Petit astucien | Bonsoir, Voilà, j'étais sous antivir jusqu'à présent jamais de soucis, depuis quelques jours je remarque le parapluie fermé. J'essaye de voir s'il n'y a pas de mises à jour à faire, pas moyen de faire quoi que ce soit ! Je décide donc de désinstaller l'antivirus ! Ok c'est bon ! Je veux réinstaller, il télécharge, bien ! Au moment de l'installer, pas moyen j'ai un message d'erreur du genre "internet explorer a rencontré un problème" et il m'éjecte !! Depuis j'ai eu des micros coupures, il ne me laisse pas faire les mises à jours windows, lorsque je veux scanner le logiciel ne s'ouvre jamais, bref !! J'ai essayé de passer Malwarebytes, il ne le laisse pas travailler!! C'est dingue !! Alors si quelqu'un a une idée, je suis preneur. Merci d'avance
| |||||||
Publicité | ||||||||
| ||||||||
Petit astucien | Bonsoir, merci pour votre réponse Pour transférer dans le forum sécurité, il suffit de copier/coller ? C'est ça !! | |||||||
Grand Maître astucien | Bonjour patrick_57 Pour que ton sujet soit transférer, clique l'icone dans le bandeau au-dessus de ton premier message et dans la fenêtre qui s'affiche, demande au modérateur de déplacer ton sujet vers le forum Sécurité puis clique sur Envoyer. | |||||||
Grand Maître astucien | Bonsoir, On demande à Patrick_57 d'ouvrir un sujet dans le forum sécurité et là-bas on signale un doublon et on locke. Il faut avoir une bonne consistance, non ? @+ | |||||||
Petit astucien | nardino a écrit : Bonsoir, je suis un peu perdu sur le site, toutes mes excuses. Il suffit de me dire comment supprimer le doublon. Et comment ai je pu locker ?? J'en ai aucune idée !! Dites moi juste comment remédier à ça. Merci | |||||||
Petit astucien | J'ai essayé de passer malwarebytes pour avancer un peu dans mes soucis. Il a tourné quelques minutes et j'ai eu un message d'erreur qui a arrêté toute recherche !! | |||||||
Grand Maître astucien | Bonsoir, ZHPDiag de Nicolas Coolman sur ton bureau, à partir du lien suivant @+ | |||||||
Petit astucien | ||||||||
Petit astucien | MBRCheck, version 1.2.3 Command-line: Kernel Drivers (total 117): Processes (total 32): \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) PhysicalDrive0 Model Number: ST3250823AS, Rev: 3.03 Size Device Name MBR Status
| |||||||
Petit astucien | voilà, est ce bien la bonne démarche ? @+
| |||||||
Petit astucien | Ayant le réveil à 5h, je vous souhaite une bonne nuit. Je vous dit à demain, si vous le voulez bien. Merci dans un 1er temps. @+
| |||||||
Grand Maître astucien | Bonne nuit. Demain, refais un scan ZHPDiag en cocahnt toutes les cases après avoir cliquer sur l'icône de tournevis. @+ | |||||||
Petit astucien | Bonsoir, j'ai lancé la procédure comme demandé, mais à 61% un message : X Argument incorrect pour l'encodage de date Et depuis j'ai le sablier ! J'ai pourtant l'impression qu'il mouline, à l'entendre !
| |||||||
Petit astucien |
Voilà ce qu'on peut lire en rouge à l'endroit où il s'est arrêté ! 059 - HSMI -- C:\WINDOWS \system32\dfbwcnrz_navup.dat 059 - HSMI -- C:\WINDOWS \system32\sqreful_navtmp.dat 059 - HSMI -- C:\WINDOWS \system32\yfqbrxrsp_navtmp.dat 059 - HSMI -- C:\WINDOWS \system32\dfbwcnrz.dat 059 - HSMI -- C:\WINDOWS \pack.epk | |||||||
Grand Maître astucien | Bonsoir, Vu l'arbre en boule. Fais ceci : http://rue-du-montceau.pagesperso-orange.fr/outils_navilog.html Puis refais un scan avec ZHPDiag. @+
| |||||||
Petit astucien | Bonsoir, et merci d'etre la. Alors voilà 1ère étape : Fix Navipromo version 4.1.1 commencé le 20/01/2012 19:36:20,53 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! Outil exécuté depuis C:\navilog1 Mise à jour le 05.11.2011 à 20h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
Nettoyage exécuté au redémarrage de l'ordinateur
sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok
| |||||||
Petit astucien | il me remet le meme message que tout à l'heure à 61% !! Donc il n'ira pas plus loin, à mon avis !! | |||||||
Grand Maître astucien | Bonsoir, A faire en mode sans échec après téléchargement. Combofix @+ | |||||||
Petit astucien | je fait une impression ecran avant et je me lance auparavant je fais une petite pause casse croute !! A tout de suite
| |||||||
Petit astucien | Question quand je passe en mode sans echec je choisis : avec reseau ou sans ? | |||||||
Grand Maître astucien | Bonsoir Fais sans réseau. @+ | |||||||
Petit astucien | Voilà le compte rendu ComboFix 12-01-19.02 - Le_Boss 20/01/2012 21:48:51.1.2 - x86 | |||||||
Petit astucien | J'ai refais un scan avec ZHPDiag dans la foulée. Même message : Argument incorrect pour l'encodage de date | |||||||
Petit astucien | Coucou, s'il y a encore quelqu'un je vous remercie de me dire pour la suite à donner ! @+
| |||||||
Petit astucien | Question : Pourquoi le gestionnaire internet orange se manifeste à chaque fois !! C'est agaçant à la fin !! Peut on le désactiver ? | |||||||
Petit astucien | a bientôt merci !
