918BC2C6DD67AF7591A3AD] - 02/10/2001 - 17:16:54 ---A- . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\system32\Drivers\null.sys [2944] O58 - SDL:[MD5.B305F3FAD35083837EF46A0BBCE2FC57] - 02/10/2001 - 17:16:54 ---A- . (.Microsoft Corporation - NWLINK2 Traffic Filter Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkflt.sys [12416] O58 - SDL:[MD5.C99B3415198D1AAB7227F2C88FD664B9] - 02/10/2001 - 17:16:54 ---A- . (.Microsoft Corporation - NWLINK2 Forwarder Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkfwd.sys [32512] O58 - SDL:[MD5.79EA3FCDA7067977625B3363A2657C80] - 03/08/2004 - 22:03:36 ---A- . (.Microsoft Corporation - NWLINK2 IPX Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkipx.sys [88448] O58 - SDL:[MD5.56D34A67C05E94E16377C60609741FF8] - 02/10/2001 - 17:16:54 ---A- . (.Microsoft Corporation - NWLINK2 IPX Netbios Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnknb.sys [63232] O58 - SDL:[MD5.C0BB7D1615E1ACBDC99757F6CEAF8CF0] - 02/10/2001 - 17:16:54 ---A- . (.Microsoft Corporation - NWLINK2 SPX Protocol Driver.) -- C:\WINDOWS\system32\Drivers\nwlnkspx.sys [55936] O58 - SDL:[MD5.03373A79440473062C6F3AEDEC6A49C8] - 03/08/2004 - 22:02:24 ---A- . (.Microsoft Corporation - NetWare Redirector File System Driver.) -- C:\WINDOWS\system32\Drivers\nwrdr.sys [163584] O58 - SDL:[MD5.FC128C3D7D5AD30A13742DC3737B9DF7] - 13/08/2005 - 03:11:00 ---A- . (.Microsoft Corporation - 1394 OpenHCI Port Driver.) -- C:\WINDOWS\system32\Drivers\ohci1394.sys [61312] O58 - SDL:[MD5.4BB30DDC53EBC76895E38694580CDFE9] - 02/10/2001 - 17:16:58 ---A- . (.Microsoft Corporation - ACPI Operation Registration Driver.) -- C:\WINDOWS\system32\Drivers\oprghdlr.sys [3456] O58 - SDL:[MD5.136E0CEA9BD1C42066692DECFA5C6418] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\p3.sys [46720] O58 - SDL:[MD5.318696359AC7DF48D1E51974EC527DD2] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\system32\Drivers\parport.sys [80384] O58 - SDL:[MD5.3334430C29DC338092F79C38EF7B4CD0] - 02/10/2001 - 17:17:00 ---A- . (.Microsoft Corporation - Partition Manager.) -- C:\WINDOWS\system32\Drivers\partmgr.sys [18688] O58 - SDL:[MD5.9575C5630DB8FB804649A6959737154C] - 02/10/2001 - 17:17:00 ---A- . (.Microsoft Corporation - Pilote parallèle VDM.) -- C:\WINDOWS\system32\Drivers\parvdm.sys [6912] O58 - SDL:[MD5.07C02C892E8E1A72D6BF35004F0E9C5E] - 19/11/2005 - 02:13:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\WINDOWS\system32\Drivers\PCASp50.sys [20096] O58 - SDL:[MD5.7C5DA5C1ED801AD8B0309D5514F0B75E] - 19/08/2004 - 14:52:04 ---A- . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\system32\Drivers\pci.sys [68608] O58 - SDL:[MD5.F4BFDE7209C14A07AAA61E4D6AE69EAC] - 02/10/2001 - 17:17:00 ---A- . (.Microsoft Corporation - Pilote de bus générique PCI IDE.) -- C:\WINDOWS\system32\Drivers\pciide.sys [3328] O58 - SDL:[MD5.520B91AB011456B940D9B05FC91108FF] - 03/08/2004 - 21:59:42 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\system32\Drivers\pciidex.sys [25088] O58 - SDL:[MD5.641DA274E163617EA7A33506BC6DA8E3] - 19/08/2004 - 14:52:10 ---A- . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\system32\Drivers\pcmcia.sys [120320] O58 - SDL:[MD5.5B0F00E43A7094C0B7E433CB42C79164] - 26/07/2005 - 13:44:02 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport Devices).) -- C:\WINDOWS\system32\Drivers\portcls.sys [145792] O58 - SDL:[MD5.F480712B761E538BC8E44EDE60F3A3C3] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\Drivers\processr.sys [39552] O58 - SDL:[MD5.48671F327553DCF1D27F6197F622A668] - 03/08/2004 - 22:04:20 ---A- . (.Microsoft Corporation - MS QoS Packet Scheduler.) -- C:\WINDOWS\system32\Drivers\psched.sys [69120] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/10/2001 - 17:17:04 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792] O58 - SDL:[MD5.FE0D99D6F31E4FAD8159F690D68DED9C] - 02/10/2001 - 17:17:04 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\system32\Drivers\rasacd.sys [8832] O58 - SDL:[MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - 03/08/2004 - 22:14:24 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\system32\Drivers\rasl2tp.sys [51328] O58 - SDL:[MD5.7306EEED8895454CBED4669BE9F79FAA] - 03/08/2004 - 22:05:08 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\system32\Drivers\raspppoe.sys [41472] O58 - SDL:[MD5.1C5CC65AAC0783C344F16353E60B72AC] - 03/08/2004 - 22:14:28 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\system32\Drivers\raspptp.sys [48384] O58 - SDL:[MD5.FDBB1D60066FCFBB7452FD8F9829B242] - 02/10/2001 - 17:17:06 ---A- . (.Microsoft Corporation - PTI DirectParallel(R) mini-port/call-manager driver.) -- C:\WINDOWS\system32\Drivers\raspti.sys [16512] O58 - SDL:[MD5.01524CD237223B18ADBB48F70083F101] - 02/10/2001 - 17:17:06 ---A- . (.Microsoft Corporation - Raw WAN Transport.) -- C:\WINDOWS\system32\Drivers\rawwan.sys [34432] O58 - SDL:[MD5.809CA45CAA9072B3176AD44579D7F688] - 26/07/2005 - 14:01:41 ---A- . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) -- C:\WINDOWS\system32\Drivers\rdbss.sys [174592] O58 - SDL:[MD5.4912D5B403614CE99C28420F75353332] - 02/10/2001 - 17:17:06 ---A- . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys [4224] O58 - SDL:[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - 26/07/2005 - 13:44:02 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196864] O58 - SDL:[MD5.B54CD38A9EBFBF2B3561426E3FE26F62] - 10/08/2005 - 11:15:08 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139528] O58 - SDL:[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - 26/07/2005 - 14:44:00 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58496] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 26/07/2005 - 12:59:55 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 26/07/2005 - 12:59:55 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032] O58 - SDL:[MD5.35E81B908AE4E97FC7BDF4607C516FF4] - 02/10/2001 - 17:17:06 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\system32\Drivers\RMCast.sys [200064] O58 - SDL:[MD5.7CE8B277F3207EA82D7D22AD348BEFC6] - 03/08/2004 - 22:04:32 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\system32\Drivers\rndismp.sys [30080] O58 - SDL:[MD5.D8B0B4ADE32574B2D9C5CC34DC0DBBE7] - 02/10/2001 - 17:17:08 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\system32\Drivers\rootmdm.sys [5888] O58 - SDL:[MD5.D507C1400284176573224903819FFDA3] - 26/07/2005 - 14:44:02 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\Drivers\RTL8139.sys [20992] O58 - SDL:[MD5.D7FD0FF761E28AC0EA35AD71E0CD67E9] - 03/08/2004 - 21:59:42 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\system32\Drivers\scsiport.sys [96256] O58 - SDL:[MD5.02FC71B020EC8700EE8A46C58BC6F276] - 03/08/2004 - 22:07:48 ---A- . (.Microsoft Corporation - SecureDigital Bus Driver.) -- C:\WINDOWS\system32\Drivers\sdbus.sys [67584] O58 - SDL:[MD5.D26E26EA516450AF9D072635C60387F4] - 17/07/2004 - 10:36:38 ---A- . (...) -- C:\WINDOWS\system32\Drivers\secdrv.sys [27440] O58 - SDL:[MD5.A2D868AEEFF612E70E213C451A70CAFB] - 03/08/2004 - 21:59:08 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\system32\Drivers\serenum.sys [15488] O58 - SDL:[MD5.653201755CA96AB4AAA4131DAF6DA356] - 19/08/2004 - 14:56:40 ---A- . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\system32\Drivers\serial.sys [66560] O58 - SDL:[MD5.1D9F1BEC651815741F088A8FB88E17EE] - 03/08/2004 - 21:59:56 ---A- . (.Microsoft Corporation - Small Form Factor Disk Driver.) -- C:\WINDOWS\system32\Drivers\sffdisk.sys [11136] O58 - SDL:[MD5.586499FD312FFD7F78553F408E71682E] - 03/08/2004 - 21:59:56 ---A- . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\WINDOWS\system32\Drivers\sffp_sd.sys [10240] O58 - SDL:[MD5.0D13B6DF6E9E101013A7AFB0CE629FE0] - 03/08/2004 - 21:59:56 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\system32\Drivers\sfloppy.sys [11392] O58 - SDL:[MD5.017DAECF0ED3AA731313433601EC40FA] - 02/10/2001 - 17:17:12 ---A- . (.Microsoft Corporation - Smard Card Driver Library.) -- C:\WINDOWS\system32\Drivers\smclib.sys [14592] O58 - SDL:[MD5.ADDC9E4757A68AB60562AD3CB9C288D6] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - 1394 Desktop Camera Driver.) -- C:\WINDOWS\system32\Drivers\sonydcam.sys [25472] O58 - SDL:[MD5.8E186B8F23295D1E42C573B82B80D548] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6400] O58 - SDL:[MD5.B52181023B827ACDA36C1B76751EBFFD] - 19/08/2004 - 15:04:58 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du.) -- C:\WINDOWS\system32\Drivers\sr.sys [73600] O58 - SDL:[MD5.553007ECCE7F6565BBE645BEB66D3B69] - 26/07/2005 - 14:01:48 ---A- . (.Microsoft Corporation - Server driver.) -- C:\WINDOWS\system32\Drivers\srv.sys [332544] O58 - SDL:[MD5.C43356072EB3E88CD62958DB10CEAD47] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\system32\Drivers\stream.sys [48640] O58 - SDL:[MD5.03C1BAE4766E2450219D20B993D6E046] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\WINDOWS\system32\Drivers\swenum.sys [4352] O58 - SDL:[MD5.94ABC808FC4B6D7D2BBF42B85E25BB4D] - 26/07/2005 - 13:43:46 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [54272] O58 - SDL:[MD5.650AD082D46BAC0E64C9C0E0928492FD] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800] O58 - SDL:[MD5.147B9CCE0B523D4DAFD91A60C2CE2B25] - 30/04/2013 - 09:51:09 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\system32\Drivers\tap0901.sys [35088] O58 - SDL:[MD5.A2A9CA0D1A9AC1FF54220AA0789FE5CF] - 03/08/2004 - 22:00:00 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\system32\Drivers\tape.sys [14976] O58 - SDL:[MD5.0DF628756FB71111955BE60BAC216A70] - 18/09/2005 - 11:29:51 ---A- . (.Microsoft Corporation - TCP/IP Protocol Driver.) -- C:\WINDOWS\system32\Drivers\tcpip.sys [359936] O58 - SDL:[MD5.4D58BB1AE8841AAFD8790AD7E1E3B8EA] - 03/08/2004 - 22:07:46 ---A- . (.Microsoft Corporation - IPv6 driver.) -- C:\WINDOWS\system32\Drivers\tcpip6.sys [223616] O58 - SDL:[MD5.6891B74AB9A016064E82A419388D0601] - 03/08/2004 - 22:07:50 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\system32\Drivers\tdi.sys [18560] O58 - SDL:[MD5.38D437CF2D98965F239B0ABCD66DCB0F] - 19/08/2004 - 15:10:20 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040] O58 - SDL:[MD5.ED0580AF02502D00AD8C4C066B156BE9] - 19/08/2004 - 15:10:20 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896] O58 - SDL:[MD5.A540A99C281D933F3D69D55E48727F47] - 26/07/2005 - 13:44:00 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840] O58 - SDL:[MD5.699450901C5CCFD82357CBC531CEDD23] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - TOSHIBA DVD Stream Minidriver.) -- C:\WINDOWS\system32\Drivers\tosdvd.sys [51712] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 26/07/2005 - 12:59:55 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.87A0E9E18C10A9E454238E3330E2A26D] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Microsoft Tunnel Interface Driver.) -- C:\WINDOWS\system32\Drivers\tunmp.sys [12416] O58 - SDL:[MD5.12F70256F140CD7D52C58C7048FDE657] - 03/08/2004 - 22:00:32 ---A- . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\system32\Drivers\udfs.sys [66176] O58 - SDL:[MD5.A4815A4884898F355A3513E60843A4FD] - 26/07/2005 - 14:01:50 ---A- . (.Microsoft Corporation - Update Driver.) -- C:\WINDOWS\system32\Drivers\update.sys [209280] O58 - SDL:[MD5.AF090265EC388BAB320F1FF7E7A7D5EA] - 03/08/2004 - 22:04:34 ---A- . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\system32\Drivers\usb8023.sys [12672] O58 - SDL:[MD5.2654EECC6FB13603EBDDCD5C8EA943D1] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\Drivers\usbcamd.sys [23808] O58 - SDL:[MD5.61018BA9DF6B63E51D9753C980E73EC2] - 26/07/2005 - 12:59:55 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\Drivers\usbcamd2.sys [23936] O58 - SDL:[MD5.BFFD9F120CC63BCBAA3D840F3EEF9F79] - 03/08/2004 - 22:08:48 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\system32\Drivers\usbccgp.sys [31616] O58 - SDL:[MD5.596EB39B50D6EBD9B734DC4AE0544693] - 02/10/2001 - 17:17:20 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\system32\Drivers\usbd.sys [4736] O58 - SDL:[MD5.15E993BA2F6946B2BFBBFCD30398621E] - 03/08/2004 - 22:08:38 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\system32\Drivers\usbehci.sys [26624] O58 - SDL:[MD5.C72F40947F92CEA56A8FB532EDF025F1] - 03/08/2004 - 22:08:44 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\WINDOWS\system32\Drivers\usbhub.sys [57600] O58 - SDL:[MD5.2853FD4C4489E0F8BFCF78EFCDB7E998] - 12/10/2005 - 09:33:32 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\Drivers\usbintel.sys [16000] O58 - SDL:[MD5.2034CA78F9C6E787B4B76D81AC888351] - 03/08/2004 - 22:08:44 ---A- . (.Microsoft Corporation - USB 1.1 & 2.0 Port Driver.) -- C:\WINDOWS\system32\Drivers\usbport.sys [142976] O58 - SDL:[MD5.A42369B7CD8886CD7C70F33DA6FCBCF5] - 26/07/2005 - 12:44:00 ---A- . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\system32\Drivers\usbprint.sys [25856] O58 - SDL:[MD5.A6BC71402F4F7DD5B77FD7F4A8DDBA85] - 26/07/2005 - 12:44:02 ---A- . (.Microsoft Corporation - USB Scanner Driver.) -- C:\WINDOWS\system32\Drivers\usbscan.sys [15104] O58 - SDL:[MD5.6CD7B22193718F1D17A47A1CD6D37E75] - 03/08/2004 - 22:08:48 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\Drivers\usbstor.sys [26496] O58 - SDL:[MD5.F8FD1400092E23C8F2F31406EF06167B] - 03/08/2004 - 22:08:38 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\system32\Drivers\usbuhci.sys [20480] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 26/07/2005 - 12:59:55 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.8A60EDD72B4EA5AEA8202DAF0E427925] - 03/08/2004 - 22:07:08 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys [20992] O58 - SDL:[MD5.D5A9D123F5ED7C9965A481BD20CF66D8] - 03/08/2004 - 22:07:06 ---A- . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\system32\Drivers\videoprt.sys [79744] O58 - SDL:[MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - 19/08/2004 - 14:59:14 ---A- . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376] O58 - SDL:[MD5.984EF0B9788ABF89974CFED4BFBAACBC] - 03/08/2004 - 22:04:58 ---A- . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\system32\Drivers\wanarp.sys [34560] O58 - SDL:[MD5.2797F33EBF50466020C430EE4F037933] - 26/07/2005 - 13:44:04 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [82944] O58 - SDL:[MD5.2F31B7F954BED437F2C75026C65CAF7B] - 02/10/2001 - 17:17:26 ---A- . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\system32\Drivers\wmilib.sys [4352] O58 - SDL:[MD5.6ABE6E225ADB5A751622A9CC3BC19CE8] - 02/10/2001 - 17:17:28 ---A- . (.Microsoft Corporation - Winsock2 IFS Layer.) -- C:\WINDOWS\system32\Drivers\ws2ifsl.sys [12032] O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/10/2001 - 17:15:52 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/10/2001 - 17:15:58 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/10/2001 - 17:16:28 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/10/2001 - 17:16:34 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 03/08/2004 - 21:46:56 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/10/2001 - 17:16:50 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/10/2001 - 17:16:50 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/10/2001 - 17:16:50 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/10/2001 - 17:16:50 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/10/2001 - 17:16:50 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 03/08/2004 - 21:45:26 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 03/08/2004 - 21:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 03/08/2004 - 21:45:12 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 03/08/2004 - 21:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 03/08/2004 - 21:45:14 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560] O58 - SDL:[MD5.C9BF2F12C4E6C12F8A85FBA4B6BC6208] - 03/08/2004 - 22:07:34 ---A- . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\system32\watchdog.sys [17664] O58 - SDL:[MD5.692ED535C8ABAA2B38A13025DC0ED758] - 09/11/2005 - 09:31:04 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\WINDOWS\system32\win32k.sys [1839616] ~ Drivers: 5 Scanned in 00mn 03s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 25/02/2014 - 21:00:44 ---A- . (...) -- C:\Documents and Settings\Admin\Bureau\DecompteMail (4).pdf [25250] O61 - LFC: 25/02/2014 - 21:00:48 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists [270670] O61 - LFC: 25/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_p.ccmbg.com_0.localstorage [3072] O61 - LFC: 25/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_p.ccmbg.com_0.localstorage-journal [3608] O61 - LFC: 25/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_player.ooyala.com_0.localstorage [3072] O61 - LFC: 25/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_player.ooyala.com_0.localstorage-journal [3608] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\macromedia.com\support\flashplayer\sys\#opf.ooyala.com\settings.sol [84] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\macromedia.com\support\flashplayer\sys\#player.ooyala.com\settings.sol [87] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\opf.ooyala.com\com.conviva.livePass.sol [62] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\player.ooyala.com\auth.sol [47] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\player.ooyala.com\auth2.sol [158] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\player.ooyala.com\auth_id.sol [40] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\player.ooyala.com\ooyala_guid.sol [63] O61 - LFC: 25/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\player.ooyala.com\perf.sol [127] O61 - LFC: 25/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\CdmAdapterVersion [13] O61 - LFC: 25/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Historique\History.IE5\MSHist012014021720140224\index.dat [32768] O61 - LFC: 25/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Historique\History.IE5\MSHist012014022520140226\index.dat [32768] O61 - LFC: 25/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Temp\3888_11335\crl-set [270670] O61 - LFC: 25/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Temp\3888_11335\manifest.fingerprint [12] O61 - LFC: 25/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Temp\3888_11335\manifest.json [34] O61 - LFC: 25/02/2014 - 21:01:07 ---A- . (...) -- C:\Documents and Settings\Admin\Recent\DecompteMail (4).pdf.lnk [430] O61 - LFC: 26/02/2014 - 21:00:30 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\AVAST Software\Avast\Cache\Cookies [8192] O61 - LFC: 26/02/2014 - 21:00:30 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\AVAST Software\Avast\Cache\Cookies-journal [6704] O61 - LFC: 26/02/2014 - 21:00:30 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\AVAST Software\Avast\Cache\f_00001d [18440] O61 - LFC: 26/02/2014 - 21:00:38 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\OpenOffice.org\3\user\extensions\shared\log.txt [3947] O61 - LFC: 26/02/2014 - 21:00:40 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\OpenOffice.org\3\user\registrymodifications.xcu [90468] O61 - LFC: 26/02/2014 - 21:00:40 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [4276] O61 - LFC: 26/02/2014 - 21:00:42 ---A- . (...) -- C:\Documents and Settings\Admin\Bureau\carnet-course-a-pied-debutant.ods [25191] O61 - LFC: 26/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\000099.ldb [307] O61 - LFC: 26/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\000101.ldb [259] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\00\00000000 [211] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\00\00000001 [15027084] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\000005.ldb [623] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\LOCK [0] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\Origins\000010.ldb [168] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\History Provider Cache [115820] O61 - LFC: 26/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Last Tabs [15680] O61 - LFC: 26/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_www.commentcamarche.net_0.localstorage [3072] O61 - LFC: 26/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_www.commentcamarche.net_0.localstorage-journal [3608] O61 - LFC: 26/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\https_www.google.fr_0.localstorage [3072] O61 - LFC: 26/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\https_www.google.fr_0.localstorage-journal [3608] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Login Data [12288] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Login Data-journal [4624] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\broadcast.piximedia.fr\footerJS\v4\lib\so.swf\PmUI.sol [33] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\C6C9NYLK\macromedia.com\support\flashplayer\sys\#broadcast.piximedia.fr\settings.sol [92] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\000903.ldb [147] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\000905.ldb [652514] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Web Data [333824] O61 - LFC: 26/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Web Data-journal [16384] O61 - LFC: 26/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Historique\History.IE5\MSHist012014022620140227\index.dat [32768] O61 - LFC: 26/02/2014 - 21:01:07 ---A- . (...) -- C:\Documents and Settings\Admin\Recent\carnet-course-a-pied-debutant.ods.lnk [583] O61 - LFC: 27/02/2014 - 21:00:30 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\AVAST Software\Avast\Cache\HTMLayout.xml [4767] O61 - LFC: 27/02/2014 - 21:00:35 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\Microsoft\HTML Help\hh.dat [8722] O61 - LFC: 27/02/2014 - 21:00:41 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\ZHP\Log.txt [50796] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:41 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\ZHP\TestsZHPDiag.txt [3261] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:41 ---A- . (...) -- C:\Documents and Settings\Admin\Application Data\ZHP\ZHPDiag.txt [32443] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:44 ---A- . (...) -- C:\Documents and Settings\Admin\Bureau\ZHPDiag.lnk [1523] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:44 ---A- . (...) -- C:\Documents and Settings\Admin\Bureau\ZHPFix.lnk [1628] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:44 ---A- . (...) -- C:\Documents and Settings\Admin\Cookies\index.dat [32768] O61 - LFC: 27/02/2014 - 21:00:44 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\Admin\Bureau\ZHPDiag2.exe [6865894] =>.Nicolas Coolman O61 - LFC: 27/02/2014 - 21:00:48 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Local State [64787] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Cookies [1031168] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Cookies-journal [16384] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension Rules\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension Rules\LOG [148] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension Rules\LOG.old [145] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension Rules\MANIFEST-000837 [334] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\000104.ldb [259] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\000107.ldb [257] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\LOG [269] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\LOG.old [264] O61 - LFC: 27/02/2014 - 21:00:49 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Extension State\MANIFEST-000106 [528] =>.Google Inc O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Favicons [3946496] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Favicons-journal [16384] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\.usage [24] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\LOG [142] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\LOG.old [142] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\001\t\Paths\MANIFEST-000009 [86] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\Origins\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\Origins\LOG [145] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\Origins\LOG.old [144] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\File System\Origins\MANIFEST-000014 [179] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\History [3325952] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\History-journal [16384] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Last Session [84240] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Extension Settings\gdidcmifanncidcpmndaenenhcgeaica\000198.ldb [48501] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Extension Settings\gdidcmifanncidcpmndaenenhcgeaica\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Extension Settings\gdidcmifanncidcpmndaenenhcgeaica\LOG [0] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Extension Settings\gdidcmifanncidcpmndaenenhcgeaica\LOG.old [264] O61 - LFC: 27/02/2014 - 21:00:50 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Extension Settings\gdidcmifanncidcpmndaenenhcgeaica\MANIFEST-000195 [412] O61 - LFC: 27/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_googleads.g.doubleclick.net_0.localstorage [3072] O61 - LFC: 27/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_googleads.g.doubleclick.net_0.localstorage-journal [512] O61 - LFC: 27/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_telechargement.zebulon.fr_0.localstorage [3072] O61 - LFC: 27/02/2014 - 21:00:51 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_telechargement.zebulon.fr_0.localstorage-journal [3608] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Preferences [265954] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\QuotaManager [19456] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\QuotaManager-journal [6704] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\000908.ldb [562080] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\000911.ldb [88734] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\CURRENT [16] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\LOG [271] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\LOG.old [272] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Session Storage\MANIFEST-000910 [256] =>.Google Inc O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\TransportSecurity [3506] O61 - LFC: 27/02/2014 - 21:00:52 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Visited Links [131072] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom [6392480] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1501054] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies [6144] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal [3608] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135496] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download [859024] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist [19492] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Extension Blacklist [16608] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing IP Blacklist [1848] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\CdmAdapterVersion [13] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdm.dll [11769848] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.2.464\imgs\icon-128x128.png [1630] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.2.464\manifest.fingerprint [66] O61 - LFC: 27/02/2014 - 21:00:54 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\User Data\WidevineCDM\1.4.2.464\manifest.json [951] O61 - LFC: 27/02/2014 - 21:00:55 --HA- . (...) -- C:\Documents and Settings\Admin\Local Settings\Application Data\IconCache.db [6964940] O61 - LFC: 27/02/2014 - 21:01:05 ---A- . (...) -- C:\Documents and Settings\Admin\Local Settings\Historique\History.IE5\index.dat [81920] ~ 3 Fichiers temporaires (Temporary files) ~ 1 Fichiers cookies (Cookies files) ~ Files: 123 Scanned in 00mn 38s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - 12/10/2005 - C:\WINDOWS\system32\DRIVERS\arp1394.sys (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - 13/02/2014 - C:\WINDOWS\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 13/02/2014 - C:\WINDOWS\system32\drivers\aswRdr.sys (AswRdr) .(.AVAST Software - avast! TDI Redirect Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 02/12/2013 - C:\WINDOWS\system32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT O64 - Services: CurCS - 13/02/2014 - C:\WINDOWS\system32\drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX O64 - Services: CurCS - 13/02/2014 - C:\WINDOWS\system32\drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 13/02/2014 - C:\WINDOWS\system32\drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI O64 - Services: CurCS - 06/01/2014 - C:\WINDOWS\system32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - 13/02/2014 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - 02/10/2001 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\fltMgr.sys (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - 26/07/2005 - C:\WINDOWS\system32\DRIVERS\ipnat.sys (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - 24/01/2014 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService) .