~ ZHPDiag v2016.2.11.28 Par Nicolas Coolman (2016/02/11) ~ Démarré par dfp (Administrator) (2016/02/14 08:19:07) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Documents and Settings\dfp\Bureau\ZHPDiag.txt ~ Rapport: C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ Navigateurs Internet (1) - 0s MSIE: Internet Explorer v8.0.6001.18702 ---\\ Informations sur les produits Windows (3) - 0s Windows Automatic Updates : KO Windows Activation Technologies : KO Windows Genuine Advantage : KO ---\\ Logiciels de protection (1) - 2s SMADAV version 10.5.1 v10.5.1 ---\\ Surveillance de Logiciels (2) - 3s Adobe Flash Player 20 ActiveX Adobe Reader 9 ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 15 Model 6 Stepping 5, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2087.148 MB (44% free) System Restore: Activé (Enable) System drive C: has 1 GB () free of 12 GB =>Alerte espace disque inférieur à 20 Go ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: MSILA-A0C4356E6 ~ User Name: dfp ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 1 GB free of 12 GB (System) ~ Drive D: has 5 GB free of 6 GB ~ Drive G: has 5 GB free of 14 GB ---\\ Etat du Centre de Sécurité Windows (9) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (23) - 2s [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation [MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation [MD5.2988BFF8257A55EA8AFD038F49F81A34] - 06/02/2014 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [920064] =>.Microsoft Corporation [MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation [MD5.D76A076ADB74F8132924E498D63123A2] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [149504] =>.Microsoft Corporation [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - 17/08/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation [MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation [MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation [MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation [MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation [MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - 15/07/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320] =>.Microsoft Corporation [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation [MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation [MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation ---\\ Liste des services NT non Microsoft et non désactivés (2) - 2s O23 - Service: MySQL (MySQL) . (...) - C:\SAHL\MySQL\bin\mysqld --defaults-file=C:\SAHL\MySQL\bin\my.ini MySQL (.not file.) O23 - Service: Baidu Spark Service (SparkSvc) . (.Baidu Inc. - spark.) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (3) - 16s SS - Demand [11/02/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [24/01/2016] [ 97080] Baidu Spark Service (SparkSvc) . (.Baidu Inc..) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® ---\\ Tâches planifiées en automatique (5) - 4s [MD5.00000000000000000000000000000000] [APT] [COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}] (...) -- C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Opera N Saturday] (...) -- C:\Program Files\Opera\launcher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [Opera N Sunday] (...) -- C:\Program Files\Opera\launcher.exe (.not file.) [0] O39 - APT: Opera N Saturday - (...) -- C:\WINDOWS\Tasks\Opera N Saturday.job [222] (.Orphean.) =>.Superfluous.Orphean O39 - APT: Opera N Sunday - (...) -- C:\WINDOWS\Tasks\Opera N Sunday.job [222] (.Orphean.) =>.Superfluous.Orphean ---\\ Processus lancés (18) - 23s [MD5.8B0DE4B972DB725FB9D591E69CD236FB] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [159744] [PID.152] =>.Intel Corporation [MD5.CC632EB3A7D106464E933E7D53883550] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [131072] [PID.184] =>.Intel Corporation [MD5.8C2D549EE5760824DB4837D964B534D0] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [19557480] [PID.192] =>.Realtek Semiconductor Corp® [MD5.6E0B205042FC3AF5DE84F90F875AFFDA] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856] [PID.424] =>.Intel Corporation [MD5.286E0970EA8816C5E272677D6273B2C0] - (.CANON INC. - Canon Advanced Printing Technology RPC Serv.) -- C:\WINDOWS\system32\CAP3RSK.EXE [61512] [PID.412] =>.CANON INC. [MD5.8ACB732001797E42EEBA7CD4E35A423F] - (.CANON INC. - Canon Advanced Printing Technology Printer.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3SWK.EXE [135680] [PID.1696] =>.CANON INC. [MD5.99189BBC6379E5B95789C80ABB2FBEA2] - (.Baidu Inc. - spark.) -- C:\Program Files\baidu\Spark\sparkservice.exe [97080] [PID.1692] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.E1469FC9CB1F513D8FA0AEB65B1277F4] - (.CANON INC. - CAP3 PSW Launcher.