| |||||||
Petit astucien | bne nuit bientot !! J(espère................ | |||||||
Grand Maître astucien | Bonsoir, Il est inutile de t'impatienter, je suis bénévole et je peux prétendre à une vie privée un vendredi soir.
Combien as-tu d'antivirus installés ? AdwCleaner de Xplode sur ton bureau Fais un scan avec Malwarebytes Tu retenteras un rapport ZHPDiag après avoir télécharger un nouvel installeur. Bonne nuit. @+
Modifié par nardino le 21/01/2012 00:27 | |||||||
Petit astucien |
# AdwCleaner v1.407 - Rapport créé le 21/01/2012 à 08:49:13
Présent : Application Updater Bonjour, voilà le résultat de la 1ère épreuve @+
***** [Fichiers / Dossiers] ***** Dossier Présent : C:\Documents and Settings\All Users\Application Data\Babylon ***** [Registre] ***** [*] Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT2124875 ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Le registre ne contient aucune entrée illégitime. ************************* AdwCleaner[R1].txt - [11502 octets] - [21/01/2012 08:49:13] ########## EOF - C:\AdwCleaner[R1].txt - [11631 octets] ########## | |||||||
Petit astucien | Bonjour, alors j'ai essayé de passer en mode sans echec le Combofix.exe. Super il se lance jusqu'à étape 50 et la horreur un message du genre grep.3XE a rencontré 1 problème et va fermer. Grr.. Ok !! Je redémarre et lance Malwarebytes, il démarre super !! 10 secondes après micro coupure. Grr.... Alors là je suis scotché. Je m'excuse j'ai des obligations, je vais revenir en début d'après midi. A tout de suite
@+ | |||||||
Maître astucien | nardino a écrit : bonjour, 3 fois lui a été dit de transférer son sujet et non d'en ouvrir un autre. clbugnot lui a donné le mode d'emploi pca l'a locké, mais aurait dû faire le transfert du 1er sujet en même temps erreur de tempo @+ | |||||||
Grand Maître astucien | Bonjour, Tu n'as pas bien lu ce qui t'a été demandé. Il faut choisir l'option Suppression avec ADwCleaner. @+ | |||||||
Petit astucien | Bonsoir, avant toute chose je tiens à m'excuser auprès de Nardino c'est la 1ère fois que je chope une m.... et la j'avoue être un peu dépassé et jsi e n'ai pas respecté l'ordre des choses, j'en suis désolé !! D'autant qu'à chaque fois que je veux transmettre une info, j'ai une micro coupure, j'espère juste que cette info va passer ! Merci de votre aide en tout cas
# AdwCleaner v1.407 - Rapport créé le 22/01/2012 à 20:34:40
-\\ Internet Explorer v8.0.6001.18702 [OK] Le registre ne contient aucune entrée illégitime. ************************* AdwCleaner[R1].txt - [11633 octets] - [21/01/2012 08:49:13] ************************* Dossier Temporaire : 4 dossier(s) et 2 fichier(s) supprimés ########## EOF - C:\AdwCleaner[S3].txt - [1298 octets] ########## | |||||||
Petit astucien | Pour répondre à la question du locké !! Alors là, franchement mystère ? Je ne saurai le refaire. Vraiment désolé !! | |||||||
Grand Maître astucien | Bonsoir, C'est ce rapport que je voudrais voir : AdwCleaner[S1].txt - [12122 octets] - [22/01/2012 19:42:51] @+ | |||||||
Petit astucien | Bonsoir,
# AdwCleaner v1.407 - Rapport crÚÚ le 23/01/2012 Ó 20:42:30
# Mis Ó jour le 18/01/2012 par Xplode
# SystÞme d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Le_Boss - NOM-BB6702A456C (Administrateur)
# ExÚcutÚ depuis : C:\Documents and Settings\Le_Boss\Bureau\adwcleaner.exe
# Option [Suppression]
***** [Services] *****
***** [Fichiers / Dossiers] *****
***** [Registre] *****
***** [Navigateurs] *****
-\\ Internet Explorer v8.0.6001.18702
[OK] Le registre ne contient aucune entrÚe illÚgitime.
