cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2016.2.20.56 Par Nicolas Coolman (2016/02/20)
~ Démarré par Benhabiles Mohammed (Administrator) (2016/02/21 10:56:04)
~ Site: http://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\Benhabiles Mohammed\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Navigateurs Internet (2) - 1s
MFIE: Mozilla Firefox 39.0.3 (x86 en-US)
MSIE: Internet Explorer v8.0.6001.18702

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : OK
Windows Activation Technologies : KO
Windows Genuine Advantage : OK

---\\ Surveillance de Logiciels (1) - 2s
Adobe Flash Player 20 NPAPI

---\\ Informations sur le système (6) - 1s
~ Operating System: x86 Family 6 Model 13 Stepping 8, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 456.944 MB (8% free)
System Restore: Activé (Enable)
System drive C: has 26 GB () free of 35 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: HYUNDAI
~ User Name: Benhabiles Mohammed
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 26 GB free of 35 GB (System)

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 13/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation
[MD5.93AD0B78C7357A05F50E594EC7C22300] - 13/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.F8DD21FC65131E064FBF11F01E4F4BFD] - 23/09/2013 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [920064] =>.Microsoft Corporation
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - 13/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation
[MD5.D76A076ADB74F8132924E498D63123A2] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [149504] =>.Microsoft Corporation
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - 17/08/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation
[MD5.C885B02847F5D2FD45A24E219ED93B32] - 13/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 13/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation
[MD5.31F923EB2170FC172C81ABDA0045D18C] - 13/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation
[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 13/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 13/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 13/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation
[MD5.23C74D75E36E7158768DD63D92789A91] - 13/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - 15/07/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320] =>.Microsoft Corporation
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 13/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 13/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 13/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 13/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation
[MD5.46DE1126684369BACE4849E4FC8C43CA] - 13/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (6) - 2s
O23 - Service: Atheros Configuration Service (ACS) . (...) - C:\WINDOWS\system32\acs.exe
O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\ati2evxx.exe =>.ATI Technologies Inc.
O23 - Service: Kaspersky Anti-Virus Service 16.0.0 (AVP16.0.0) . (...) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe" -r (.not file.)
O23 - Service: ConfigFree Service (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe =>.Toshiba Corporation
O23 - Service: DVD-RAM_Service (DVD-RAM_Service) . (.Matsushita Electric Industrial Co., Ltd. - DVD-RAM Utility Helper Service.) - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) . (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (8) - 25s

SR - Auto [22/12/2004] [ 36864] Atheros Configuration Service (ACS) . (...) - C:\WINDOWS\system32\acs.exe
SS - Demand [13/02/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [11/04/2005] [ 360448] (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\ati2evxx.exe =>.ATI Technologies Inc.
SR - Auto [18/01/2005] [ 40960] ConfigFree Service (CFSvcs) . (.TOSHIBA CORPORATION.) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe =>.Toshiba Corporation
SR - Auto [28/08/2004] [ 110592] DVD-RAM_Service (DVD-RAM_Service) . (.Matsushita Electric Industrial Co., Ltd..) - C:\WINDOWS\system32\DVDRAMSV.exe
SS - Demand [06/08/2015] [ 148136] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [25/04/2005] [ 34816] TOSHIBA Application Service (TAPPSRV) . (.TOSHIBA Corp..) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