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE [30720] [PID.2176] =>.CANON INC. [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.496] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.2404] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3504] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3588] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3660] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3672] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.2740] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® [MD5.4B8E156A310F35D2E435CF981F7B50B6] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe [1716224] [PID.2772] [MD5.4B8E156A310F35D2E435CF981F7B50B6] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe [1716224] [PID.3264] [MD5.0399D368D0B6A28221C163DB27CFC38E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\dfp\Mes documents\ZHPDiag3.exe [2118144] [PID.3260] =>.Nicolas Coolman ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.01net.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (6) - 1s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (28) ---\\ Browser Helper Object de navigateur (BHO) (3) - 3s O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated® O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation® ---\\ Applications lancées au démarrage du système (104) - 7s O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\ime\IMJP8_1\imjpmig.exe =>.Microsoft Corporation O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated® O4 - HKLM\..\Run: [CAP3ON] . (.CANON INC. - Canon Advanced Printing Technology Printer.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE =>.CANON INC. O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\SpyHunter\SpyHunter4.exe (.not file.) O4 - HKLM\..\Run: [SMΔRT-Protection] . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [USB Safely Remove] C:\Program Files\USB Safely Remove\USBSafelyRemove.exe (.not file.) O4 - HKCU\..\Run: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe O4 - HKCU\..\Run: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe O4 - HKCU\..\Run: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe O4 - HKCU\..\Run: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe O4 - HKCU\..\Run: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe O4 - HKCU\..\Run: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe O4 - HKCU\..\Run: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe O4 - HKCU\..\Run: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe O4 - HKCU\..\Run: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe O4 - HKCU\..\Run: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe O4 - HKCU\..\Run: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe O4 - HKCU\..\Run: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe O4 - HKCU\..\Run: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe O4 - HKCU\..\Run: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe O4 - HKCU\..\Run: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe O4 - HKCU\..\Run: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe O4 - HKCU\..\Run: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe O4 - HKCU\..\RunOnce: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe O4 - HKCU\..\RunOnce: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe O4 - HKCU\..\RunOnce: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe O4 - HKCU\..\RunOnce: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe O4 - HKCU\..\RunOnce: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe O4 - HKCU\..\RunOnce: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe O4 - HKCU\..\RunOnce: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe O4 - HKCU\..\RunOnce: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe O4 - HKCU\..\RunOnce: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe O4 - HKCU\..\RunOnce: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe O4 - HKCU\..\RunOnce: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe O4 - HKCU\..\RunOnce: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe O4 - HKCU\..\RunOnce: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe O4 - HKCU\..\RunOnce: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe O4 - HKCU\..\RunOnce: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe O4 - HKCU\..\RunOnce: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe O4 - HKCU\..\RunOnce: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe O4 - HKLM\..\policies\Explorer\Run: [1157818018] . (...) -- C:\Documents and Settings\All Users\mswoeicnx.exe O4 - HKLM\..\policies\Explorer\Run: [1073147374] . (...) -- C:\Documents and Settings\All Users\mssgzdrl.exe O4 - HKLM\..\policies\Explorer\Run: [698768825] . (...) -- C:\Documents and Settings\All Users\msyknfoj.exe O4 - HKLM\..\policies\Explorer\Run: [1779389244] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\mscjlqrtg.exe O4 - HKLM\..\policies\Explorer\Run: [374321595] . (...) -- C:\Documents and Settings\All Users\mscslcz.exe O4 - HKLM\..\policies\Explorer\Run: [304304468] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msmzireh.exe O4 - HKLM\..\policies\Explorer\Run: [2101253962] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msdnm.exe O4 - HKLM\..\policies\Explorer\Run: [608284566] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msrzwjrot.exe O4 - HKLM\..\policies\Explorer\Run: [1063572649] . (.Ghisler Software GmbH - Total Commander Administrator Tool.) -- C:\Documents and Settings\All Users\mscqlx.exe =>.Ghisler Software GmbH O4 - HKLM\..\policies\Explorer\Run: [1815424720] . (.Ghisler Software GmbH - Total Commander Administrator Tool.) -- C:\Documents and Settings\All Users\mselrvu.exe =>.Ghisler Software GmbH O4 - HKLM\..