*************************
AdwCleaner[R1].txt - [11633 octets] - [21/01/2012 08:49:13]
AdwCleaner[R2].txt - [11694 octets] - [22/01/2012 01:41:07]
AdwCleaner[R3].txt - [11755 octets] - [22/01/2012 19:42:10]
AdwCleaner[R4].txt - [11816 octets] - [22/01/2012 19:42:35]
AdwCleaner[S1].txt - [12122 octets] - [22/01/2012 19:42:51]
AdwCleaner[S2].txt - [0 octets] - [22/01/2012 19:49:16]
AdwCleaner[R5].txt - [1084 octets] - [22/01/2012 19:53:40]
AdwCleaner[R6].txt - [1145 octets] - [22/01/2012 20:09:40]
AdwCleaner[S3].txt - [1299 octets] - [22/01/2012 20:34:40]
AdwCleaner[R7].txt - [1265 octets] - [23/01/2012 20:41:21]
AdwCleaner[S4].txt - [1198 octets] - [23/01/2012 20:42:30]
*************************
Dossier Temporaire : 3 dossier(s) et 11 fichier(s) supprimÚs
########## EOF - C:\AdwCleaner[S4].txt - [1419 octets] ##########
| |||||||
Petit astucien | Bonsoir,
quand je vous ai envoyÚ le rapport, l'explorer me dit que msimn.exe a rencontrÚ un problÞme, pour info !!
DÚsolÚ pour mon silence, les micros coupures constantes m'ont dÚcouragÚs Ó la fin et j'ai baissÚ les bras.
Merci beaucoup pour votre aide cependant ! | |||||||
Petit astucien | Le rapport il fait 34 pages,
je l'envoi par petits paquets pour Ûtre s¹r !!
Rapport de ZHPDiag v1.28.313 par Nicolas Coolman, Update du 18/01/2012
Run by Le_Boss at 23/01/2012 21:34:01
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Nouvelle version disponible
---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702 (Defaut)
GCIE: Google Chrome
---\\ Windows Product Information
~ Langage: Franþais
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK
---\\ System Information
~ Processor: x86 Family 15 Model 4 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1022 MB (62% free)
System Restore: ActivÚ (Enable)
System drive C: has 77 GB (65%) free of 116 GB
---\\ Logged in mode
~ Computer Name: NOM-BB6702A456C
~ User Name: Le_Boss
~ All Users Names: SUPPORT_388945a0, Le_Boss, HelpAssistant, Camille, ASPNET, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\Le_Boss\Application Data\
~ %Desktop% : C:\Documents and Settings\Le_Boss\Bureau\
~ %Favorites% : C:\Documents and Settings\Le_Boss\Favorites\
~ %LocalAppData% : C:\Documents and Settings\Le_Boss\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Le_Boss\Menu DÚmarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 77 Go of 116 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 109 Go of 111 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 6 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Hard drive, Flash drive, Thumb drive (Free 212 Go of 298 Go)
K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
L:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particuliÞre de fichiers gÚnÚriques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - ExÚcuter une DLL en tant qu'application.) (.14/04/2008 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.B0DF02C2326381D64149F3EEFAE5E09D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.04/11/2011 - 20:13:29.) -- C:\WINDOWS\system32\wininet.dll [916992]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallÞle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de clichÚ instantanÚ du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachÚs (CachÚ/Total)
~ Mes images (My Pictures) : 6/8
~ Mes musiques (My Musics) : 16/29
~ Mes Videos (My Videos) : 1/6
~ Mes Favoris (My Favorites) : Non accessible (Not found)
~ Mes Documents (My Documents) : 26/173
~ Mon Bureau (My Desktop) : 10/254
~ Menu demarrer (Programs) : 5/28
~ Scan Hidden Files in 00mn 00s
| |||||||
Petit astucien | Suite
---\\ Processus lancÚs
[MD5.1D8D19A29E695BDC07F1D4E7C90D1CAC] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [494424] [PID.]
[MD5.6416F9B6B220F0A890525C38235AFAD7] - (.LSI Corporation - LSI Soft Modem Call Progress Service.) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336] [PID.]
[MD5.F832F1505AD8B83474BD9A5B1B985E01] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [PID.]
[MD5.F5CF53D41F5A6B9D66B8C49C2DE43064] - (.IObit - IObit Security 360.) -- C:\Program Files\IObit\IObit Security 360\IS360srv.exe [312152] [PID.]