---\\ Processus lancés (25) - 3s
[MD5.9FB66CDB75A069A156208EF98B6EEB62] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\ati2evxx.exe [360448] [PID.1416] =>.ATI Technologies Inc.
[MD5.539802224D334C25AC439FF0518D36CD] - (...) -- C:\WINDOWS\system32\acs.exe [36864] [PID.1604]
[MD5.3CB0CC8879956C187E87E18634EE5164] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960] [PID.724] =>.Toshiba Corporation
[MD5.C9FFBD6B8EDC46CD3D13E3C6DB914FB7] - (.Matsushita Electric Industrial Co., Ltd. - DVD-RAM Utility Helper Service.) -- C:\WINDOWS\system32\DVDRAMSV.exe [110592] [PID.780]
[MD5.1F7B00B95FC726721941306F3D688D21] - (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe [34816] [PID.848]
[MD5.9FB66CDB75A069A156208EF98B6EEB62] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\ati2evxx.exe [360448] [PID.452] =>.ATI Technologies Inc.
[MD5.96FB193EDCE569E08D9C416C5A00FD6E] - (.Atheros Communications, Inc. - Atheros Client Utility.) -- C:\Program Files\Atheros\ACU.exe [294912] [PID.2140] =>.Atheros Communications, Inc.
[MD5.CBC5D0916257000F633B09D382E659DE] - (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\TOSHIBA\Toshiba Applet\THotkey.exe [339968] [PID.2196] =>.TOSHIBA
[MD5.A8FC2527EF4463ECE6D2AE55522EDB43] - (.TOSHIBA CORPORATION - ConfigFree(TM) Tray.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [962560] [PID.2280] =>.Toshiba Corporation
[MD5.E7318CB203F73A06B9899860B6425022] - (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [339968] [PID.2288] =>.ATI Technologies, Inc.
[MD5.352FBF618066D0CEB7DC8ECABEB1A8D7] - (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe [122941] [PID.2296] =>.Sonic Solutions
[MD5.C2EDE68251407CCACABF5E48028626BD] - (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\ltmoh.exe [184320] [PID.2324] =>.Agere Systems
[MD5.B2ED4020EE2A9446649CE6B0A918C91C] - (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\agrsmmsg.exe [88358] [PID.2332] =>.Agere Systems
[MD5.454D563D0EAE7F12F203FB508F02FD2C] - (.TOSHIBA Corporation - .) -- C:\WINDOWS\system32\TPSMain.exe [266240] [PID.2340] =>.Toshiba Corporation
[MD5.1F6573D67DD5DC06DD29EC7FCF81DC6F] - (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe [36975] [PID.2356] =>.Sun Microsystems, Inc.
[MD5.12E76B92A26AA03213DCAD20C7793966] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394] [PID.2392] =>.Synaptics, Inc.
[MD5.343AE860DA9FAE4E275F890BA0916D6E] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218] [PID.2404] =>.Synaptics, Inc.
[MD5.FC1EBDD2C46D0D8B5763BF776ABA2E61] - (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe [73728] [PID.2424] =>.Toshiba Corporation
[MD5.AF4EE7BA2A1DEE1C9DEB43CE14B8B442] - (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [118784] [PID.2464] =>.Toshiba Corporation
[MD5.FEBC1591E5C0DC87EF9CF3D657B65FC2] - (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [65536] [PID.2496] =>.TOSHIBA
[MD5.4D4DE41DA750649505E884CEC4A1422F] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3933392] [PID.2512] =>.Tonec Inc.®
[MD5.5648152AD2CCAB0265EAB9711755F484] - (.Matsushita Electric Industrial Co., Ltd. - CD Burning of Windows XP disabling tool for.) -- C:\WINDOWS\system32\RAMASST.exe [155648] [PID.2552]
[MD5.52BEF4634BE1BC8B64805E93E8EB22FA] - (.TOSHIBA Corporation - .) -- C:\WINDOWS\system32\TPSBattM.exe [40960] [PID.2560] =>.Toshiba Corporation
[MD5.F7CEB1E5F0000FDEEE04B046BBDE1D4E] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [377000] [PID.284] =>.Mozilla Corporation®
[MD5.808A7BB8C03A3F52966AD06F42368343] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Benhabiles Mohammed\Bureau\ZHPDiag3.exe [2126336] [PID.228] =>.Nicolas Coolman

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (11) - 2s
P2 - EXT FILE: (...) -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Mozilla\Firefox\Profiles\4qd8n1j4.default\extensions\mytube@ashishmishra.in.xpi
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazondotcom.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\twitter.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} =>.Mozilla
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (20)

---\\ Browser Helper Object de navigateur (BHO) (2) - 0s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswshx.dll =>.Sonic Solutions

---\\ Applications lancées au démarrage du système (27) - 0s
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 (.not file.)
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation
O4 - HKLM\..\Run: [ACU] C:\Program Files\Atheros\ACU.exe" -nogui (.not file.)
O4 - HKLM\..\Run: [THotkey] . (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\TOSHIBA\Toshiba Applet\THotkey.exe =>.TOSHIBA
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ATIPTA] . (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe =>.ATI Technologies, Inc.
O4 - HKLM\..\Run: [dla] . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe =>.Sonic Solutions
O4 - HKLM\..\Run: [LtMoh] . (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\ltmoh.exe =>.Agere Systems
O4 - HKLM\..\Run: [AGRSMMSG] . (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe =>.Agere Systems
O4 - HKLM\..\Run: [TPSMain] . (.TOSHIBA Corporation - .) -- C:\WINDOWS\System32\TPSMain.exe =>.Toshiba Corporation
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe =>.Sun Microsystems, Inc.
O4 - HKLM\..\Run: [PadTouch] . (.TOSHIBA - PadTouch Main.) -- C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe =>.TOSHIBA
O4 - HKLM\..\Run: [SynTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe =>.Synaptics, Inc.
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics, Inc.
O4 - HKLM\..\Run: [Tvs] . (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe =>.Toshiba Corporation
O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe =>.Toshiba Corporation
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe =>.TOSHIBA
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-839522115-1708537768-1644491937-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-839522115-1708537768-1644491937-1003\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe =>.TOSHIBA
O4 - HKUS\S-1-5-21-839522115-1708537768-1644491937-1003\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®