\policies\Explorer\Run: [844423773] . (...) -- C:\Documents and Settings\All Users\msvubjqx.exe O4 - HKLM\..\policies\Explorer\Run: [337494804] . (...) -- C:\Documents and Settings\All Users\msmpxfnw.exe O4 - HKLM\..\policies\Explorer\Run: [689473025] . (...) -- C:\Documents and Settings\All Users\msbiffv.exe O4 - HKLM\..\policies\Explorer\Run: [505003355] . (...) -- C:\Documents and Settings\All Users\msichrb.exe O4 - HKLM\..\policies\Explorer\Run: [502159806] . (...) -- C:\Documents and Settings\All Users\msxkqobi.exe O4 - HKLM\..\policies\Explorer\Run: [2006882716] . (...) -- C:\Documents and Settings\All Users\msiumbypi.exe O4 - HKLM\..\policies\Explorer\Run: [472312406] . (...) -- C:\Documents and Settings\All Users\msyjzyf.exe O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [USB Safely Remove] C:\Program Files\USB Safely Remove\USBSafelyRemove.exe (.not file.) O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe ---\\ Raccourcis Global Startup (35) - 8s O4 - GS\Desktop [Administrateur]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [Administrateur]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [Administrateur]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\Desktop [dfp]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [dfp]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [dfp]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [dfp]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe O4 - GS\Desktop [dfp]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [dfp]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [dfp]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\Desktop [HelpAssistant]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [HelpAssistant]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [HelpAssistant]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [HelpAssistant]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [HelpAssistant]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [HelpAssistant]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\Desktop [SUPPORT_388945a0]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Desktop [SUPPORT_388945a0]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [SUPPORT_388945a0]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [SUPPORT_388945a0]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [SUPPORT_388945a0]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent O4 - GS\Quicklaunch [SUPPORT_388945a0]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\CommonDesktop [Public]: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.0.) C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: Acrobat.com.lnk . (...) C:\Program Files\Adobe\Acrobat.com\Acrobat.com.exe O4 - GS\CommonDesktop [Public]: Canon LASER SHOT LBP-1120.LNK . (...) C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Canon LASER SHOT LBP-1120 O4 - GS\CommonDesktop [Public]: Facebook.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\CommonDesktop [Public]: Google.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\CommonDesktop [Public]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O4 - GS\CommonDesktop [Public]: SMADΔV.lnk . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) C:\Program Files\SMADAV\SMΔRTP.exe ---\\ Modification Domaine/Adresses DNS (5) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = domain.name O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: NameServer = 8.8.8.8,8.8.4.4 =>.Google Public DNS O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: DhcpDomain = domain.name ---\\ Protocole additionnel (30) - 2s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Logiciels installés (19) - 43s O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07} =>.Adobe Systems Incorporated O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {00203668-8170-44A0-BE44-B632FA4D780F} =>.Adobe Systems Inc. O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 20 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A90000000001} =>.Adobe Systems Incorporated O42 - Logiciel: Atlantis Quest - (.Media Contact LLC.) [HKLM] -- Atlantis Quest_is1 O42 - Logiciel: Baidu Browser - (.Baidu Inc..) [HKLM] -- Spark =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O42 - Logiciel: Canon LASER SHOT LBP-1120 - (...) [HKLM] -- Canon LASER SHOT LBP-1120 O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (...) [HKLM] -- HDMI =>.Intel Corporation® O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9} =>.Microsoft Corporation O42 - Logiciel: Microsoft Software Update for Web Folders (French) 14 - (.Microsoft Corporation.) [HKLM] -- {90140000-0010-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: QQ??3.7 - (.????(??)