[MD5.EFEF22B9577E5051057FDE1AE381B50C] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [92592] [PID.]
[MD5.CCEA2F6FD3ECE0833F9A404CFF60DE5F] - (.Google Inc. - Google Quick Search Box.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [126976] [PID.1940]
[MD5.0AEE5668EB59912F32FF245BFA72465F] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe [421888] [PID.1296]
[MD5.095E53531F747F5C47B5E2018FE4EA9E] - (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [619352] [PID.2016]
[MD5.E9257AE2500A3C8272B6C32A1329DAA3] - (.France Telecom SA - Pas de description.) -- C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\2\AlertModule.exe [90112] [PID.3052]
[MD5.12902A626CAE9F362AAE39EF1FC79E87] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\systray\systrayapp.exe [94208] [PID.1684]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE [638816] [PID.692]
[MD5.ED570E740CB5E987E8BCDB1EA393C3E2] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2210304] [PID.2456]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]
~ Scan Processes Running in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=12.0.1.633] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=12.0.1.633] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=12.0.1.633] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videos
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=12.0.1.633] - (.RealNetworks, Inc. - 12.0.1.633.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, DÚmarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19165 (longhorn_ie8_gdr.111021-1715)) -- C:\WINDOWS\system32\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 1
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordP
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} ClÚ orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications dÚmarrÚes par registre & par dossier (O4)
O4 - HKLM\..\Run: [Google Quick Search Box] . (.Google Inc. - Google Quick Search Box.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
O4 - HKUS\S-1-5-21-1938042078-2032054060-1063180830-1010\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1938042078-2032054060-1063180830-1010\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1938042078-2032054060-1063180830-1010\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Installation du Contr¶le Parental.lnk . (.InstallShield Software Corporation.) -- C:\Program Files\Securitoo\Contr¶le Parental\Controle_parental.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Lanceur de tÔches Microsoft Works.lnk . (.Microsoft« Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Medion Info Display.LNK . (.Dritek System Inc..) -- C:\Program Files\Medion Info Display\MdionLCM.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Excel.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft PowerPoint.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Nero Recode SE.lnk . (.Ahead Software AG.) -- C:\Program Files\Ahead\Nero Recode\Recode.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Serif DrawPlus 3.0.lnk . (.Serif, Inc..) -- D:\Mes documents Patrick\Drawplus.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Visionneuse Journal Windows.lnk . (.InstallShield Software Corp..) -- C:\WINDOWS\Installer\{43DCF766-6838-4F9A-8C91-D92DA586DFA7}\_C68C351F090F4EF39AFB6B7B54014C9E.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Installation du Contr¶le Parental.lnk . (.InstallShield Software Corporation.) -- C:\Program Files\Securitoo\Contr¶le Parental\Controle_parental.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Lanceur de tÔches Microsoft Works.lnk . (.Microsoft« Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Medion Info Display.LNK . (.Dritek System Inc..) -- C:\Program Files\Medion Info Display\MdionLCM.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Excel.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft PowerPoint.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Nero Recode SE.lnk . (.Ahead Software AG.) -- C:\Program Files\Ahead\Nero Recode\Recode.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Serif DrawPlus 3.0.lnk . (.Serif, Inc..) -- D:\Mes documents Patrick\Drawplus.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu DÚmarrer\Programmes\Visionneuse Journal Windows.lnk . (.InstallShield Software Corp..) -- C:\WINDOWS\Installer\{43DCF766-6838-4F9A-8C91-D92DA586DFA7}\_C68C351F090F4EF39AFB6B7B54014C9E.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Le_Boss\Menu DÚmarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Camille\Menu DÚmarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Assistance Ó distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu DÚmarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 00s
---\\ Lignes supplÚmentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
O8 - Extra context menu item: Rechercher sur le Web - (.not file.) - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situÚs sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- ClÚ orpheline
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab
O16 - DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} () - http://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129731383765
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACtrl.cab
~ Scan Objets ActiveX in 00mn 00s
| |||||||
Petit astucien | suite
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B89E35B-806D-4105-AB6A-B78C2AD8F859}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9B89E35B-806D-4105-AB6A-B78C2AD8F859}: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CS2\Services\Tcpip\..\{9B89E35B-806D-4105-AB6A-B78C2AD8F859}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contr¶le ActiveX pour le flux vidÚo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft« InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft« InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft« InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contr¶le ActiveX pour le flux vidÚo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
~ Scan Protocole Additionnel in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clÚs Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent rÚseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de rÚception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de rÚception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de rÚception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de rÚception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de rÚception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s
---\\ ClÚ de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll
~ Scan SSODL in 00mn 00s
---\\ ClÚ de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - BibliothÞque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non dÚsactivÚs (O23)
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) . (.IObit - Advanced SystemCare Service.) - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IS360service (IS360service) . (.IObit - IObit Security 360.) - C:\Program Files\IObit\IObit Security 360\is360srv.exe
O23 - Service: (PEVSystemStart) . (...) - C:\ComboFix\pev.3XE" EXEC \i PEV -rtd C:\* -output:"C:\ComboFix\temp2401" (.not file.)