(.Oracle Corporation - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - 26/07/2005 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS) .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - 02/10/2001 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - 20/04/2005 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - 02/10/2001 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - 26/07/2005 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - 02/10/2001 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\spoolsv.exe (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - 18/09/2005 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - 19/08/2004 - C:\WINDOWS\system32\svchost.exe (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ~ Legacy: 116 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ~ FASS Keys: 9 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe" http://www.qvo6.com =>Hijacker.Qvo6 O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77312] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [60416] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [111616] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [243200] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [197632] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [89088] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [174080] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [49152] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [193024] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [38912] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171008] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll [249344] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90624] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [177664] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [474624] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685056] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [81408] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129536] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [382464] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38912] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique multimédia Microsoft.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] ~ Services: 38 Scanned in 00mn 01s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.9EA190ABAA9B21C597C24192609645BD] [SPRF][27/02/2014] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Documents and Settings\Admin\Bureau\ZHPDiag2.exe [6865894] ~ Files: 1 Scanned in 00mn 00s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "0296961D4979CBB4A803A78867D35E2A" . (.ABBYY FineReader 5.0 Sprint Plus.) -- C:\WINDOWS\Installer\{D1696920-9794-4BBC-8A30-7A88763DE5A2}\Fine5.exe O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.06) - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico O90 - PUC: "987A09F2E1DDEC14FBACDB8712B3BA7C" . (.OpenOffice.org 3.4.) -- C:\WINDOWS\Installer\{2F90A789-DD1E-41CE-BFCA-BD78213BABC7}\soffice.ico ~ Update Products: 14 Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) ~ WIS: 15 Scanned in 00mn 01s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 21/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 19/08/2004 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe SS - | Auto 16/03/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 16/03/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SR - | Auto 13/02/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 24/01/2014 182696 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe ~ Services: Scanned in 00mn 01s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Admin at 27/02/2014 21:01:35 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys PCIIDEX.SYS 1 nt!IofCallDriver[0x804E13A7] >> \Device\Harddisk0\DR0[0x8235CAB8] 3 CLASSPNP[0xF859605B] >> nt!IofCallDriver[0x804E13A7] >> \Device\Ide\IdeDeviceP1T0L0-17[0x82351B00] kernel: MBR read successfully user & kernel MBR OK ~ MBR: 12 Scanned in 00mn 02s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Admin at 27/02/2014 21:01:37 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : 13031 - (23/02/2014) Clés trouvées (Keys found) : 23 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 18 Fichiers trouvés (Files found) : 6 [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}] =>PUP.DealPly^ [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4e42-A125-57C0A11DBCDE}] =>PUP.iMesh [HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}] =>PUP.BearShare [HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}] =>PUP.BearShare [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}] =>PUP.iMesh [HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}] =>PUP.BearShare [HKCU\Software\ilivid] =>Adware.Bandoo [HKCU\Software\iMesh] =>PUP.iMesh [HKCU\Software\OfferBox] =>PUP.OfferBox [HKLM\Software\OfferBox] =>PUP.OfferBox [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKLM\Software\SpeedMaxPc] =>PUP.SpeedMaxPc [HKLM\Software\VBMZ] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>PUP.