????.) [HKCU] -- QQPlayer O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: SMADAV version 10.5.1 - (.SmadSoft.) [HKLM] -- {8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1 O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 =>.Microsoft Corporation® O42 - Logiciel: WinRAR 5.20 beta 1 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® ---\\ HKCU & HKLM Software Keys (55) - 43s HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\Baidu HKLM\SOFTWARE\Boonty HKLM\SOFTWARE\C07ft5Y HKLM\SOFTWARE\Canon HKLM\SOFTWARE\CloudOPTInfo HKLM\SOFTWARE\COMODO HKLM\SOFTWARE\ComodoGroup HKLM\SOFTWARE\Creative Tech HKLM\SOFTWARE\CyberLink HKLM\SOFTWARE\Gemplus HKLM\SOFTWARE\GiliSoft HKLM\SOFTWARE\GSLLC HKLM\SOFTWARE\HaaliMkx HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\MSI HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\Program Groups HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\Rocket Division Software HKLM\SOFTWARE\RTLSetup HKLM\SOFTWARE\Schlumberger HKLM\SOFTWARE\Secure HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Windows 3.1 Migration Status HKLM\SOFTWARE\WinRAR HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Baidu HKCU\SOFTWARE\Boonty HKCU\SOFTWARE\Canon HKCU\SOFTWARE\ComodoGroup HKCU\SOFTWARE\CoreAAC HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\Haali HKCU\SOFTWARE\HelloMovie HKCU\SOFTWARE\Hetman Software HKCU\SOFTWARE\HookNetwork HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\SMADΔV HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\Wallpapers Bot HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper ---\\ Contenu des dossiers Programmes (91) - 48s O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs =>.Adobe Systems Incorporated® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Windows NT O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSN O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSN Gaming Zone O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Messenger O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Online Services O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Outlook Express O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\NetMeeting O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Movie Maker O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Services en ligne O43 - CFD: 18/01/2016 - [0] HD -- C:\Program Files\WindowsUpdate O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\microsoft frontpage O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\xerox O43 - CFD: 18/01/2016 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Intel O43 - CFD: 18/01/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\baidu =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Tencent =>.Superfluous.Tencent O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Adobe O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Analysis Services O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Sync Framework O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSBuild O43 - CFD: 20/01/2016 - [] D -- C:\Program Files\USB Safely Remove {077EBA83916E963439554F9098F40B15} O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\Boonty O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\BoontyGames {4A45221856AA4882682A7CBA2E2BE051} O43 - CFD: 26/01/2016 - [] D -- C:\Program Files\GameTop.com O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 08/02/2016 - [] D -- C:\Program Files\Win32_ComputerSystemProduct-1454915344--- O43 - CFD: 08/02/2016 - [] D -- C:\Program Files\REACHit O43 - CFD: 10/02/2016 - [] D -- C:\Program Files\Minaret Computers L.L.C O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\NSIS O43 - CFD: 11/02/2016 - [0] D -- C:\Program Files\ComPlus Applications O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\GiliSoft O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\Comodo O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\SMADAV O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SharePoint O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Canon LASER SHOT LBP-1120 O43 - CFD: 21/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Baidu Browser O43 - CFD: 26/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\GameTop.com O43 - CFD: 14/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SMADAV Antivirus O43 - CFD: 18/01/2016 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Baidu O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Microsoft Help O43 - CFD: 25/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\BOONTY O43 - CFD: 03/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Comodo O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\ODBC O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\System O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\MSSoap O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Services O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\InstallShield O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Adobe O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Adobe AIR O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\DESIGNER O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\Fichiers communs\BOONTY Shared O43 - CFD: 18/01/2016 - [] SD -- C:\Documents and Settings\dfp\Application Data\Microsoft O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Identities O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Baidu O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Tencent =>.Superfluous.Tencent O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Adobe