O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
~ Scan Services in 00mn 00s
---\\ EnumÚration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ TÔches planifiÚes en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ASC5_AutoClean.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ASC5_AutoUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-18.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1938042078-2032054060-1063180830-1007.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1938042078-2032054060-1063180830-1010.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-18.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1938042078-2032054060-1063180830-1007.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1938042078-2032054060-1063180830-1010.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SmartDefrag_Startup.job
~ Scan Scheduled Task in 00mn 00s
---\\ Composants installÚs (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise Ó jour de la version dÆInternet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire dÆinitialisation dÆInternet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_04\bin\RegUtils.dll
O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\SwDir.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Adobe Shockwave Director 10.4 - {233C1507-6A77-46A4-9443-F871F945D258} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\SwDir.dll
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire dÆinitialisation dÆInternet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (...) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11e.ocx
~ Scan Active Setup in 00mn 00s
---\\ Pilotes lancÚs au dÚmarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de pÚriphÚrique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de pÚriphÚrique sÚrie.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidÚo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (wceusbsh) . (.Microsoft Corporation - H¶te sÚrie USB Windows CE.) - C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
O41 - Driver: (avipbb) . (. - .) - C:\WINDOWS\system32\DRIVERS\avipbb.sys (.not file.)
O41 - Driver: (easdrv) . (. - .) - C:\WINDOWS\system32\DRIVERS\easdrv.sys (.not file.)
O41 - Driver: (epfwtdi) . (. - .) - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys (.not file.)
O41 - Driver: (ssmdrv) . (. - .) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (.not file.)
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 00s
| |||||||
Petit astucien | suite
---\\ Logiciels installÚs (O42)
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.1.1) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Advanced SystemCare 5 - (.IObit.) [HKLM] -- Advanced SystemCare 5_is1
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {2A981294-F14C-4F0F-9627-D793270922F8}
O42 - Logiciel: C-Media Card Reader Driver USB2.0 - (.Pas de propriÚtaire.) [HKLM] -- C-Media Card Reader Driver USB2.0
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Champ de recherche rapide Google - (.Google, Inc..) [HKLM] -- Quick Search Box
O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
O42 - Logiciel: Creatix V.92 Data Fax Modem - (.Pas de propriÚtaire.) [HKLM] -- Creatix V.92 Data Fax Modem
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1
O42 - Logiciel: FotoMix version 8.7.3 - (.Digital Photo Software.) [HKLM] -- {10A0255E-0B73-4397-AB4E-E3667EDA70E4}_is1
O42 - Logiciel: FoxTab PDF Creator - (.Pas de propriÚtaire.) [HKCU] -- FoxTab PDF Creator
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}
O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: IObit Security 360 - (.IObit.) [HKLM] -- IObit Security 360_is1
O42 - Logiciel: IObit Toolbar v4.9 - (.Spigot, Inc..) [HKLM] -- {AE613868-24C7-4f1f-A9C6-7B3B718ABDA5}
O42 - Logiciel: Iminent - (.Iminent.) [HKLM] -- {DD4CEACE-8B19-4B1C-AE82-DE0FC5787D4C}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: Learn2 Player (Uninstall Only) - (.Pas de propriÚtaire.) [HKLM] -- StreetPlugin
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriÚtaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: MSN - (.Pas de propriÚtaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Medion Info Display - (.Pas de propriÚtaire.) [HKLM] -- MedionVFD