---\\ Raccourcis Global Startup (21) - 4s
O4 - GS\Desktop [Administrateur]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - GS\Desktop [Administrateur]: Your Uninstaller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC}
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Desktop [Benhabiles Mohammed]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - GS\Desktop [Benhabiles Mohammed]: Your Uninstaller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC}
O4 - GS\Desktop [Benhabiles Mohammed]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Benhabiles Mohammed]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Desktop [HelpAssistant]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - GS\Desktop [HelpAssistant]: Your Uninstaller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC}
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Desktop [SUPPORT_388945a0]: Internet Download Manager.lnk . (.Tonec Inc. - Internet Download Manager (IDM).) C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc.®
O4 - GS\Desktop [SUPPORT_388945a0]: Your Uninstaller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC}
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Assist TOSHIBA.lnk . (.TOSHIBA Corporation - TOSHIBA Assist.) C:\Program Files\TOSHIBA\Assist TOSHIBA\TInTouch.exe =>.Toshiba Corporation
O4 - GS\CommonDesktop [Public]: AvRack.lnk . (.Realtek Semiconductor Corp. - RtlRack MFC Application.) C:\Program Files\AvRack\rtlrack.exe =>.Realtek Semiconductor Corp.
O4 - GS\CommonDesktop [Public]: Manuel de l'utilisateur TOSHIBA.lnk . (...) C:\Program Files\TOSHIBA\Manuals\SM40_FR.pdf
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN®

---\\ Modification Domaine/Adresses DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{80A3EA95-07E5-43BD-B882-28926380A51D}: DhcpNameServer = 192.168.1.1 0.0.0.0

---\\ Protocole additionnel (28) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation

---\\ Logiciels installés (35) - 36s
O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Assist TOSHIBA - (...) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}
O42 - Logiciel: Atheros Client Utility - (...) [HKLM] -- {71D658CF-4E0D-4DA8-AA67-8C0B6F1C01FE}
O42 - Logiciel: Atheros Wireless LAN MiniPCI card Driver - (...) [HKLM] -- {05832D65-6EDB-4D32-BA78-BCD0E2B91C02}
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (...) [HKLM] -- All ATI Software
O42 - Logiciel: ATI Control Panel - (...) [HKLM] -- {0BEDBD4E-2D34-47B5-9973-57E62B29307C}
O42 - Logiciel: ATI Display Driver - (...) [HKLM] -- ATI Display Driver
O42 - Logiciel: Gestion d'énergie TOSHIBA - (...) [HKLM] -- Power Saver
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150020} =>.Sun Microsystems, Inc.
O42 - Logiciel: Manuels TOSHIBA - (.TOSHIBA.) [HKLM] -- {3EB6332B-AF02-457C-A31C-835458C5B48B} =>.TOSHIBA
O42 - Logiciel: Mozilla Firefox 39.0.3 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0.3 (x86 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Outil de diagnostic PC TOSHIBA - (...) [HKLM] -- Outil de diagnostic PC
O42 - Logiciel: Pilote du DVD-RAM - (...) [HKLM] -- {9D765FA6-F2BC-40AF-8145-50808F9BDF4E}
O42 - Logiciel: Realtek AC'97 Audio - (...) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: REALTEK Gigabit and Fast Ethernet NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {94FB906A-CF42-4128-A509-D353026A607E} =>.Realtek Semiconductor Corp.
O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D} =>.TOSHIBA
O42 - Logiciel: Son virtuel TOSHIBA - (...) [HKLM] -- {8B12BA86-ADAC-4BA6-B441-FFC591087252}
O42 - Logiciel: Sonic DLA - (.Sonic Solutions.) [HKLM] -- {1206EF92-2E83-4859-ACCB-2048C3CB7DA6} =>.Sonic Solutions
O42 - Logiciel: Sonic RecordNow! - (.Sonic Solutions.) [HKLM] -- {9541FED0-327F-4DF0-8B96-EF57EF622F19} =>.Sonic Solutions
O42 - Logiciel: Synaptics Pointing Device Driver - (...) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA ConfigFree - (...) [HKLM] -- {BDD83DC9-BEE9-4654-A5DA-CC46C250088D}
O42 - Logiciel: TOSHIBA Hotkey Utility - (...) [HKLM] -- {64DD71BC-3109-4C88-9AD3-D5422644B722}
O42 - Logiciel: TOSHIBA Software Modem - (...) [HKLM] -- TOSHIBA Software Modem
O42 - Logiciel: TOSHIBA TouchPad ON/Off Utility - (...) [HKLM] -- {69BE47C2-36FE-4397-8199-85D8EAE69982}
O42 - Logiciel: TOSHIBA Utilities - (...) [HKLM] -- {78C68CB9-3DF5-44F3-AB9D-FA305C5EB85C}
O42 - Logiciel: Touch and Launch - (...) [HKLM] -- {5D96E2B1-D9AC-46E0-9073-425C5F63E338}
O42 - Logiciel: Utilitaire de zoom TOSHIBA - (...) [HKLM] -- {64212898-097F-4F3F-AECA-6D34A7EF82DF}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify =>.Microsoft Corporation
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 =>.Microsoft Corporation®
O42 - Logiciel: WinRAR 5.31 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: Your Uninstaller! 7 - (.URSoft, Inc..) [HKLM] -- YU2010_is1 {2D52C7CF5E69A633AC3AED0E78F988DC}