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>PUP.Tarma [HKCU\Software\Crossrider] =>PUP.CrossRider [HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] =>PUP.Elex [HKCU\Software\USyndication] =>Trojan.USyndication [HKCU\Software\usyndication.com] =>Trojan.USyndication [HKLM\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}] =>Adware.BrowseFox [HKLM\Software\Google\Chrome\Extensions\gflandjopdloblmlcoiidmncpinmmacn] =>Adware.InstallBrain [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A9337080-7CBF-4E3E-80C1-3867BEDD88E0}] =>PUP.ZulaGames C:\Program Files\BearShare Applications =>PUP.BearShare^ C:\Program Files\DealPly =>PUP.DealPly^ C:\Program Files\DealPlyLive =>PUP.DealPly^ C:\Program Files\Mobogenie =>PUP.Mobogenie^ C:\Documents and Settings\All Users\Application Data\DealPlyLive =>PUP.DealPly^ C:\Documents and Settings\All Users\Application Data\SpeedMaxPc =>PUP.SpeedMaxPc^ C:\Documents and Settings\Admin\Application Data\Dealply =>PUP.DealPly^ C:\Documents and Settings\Admin\Application Data\DriverCure =>PUP.DriverCure^ C:\Documents and Settings\Admin\Application Data\newnext.me =>PUP.NextLive^ C:\Documents and Settings\Admin\Application Data\OfferBox =>PUP.OfferBox^ C:\Documents and Settings\Admin\Application Data\OpenCandy =>Adware.OpenCandy^ C:\Documents and Settings\Admin\Application Data\SpeedAnalysis3 =>PUP.SpeedAnalysis^ C:\Documents and Settings\Admin\Application Data\SpeedMaxPc =>PUP.SpeedMaxPc^ C:\Documents and Settings\Admin\Local Settings\Application Data\DealPlyLive =>PUP.DealPly^ C:\Documents and Settings\Admin\Local Settings\Application Data\Mobogenie =>PUP.Mobogenie^ C:\Documents and Settings\Admin\Local Settings\Application Data\Software =>Adware.Boxore^ C:\Documents and Settings\Admin\Local Settings\Application Data\VisualBeeExe =>Adware.VisualBeeToolbar^ C:\Program Files\Software =>Adware.Boxore C:\WINDOWS\Tasks\BitGuard.job =>PUP.BitGuard^ [HKCU\Software\BearShare] =>PUP.BearShare^ [HKCU\Software\Conduit] =>Toolbar.Conduit^ [HKCU\Software\DealPlyLive] =>PUP.DealPly^ [HKCU\Software\iLivid] =>Adware.Bandoo^ [HKLM\Software\Vittalia] =>Adware.PUP.Vittalia^ ~ Additionnel Scan: 119641 Items scanned in 00mn 27s ---\\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/32979753-pup-bitguard =>PUP.BitGuard ~ http://nicolascoolman.webs.com/apps/blog/show/28060597-pup-dealply =>PUP.DealPly ~ http://nicolascoolman.webs.com/apps/blog/show/26705717-pup-bearshare =>PUP.BearShare ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider ~ http://nicolascoolman.webs.com/apps/blog/show/28606910-pup-offerbox =>PUP.OfferBox ~ http://nicolascoolman.webs.com/apps/blog/show/28947219-pup-speedmaxpc =>PUP.SpeedMaxPc ~ http://nicolascoolman.webs.com/apps/blog/show/27328365-trojan-usyndication =>Trojan.USyndication ~ http://nicolascoolman.webs.com/apps/blog/show/26611092-adware-bandoo =>Adware.Bandoo ~ http://nicolascoolman.webs.com/apps/blog/show/28441146-pup-imesh =>PUP.iMesh ~ http://nicolascoolman.webs.com/apps/blog/show/37752731-pup-duuqu =>PUP.Duuqu ~ http://nicolascoolman.webs.com/apps/blog/show/35115580-pup-vittalia =>PUP.Vittalia ~ http://nicolascoolman.webs.com/apps/blog/show/41034005-pup-mobogenie =>PUP.Mobogenie ~ http://nicolascoolman.webs.com/apps/blog/show/28063533-pup-drivercure =>PUP.DriverCure ~ http://nicolascoolman.webs.com/apps/blog/show/40528410-pup-nextlive =>PUP.NextLive ~ http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy =>Adware.OpenCandy ~ http://nicolascoolman.webs.com/apps/blog/show/28153012-pup-speedanalysis =>PUP.SpeedAnalysis ~ http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore ~ http://nicolascoolman.webs.com/apps/blog/show/29058830-adware-visualbeetoolbar =>Adware.VisualBeeToolbar ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6 ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma ~ http://nicolascoolman.webs.com/apps/blog/show/33479906-pup-elex =>PUP.Elex ~ http://nicolascoolman.webs.com/apps/blog/show/27328365-trojan-usyndication =>Trojan.USyndication ~ http://nicolascoolman.webs.com/apps/blog/show/32363262-adware-browsefox =>Adware.BrowseFox ~ http://nicolascoolman.webs.com/apps/blog/show/26907365-adware-installbrain =>Adware.InstallBrain ~ http://nicolascoolman.webs.com/apps/blog/show/34204805-pup-zulagames =>PUP.ZulaGames ~ MSI: 26 link(s) detected in 00mn 27s End of the scan (1537 lines in 01mn 57s)(0)