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriÚtaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2656353) - (.Pas de propriÚtaire.) [HKLM] -- M2656353
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: Microsoft Photo 2006 Standard Edition - (.Microsoft Corporation.) [HKLM] -- PictureItPrem_v11
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Speech Recognition Engine 4.0 (English) - (.Pas de propriÚtaire.) [HKLM] -- MSCSR
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
O42 - Logiciel: Module de compatibilitÚ pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
O42 - Logiciel: Navigateur Orange - (.Pas de propriÚtaire.) [HKLM] -- {ORAHSS}.Browser
O42 - Logiciel: Nero Suite - (.Pas de propriÚtaire.) [HKLM] -- NeroMultiInstaller!UninstallKey
O42 - Logiciel: Orange - Logiciels Internet - (.Pas de propriÚtaire.) [HKLM] -- {ORAHSS}.UninstallSuite
O42 - Logiciel: Outil de tÚlÚchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PDFCreator - (.Frank Heind÷rfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Perfect Uninstaller v6.3.3.3 - (.www.PerfectUninstaller.com.) [HKLM] -- Perfect Uninstaller_is1
O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre sociÚtÚ.) [HKLM] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: PrintMaster« Deluxe 8.0 - (.Pas de propriÚtaire.) [HKLM] -- PrintMaster 8.0
O42 - Logiciel: Programme de gestion Camera de Logitech« - (.Pas de propriÚtaire.) [HKLM] -- QcDrv
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Serif DrawPlus 3.0 - (.Pas de propriÚtaire.) [HKLM] -- Serif DrawPlus 3.0
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
O42 - Logiciel: SkypeÖ 5.3 - (.Skype Technologies S.A..) [HKLM] -- {F1CECE09-7CBE-4E98-B435-DA87CDA86167}
O42 - Logiciel: Smart Defrag 2 - (.IObit.) [HKLM] -- Smart Defrag 2_is1
O42 - Logiciel: SweetIM Toolbar for Internet Explorer 4.3 - (.SweetIM Technologies Ltd..) [HKLM] -- {047B9A6A-21E7-45CF-8825-0A061EEF9B23}
O42 - Logiciel: SweetIM for Messenger 3.6 - (.SweetIM Technologies Ltd..) [HKLM] -- {0D5BBB2B-F044-46C3-877B-6A6BE1E08D19}
O42 - Logiciel: SÚlecteur d'installation de Microsoft Works 2006 - (.Pas de propriÚtaire.) [HKLM] -- Works2006Setup
O42 - Logiciel: TomTom HOME 2.8.2.2264 - (.TomTom.) [HKLM] -- TomTom HOME
O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Virtual Dreams - (.Pas de propriÚtaire.) [HKLM] -- Virtual Dreams
O42 - Logiciel: WinRAR archiver - (.Pas de propriÚtaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: WinZip 15.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240C0}
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
O42 - Logiciel: Windows Live Contr¶le parental - (.Microsoft Corporation.) [HKLM] -- {D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriÚtaire.) [HKLM] -- Windows Live OneCare safety scanner
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriÚtaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: WiseFixer 3.5 - (.FoxthSoft.) [HKLM] -- {900C2AB5-3F37-4F84-B58C-893FA5F42D7D}_is1
O42 - Logiciel: livebox - (.SAGEM.) [HKLM] -- {17342E3B-0818-4A6F-BFF8-99476605ADD6}
---\\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\America Online]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cyberlink]
[HKCU\Software\Digital Photo Software]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\IM]
[HKCU\Software\ImInstaller]
[HKCU\Software\InstallCore]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Lavalys]
[HKCU\Software\Macromedia]
[HKCU\Software\Mainconcept]
[HKCU\Software\Medion]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\ODBC]
[HKCU\Software\PDFCreator]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Serif]
[HKCU\Software\Skype]
[HKCU\Software\Sysinternals]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VSRevoGroup]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\WinZip Computing]
[HKCU\Software\X10]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Agere]
[HKLM\Software\Ahead]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Bunndle]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Chicony]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\EliaShim]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\GEAR Software]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IObit]