---\\ HKCU & HKLM Software Keys (51) - 36s
HKLM\SOFTWARE\Agere
HKLM\SOFTWARE\Atheros
HKLM\SOFTWARE\Atheros Communications
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\ATI Technologies Inc.
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Internet Download Manager
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\LanSetup
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Lucent
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\MDC
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Panasonic ODSD
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\REALTEK Semiconductor Corporation
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\SoftEther Project
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\TOSHIBA
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\Atheros
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\SoftEther Project
HKCU\SOFTWARE\Sonic
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Toshiba
HKCU\SOFTWARE\University of Tsukuba
HKCU\SOFTWARE\URSoft
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper

---\\ Contenu des dossiers Programmes (82) - 11s
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Atheros
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\AvRack
O43 - CFD: 12/02/2016 - [0] D -- C:\Program Files\ComPlus Applications
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\DVD-RAM
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs
O43 - CFD: 12/02/2016 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Internet Download Manager =>.Tonec Inc.®
O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Java
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\ltmoh
O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Messenger
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\MSN
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Online Services
O43 - CFD: 15/02/2016 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 12/02/2016 - [0] D -- C:\Program Files\Realtek Sound Manager
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\SoftEther VPN Client
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Sonic
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Synaptics
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\TOSHIBA
O43 - CFD: 12/02/2016 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 12/02/2016 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\xerox
O43 - CFD: 13/02/2016 - [] D -- C:\Program Files\Your Uninstaller! 7
O43 - CFD: 12/02/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Atheros
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\DVD-RAM
O43 - CFD: 18/02/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 12/02/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 12/02/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Realtek Sound Manager
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Sonic
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\TOSHIBA
O43 - CFD: 20/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Your Uninstaller! 7
O43 - CFD: 13/02/2016 - [0] D -- C:\Documents and Settings\All Users\Application Data\IDM
O43 - CFD: 12/02/2016 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 18/02/2016 - [0] AD -- C:\Documents and Settings\All Users\Application Data\TEMP
O43 - CFD: 15/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\Java
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 12/02/2016 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Adobe
O43 - CFD: 21/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\DMCache
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Identities
O43 - CFD: 18/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\IDM
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Macromedia
O43 - CFD: 13/02/2016 - [] SD -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Microsoft
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\Mozilla
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\toshiba
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\URSoft
O43 - CFD: 20/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\vlc
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\WinRAR
O43 - CFD: 21/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Application Data\ZHP
O43 - CFD: 13/02/2016 - [0] D -- C:\Documents and Settings\Benhabiles Mohammed\Local Settings\Application Data\Adobe
O43 - CFD: 15/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Local Settings\Application Data\Microsoft
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Local Settings\Application Data\Mozilla
O43 - CFD: 12/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150020}
O43 - CFD: 15/02/2016 - [] RD -- C:\Documents and Settings\Benhabiles Mohammed\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 12/02/2016 - [] RD -- C:\Documents and Settings\Benhabiles Mohammed\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Menu Démarrer\Programmes\Internet Download Manager
O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Benhabiles Mohammed\Menu Démarrer\Programmes\WinRAR