O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Macromedia O43 - CFD: 19/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\WinRAR O43 - CFD: 20/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\USBSRService O43 - CFD: 20/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\USBSafelyRemove O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\UniformSoft.com O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Opera Software O43 - CFD: 14/02/2016 - [0] D -- C:\Documents and Settings\dfp\Application Data\Smadav O43 - CFD: 14/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\ZHP O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Microsoft O43 - CFD: 18/01/2016 - [0] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Microsoft Help O43 - CFD: 21/01/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Adobe O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\JustAgain.com O43 - CFD: 08/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\00000000-1454919197-0000-0000-002421E3819B O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Opera Software O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Accessoires O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Démarrage O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\WinRAR O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Tencent =>.Superfluous.Tencent ---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 0s O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® ---\\ Liste des pilotes du système (34) - 8s O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software. O58 - SDL:2008/04/14 12:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc. O58 - SDL:2008/04/14 12:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc. O58 - SDL:2008/04/14 12:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 12:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation O58 - SDL:2008/04/14 12:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc. O58 - SDL:2007/12/19 04:32:12 RA . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [5854688] =>.Intel Corporation O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 12:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384] O58 - SDL:2016/02/03 08:26:40 A . (.Gili Soft INC. - USB Stick Encryption Driver.) -- C:\WINDOWS\System32\drivers\usedisk.sys [17408] O58 - SDL:2008/04/14 12:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2010/07/06 04:13:10 RA . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys [234392] =>.Realtek Semiconductor Corp® O58 - SDL:2010/07/28 11:27:36 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [6108776] =>.Realtek Semiconductor Corp® O58 - SDL:2009/11/18 00:17:00 A . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\System32\drivers\Monfilt.sys [1395800] =>.Creative Labs Inc® O58 - SDL:2009/11/18 00:16:00 A . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480] =>.Creative Labs Inc® O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424] O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (4) - 3s O61 - LFC: 2016/02/10 09:57:20 A . (..) -- C:\Documents and Settings\dfp\Application Data\Adobe\Acrobat\9.0\UserCache.bin [62747] O61 - LFC: 2016/02/11 09:14:02 A . (.http://nsis.sf.net/License.) -- C:\Documents and Settings\dfp\Mes documents\nsis-3.0b2-setup.exe [1642658] O61 - LFC: 2016/02/14 08:12:36 A . (.SmadSoft.) -- C:\Documents and Settings\dfp\Mes documents\smadav105.exe [1392851] O61 - LFC: 2016/02/10 10:18:16 A . (.Uniform Software.) -- C:\Documents and Settings\dfp\Mes documents\Downloads\excel_invoice_manager_setup.exe [3387392] {3A8FB823D506289924471C31552D1792} ---\\ Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® ---\\ Menu de démarrage Internet (9) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (6) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com/ O69 - SBI: SearchScopes [HKCU] {317A5901-EAD0-4E35-B314-901DDAD6390F} [DefaultScope] - (Live Search) - http://search.live.com/ O69 - SBI: SearchScopes [HKCU] {6F7460F5-8E67-49EB-A8A4-27FA9F8803D3} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} - (Yahoo! Search) - http://fr.search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKCU] {BB67E4CE-EF0D-41F1-8AE5-9C81853A1405} - (01net) - http://www.01net.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com/ ---\\ Enumère les services démarrés par Svchost (40) - 1s O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] =>.Microsoft Corporation O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp. O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\System32\hidserv.dll [0] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] =>.Microsoft Corporation O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique mul.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] =>.Microsoft Corporation ---\\ Scan Additionnel (4) - 0s HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent C:\Documents and Settings\dfp\Application Data\Tencent =>.Superfluous.Tencent C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Tencent =>.Superfluous.Tencent ---\\ Récapitulatif des éléments trouvés sur votre station (1) - 0s http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent ~ End of the scan, 27369 items in 00h08mn29s (591)(0)