[HKLM\Software\ImInstaller]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Khronos]
[HKLM\Software\LEDPointer]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\Loader]
[HKLM\Software\Logitech]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\Metro Interactive]
[HKLM\Software\MicroQuill]
[HKLM\Software\Mircrosoft]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\Nico Mak Computing]
[HKLM\Software\ODBC]
[HKLM\Software\Orange]
[HKLM\Software\PDFCreator]
[HKLM\Software\Perenety]
[HKLM\Software\Perfect Uninstaller]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Protexis]
[HKLM\Software\RALINK]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\S3R521]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Sagem]
[HKLM\Software\Schlumberger]
[HKLM\Software\Serif]
[HKLM\Software\Skype]
[HKLM\Software\Swearware]
[HKLM\Software\SymNRT]
[HKLM\Software\Symantec]
[HKLM\Software\TomTom]
[HKLM\Software\Uniblue]
[HKLM\Software\VideoLAN]
[HKLM\Software\Voice]
[HKLM\Software\WebSupergoo]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wise Solutions]
[HKLM\Software\WiseFixer]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 10/09/2011 - 17:14:40 - [155,184] ----D- C:\Program Files\Adobe
O43 - CFD: 28/12/2011 - 17:11:12 - [209,665] ----D- C:\Program Files\Ahead
O43 - CFD: 16/01/2012 - 21:21:38 - [0] ----D- C:\Program Files\Antivir 2012
O43 - CFD: 17/01/2012 - 19:05:26 - [58,801] ----D- C:\Program Files\AVAST Software
O43 - CFD: 31/12/2010 - 17:45:58 - [0,588] ----D- C:\Program Files\Bonjour
O43 - CFD: 02/01/2012 - 15:03:18 - [4,137] ----D- C:\Program Files\CCleaner
O43 - CFD: 26/10/2005 - 23:08:00 - [1,127] ----D- C:\Program Files\Common Files
O43 - CFD: 28/12/2011 - 17:11:12 - [142,803] ----D- C:\Program Files\CyberLink
O43 - CFD: 10/12/2011 - 23:23:40 - [2,720] ----D- C:\Program Files\Digital Photo Software
O43 - CFD: 14/01/2012 - 21:59:38 - [90,776] ----D- C:\Program Files\DivX
O43 - CFD: 04/09/2008 - 21:59:56 - [0,403] ----D- C:\Program Files\DNA
O43 - CFD: 22/01/2012 - 19:42:56 - [414,714] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 16/03/2011 - 19:20:24 - [0,777] ----D- C:\Program Files\FreeApps
O43 - CFD: 28/10/2011 - 19:18:30 - [19,424] ----D- C:\Program Files\Gimp
O43 - CFD: 28/12/2011 - 17:27:02 - [104,790] ----D- C:\Program Files\Google
O43 - CFD: 29/07/2008 - 14:45:02 - [109,772] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 04/12/2007 - 17:57:14 - [409,775] ----D- C:\Program Files\Home Cinema
O43 - CFD: 01/12/2007 - 14:30:08 - [14,179] ----D- C:\Program Files\HP
O43 - CFD: 03/07/2008 - 11:04:28 - [0,003] ----D- C:\Program Files\Icone
O43 - CFD: 02/05/2009 - 13:43:58 - [37,351] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 19/10/2005 - 14:02:16 - [0,041] ----D- C:\Program Files\Intel
O43 - CFD: 14/12/2011 - 18:29:54 - [5,815] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 10/12/2011 - 00:28:06 - [125,782] ----D- C:\Program Files\IObit
O43 - CFD: 24/12/2011 - 19:18:42 - [1,138] ----D- C:\Program Files\IObit Toolbar
O43 - CFD: 19/10/2005 - 20:18:26 - [69,217] ----D- C:\Program Files\Java
O43 - CFD: 19/01/2012 - 19:32:32 - [6,499] ----D- C:\Program Files\Lavalys
O43 - CFD: 04/11/2005 - 11:47:30 - [0,679] ----D- C:\Program Files\Learn2.com
O43 - CFD: 03/07/2008 - 11:04:28 - [0,044] ----D- C:\Program Files\LETMIN
O43 - CFD: 24/10/2010 - 12:03:02 - [0,054] ----D- C:\Program Files\LSI SoftModem
O43 - CFD: 22/01/2012 - 11:12:08 - [0,077] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 28/10/2005 - 21:45:44 - [0,720] ----D- C:\Program Files\Medion Info Display
O43 - CFD: 27/09/2008 - 09:24:36 - [2,053] ----D- C:\Program Files\Messenger
O43 - CFD: 16/01/2012 - 22:11:02 - [0,783] ----D- C:\Program Files\Microsoft
O43 - CFD: 10/12/2011 - 18:33:58 - [115,999] ----D- C:\Program Files\Microsoft Digital Image 2006
O43 - CFD: 19/10/2005 - 12:54:00 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 28/02/2010 - 14:28:24 - [152,004] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 14/10/2011 - 16:20:06 - [36,633] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/02/2009 - 17:43:40 - [1,745] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 13/02/2009 - 17:44:40 - [2,087] ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 16/03/2011 - 19:50:42 - [120,295] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 04/12/2007 - 18:22:06 - [13,099] ----D- C:\Program Files\Microsoft Works Suite 2006