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: IDM Shell Extension [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.®
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation

---\\ Liste des pilotes du système (63) - 8s
O58 - SDL:2005/04/12 23:29:26 A . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\System32\drivers\AGRSM.sys [1066278] =>.Agere Systems
O58 - SDL:2005/03/25 23:04:40 A . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2314560] =>.Realtek Semiconductor Corp.
O58 - SDL:2004/12/22 16:45:36 A . (.Atheros Communications, Inc. - Driver for Atheros AR5001 Wireless Network.) -- C:\WINDOWS\System32\drivers\ar5211.sys [393600] =>.Atheros Communications, Inc.
O58 - SDL:2005/04/11 21:33:52 A . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [1035264] =>.ATI Technologies Inc.
O58 - SDL:2001/10/02 19:17:52 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2015/07/06 00:10:20 A . (.Kaspersky Lab ZAO - Cryptographic Module Driver x86 (Weak).) -- C:\WINDOWS\System32\drivers\cm_km.sys [201912] =>.Kaspersky Lab®
O58 - SDL:2001/10/02 19:17:52 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2008/04/13 19:05:08 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/13 19:05:14 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2001/10/02 19:17:30 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2005/04/22 03:22:00 A . (.Sonic Solutions - Device Driver.) -- C:\WINDOWS\System32\drivers\drvmcdb.sys [88352] =>.Sonic Solutions
O58 - SDL:2005/04/21 02:56:00 A . (.Sonic Solutions - Device Driver Manager.) -- C:\WINDOWS\System32\drivers\drvnddm.sys [40544] =>.Sonic Solutions
O58 - SDL:2008/04/13 09:36:06 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384]
O58 - SDL:2016/01/28 10:20:10 A . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\System32\drivers\idmtdi.sys [138864] =>.Tonec Inc.®
O58 - SDL:2015/06/22 20:40:04 A . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\WINDOWS\System32\drivers\kl1.sys [153784] =>.Kaspersky Lab®
O58 - SDL:2015/06/06 08:50:18 A . (.Kaspersky Lab ZAO - Backup Disk Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klbackupdisk.sys [46776] =>.Kaspersky Lab®
O58 - SDL:2015/06/27 00:00:18 A . (.Kaspersky Lab ZAO - Backup File Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klbackupflt.sys [57712] =>.Kaspersky Lab®
O58 - SDL:2015/06/06 08:48:20 A . (.Kaspersky Lab ZAO - Virtual Disk [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\kldisk.sys [58040] =>.Kaspersky Lab®
O58 - SDL:2016/02/15 00:16:58 A . (.AO Kaspersky Lab - Filter Core [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klflt.sys [150408] =>.Kaspersky Lab®
O58 - SDL:2016/02/15 00:16:45 A . (.AO Kaspersky Lab - klhk [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klhk.sys [44216] =>.Kaspersky Lab®
O58 - SDL:2016/02/15 00:16:59 A . (.AO Kaspersky Lab - Core System Interceptors [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klif.sys [773504] =>.Kaspersky Lab®
O58 - SDL:2013/04/19 10:44:54 A . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\WINDOWS\System32\drivers\klim5.sys [36448] =>.Kaspersky Lab®
O58 - SDL:2015/06/04 16:38:30 A . (.Kaspersky Lab ZAO - Keyboard Device Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klkbdflt.sys [36024] =>.Kaspersky Lab®
O58 - SDL:2015/06/07 01:44:46 A . (.Kaspersky Lab ZAO - Mouse Device Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klmouflt.sys [37040] =>.Kaspersky Lab®
O58 - SDL:2016/02/15 00:17:00 A . (.AO Kaspersky Lab - Format Recognizer [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klpd.sys [39304] =>.Kaspersky Lab®
O58 - SDL:2015/06/10 18:16:56 A . (.Kaspersky Lab ZAO - TDI Network Connection Filter Driver [fre_w.) -- C:\WINDOWS\System32\drivers\kltdf.sys [73912] =>.Kaspersky Lab®
O58 - SDL:2015/06/11 15:52:38 A . (.Kaspersky Lab ZAO - Network filtering component [fre_wxp_x86].) -- C:\WINDOWS\System32\drivers\kltdi.sys [54328] =>.Kaspersky Lab®
O58 - SDL:2015/06/23 18:30:50 A . (.Kaspersky Lab ZAO - Network Processor [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\kneps.sys [156856] =>.Kaspersky Lab®
O58 - SDL:2016/02/12 23:07:18 A . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\System32\drivers\mdc8021x.sys [15890]
O58 - SDL:2005/06/02 11:33:00 A . (.Matsushita Electric Industrial Co.,Ltd. - DVD-RAM UDF File System Driver.) -- C:\WINDOWS\System32\drivers\meiudf.sys [102384]
O58 - SDL:2005/03/15 08:33:30 A . (.Toshiba Corporation - Toshiba Notebook PC SMI Driver.) -- C:\WINDOWS\System32\drivers\NBSMI.sys [4992] =>.Toshiba Corporation
O58 - SDL:2003/01/29 22:35:00 A . (.TOSHIBA Corporation. - Network Device Usermode I/O protocol.) -- C:\WINDOWS\System32\drivers\Netdevio.sys [12032] =>.TOSHIBA Corporation.
O58 - SDL:2001/10/02 19:17:52 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2001/10/02 19:18:56 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2005/03/29 02:03:00 A . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\System32\drivers\pxhelp20.sys [20640] =>.Sonic Solutions
O58 - SDL:2001/10/02 19:17:52 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2001/10/02 19:17:52 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/13 10:35:40 A . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\System32\drivers\RTL8139.sys [20992] =>.Realtek Semiconductor Corporation
O58 - SDL:2004/12/03 00:36:08 A . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\Rtlnicxp.sys [70912] =>.Realtek Semiconductor Corporation
O58 - SDL:2008/04/13 09:39:16 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2005/05/13 10:37:28 A . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\System32\drivers\sscdbhk5.sys [5627] =>.Sonic Solutions
O58 - SDL:2005/05/13 10:37:20 A . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\System32\drivers\ssrtln.sys [23545] =>.Sonic Solutions
O58 - SDL:2004/10/14 23:14:04 A . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [185728] =>.Synaptics, Inc.
O58 - SDL:2001/10/02 19:17:52 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2005/01/25 14:35:26 A . (.Copyright (C) 2004 SRS Labs, Inc. - SRS Labs TruSurround XT kernel DLL.) -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys [29184]
O58 - SDL:2005/04/15 13:46:04 A . (.TOSHIBA Corporation - TOSHIBA Audio Filter Driver.) -- C:\WINDOWS\System32\drivers\Tvs.sys [29056] =>.Toshiba Corporation
O58 - SDL:2001/10/02 19:17:52 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2005/01/25 14:40:52 A . (.Copyright (C) 2004 SRS Labs, Inc. - SRS Labs WOW XT kernel DLL.) -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys [34048]
O58 - SDL:2001/10/02 19:17:16 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037]
O58 - SDL:2001/10/02 19:17:26 A . (...) -- C:\WINDOWS\System32\country.sys [27097]
O58 - SDL:2001/10/02 19:18:02 A . (...) -- C:\WINDOWS\System32\himem.sys [4912]
O58 - SDL:2001/10/02 19:18:12 A . (...) -- C:\WINDOWS\System32\key01.sys [42809]
O58 - SDL:2008/04/13 09:50:56 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537]
O58 - SDL:2001/10/02 19:18:38 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916]
O58 - SDL:2001/10/02 19:18:38 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146]
O58 - SDL:2001/10/02 19:18:38 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370]
O58 - SDL:2001/10/02 19:18:38 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274]
O58 - SDL:2001/10/02 19:18:38 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146]
O58 - SDL:2008/04/13 09:49:52 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000]
O58 - SDL:2008/04/13 09:49:44 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560]
O58 - SDL:2008/04/13 09:49:40 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648]
O58 - SDL:2008/04/13 09:49:44 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424]
O58 - SDL:2008/04/13 09:49:42 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (...) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (8) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe" -show (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe" -reinstall (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts (.not file.)
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe" -hide (.not file.)

---\\ Recherche d'infection sur les navigateurs (1) - 9s
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com/

---\\ Enumère les services démarrés par Svchost (40) - 2s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique mul.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] =>.Microsoft Corporation

---\\ Scan Additionnel (1) - 0s
C:\Program Files\Mozilla Firefox\browser\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo

---\\ Récapitulatif des éléments trouvés sur votre station (1) - 0s
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo

~ End of the scan, 34216 items in 00h05mn08s (522)(0)

Publicité


Signaler le contenu de ce document

Publicité