O43 - CFD: 13/08/2010 - 08:42:48 - [9,894] ----D- C:\Program Files\Movie Maker
O43 - CFD: 06/03/2009 - 00:46:08 - [0,025] ----D- C:\Program Files\MSBuild
O43 - CFD: 28/02/2010 - 14:28:02 - [38,094] ----D- C:\Program Files\MSECache
O43 - CFD: 31/12/2005 - 13:03:30 - [20,477] ----D- C:\Program Files\MSN
O43 - CFD: 19/10/2005 - 12:51:34 - [0] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 22/01/2012 - 21:49:34 - [0] ----D- C:\Program Files\musicMe
O43 - CFD: 20/01/2012 - 19:35:48 - [0] ----D- C:\Program Files\Navilog1
O43 - CFD: 27/09/2008 - 09:16:46 - [3,133] ----D- C:\Program Files\NetMeeting
O43 - CFD: 24/10/2010 - 12:05:30 - [54,377] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 19/10/2005 - 12:51:40 - [0,002] ----D- C:\Program Files\Online Services
O43 - CFD: 28/12/2011 - 17:11:12 - [171,160] ----D- C:\Program Files\Orange
O43 - CFD: 03/03/2007 - 22:20:12 - [0,545] ----D- C:\Program Files\Orange HSS
O43 - CFD: 03/03/2007 - 23:33:34 - [14,545] ----D- C:\Program Files\OrangeHSS
O43 - CFD: 16/03/2011 - 19:50:36 - [4,176] ----D- C:\Program Files\Outlook Express
O43 - CFD: 19/11/2011 - 15:49:34 - [40,054] ----D- C:\Program Files\PDFCreator
O43 - CFD: 12/08/2007 - 19:56:38 - [0,000] ----D- C:\Program Files\Perenety
O43 - CFD: 28/12/2011 - 17:11:12 - [19,336] ----D- C:\Program Files\Perfect Uninstaller
O43 - CFD: 21/04/2011 - 17:50:02 - [2,630] ----D- C:\Program Files\Photo Notifier and Animation Creator
O43 - CFD: 28/12/2011 - 17:11:12 - [72,787] ----D- C:\Program Files\QuickTime
O43 - CFD: 19/10/2005 - 19:34:32 - [69,759] ----D- C:\Program Files\RALINK
O43 - CFD: 27/03/2011 - 09:31:58 - [123,069] ----D- C:\Program Files\Real
O43 - CFD: 30/03/2007 - 22:26:02 - [39,209] ----D- C:\Program Files\Realtek
O43 - CFD: 06/03/2009 - 00:46:00 - [18,496] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 15/03/2011 - 21:35:30 - [1,096] ----D- C:\Program Files\RegCleaner
O43 - CFD: 10/07/2010 - 09:41:32 - [43,848] ----D- C:\Program Files\SAGEM
O43 - CFD: 22/08/2007 - 09:26:38 - [0,501] ----D- C:\Program Files\Secunia
O43 - CFD: 10/07/2010 - 09:40:56 - [36,633] ----D- C:\Program Files\Securitoo
O43 - CFD: 31/12/2005 - 15:24:22 - [4,473] ----D- C:\Program Files\Serif
O43 - CFD: 19/10/2005 - 12:52:38 - [0,001] ----D- C:\Program Files\Services en ligne
O43 - CFD: 04/08/2006 - 17:55:54 - [0,462] ----D- C:\Program Files\SiLabs
O43 - CFD: 09/04/2011 - 08:52:12 - [25,009] R---D- C:\Program Files\Skype
O43 - CFD: 19/08/2011 - 11:19:36 - [2,029] ----D- C:\Program Files\SpeedFan
O43 - CFD: 11/08/2007 - 10:00:34 - [819,376] ----D- C:\Program Files\TomTom
O43 - CFD: 27/07/2010 - 11:19:24 - [0,000] ----D- C:\Program Files\TomTom HOME
O43 - CFD: 27/07/2010 - 11:19:24 - [50,398] ----D- C:\Program Files\TomTom HOME 2
O43 - CFD: 27/07/2010 - 11:19:24 - [0,021] ----D- C:\Program Files\TomTom International B.V
O43 - CFD: 19/10/2005 - 12:56:30 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 19/10/2005 - 15:23:46 - [1,026] ----D- C:\Program Files\USB Wireless Keyboard Driver
O43 - CFD: 06/11/2009 - 20:03:08 - [101,280] ----D- C:\Program Files\VideoLAN
O43 - CFD: 01/01/2010 - 18:00:00 - [6,453] ----D- C:\Program Files\VS Revo Group
O43 - CFD: 10/07/2010 - 08:42:16 - [8,451] ----D- C:\Program Files\Wanadoo
O43 - CFD: 24/05/2006 - 21:28:06 - [0,000] ----D- C:\Program Files\Winamp
O43 - CFD: 19/10/2005 - 12:57:58 - [1,996] ----D- C:\Program Files\Windows Journal Viewer
O43 - CFD: 15/01/2012 - 14:19:54 - [132,568] ----D- C:\Program Files\Windows Live
O43 - CFD: 28/12/2011 - 17:11:12 - [17,749] ----D- C:\Program Files\Windows Live Safety Center
O43 - CFD: 13/02/2009 - 17:40:04 - [0,234] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 12/10/2007 - 22:47:02 - [0,005] ----D- C:\Program Files\Windows Media Connect
O43 - CFD: 12/10/2007 - 22:57:16 - [3,415] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 28/12/2011 - 17:11:12 - [8,345] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 27/09/2008 - 09:16:42 - [1,310] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/03/2011 - 19:50:26 - [3,228] ----D- C:\Program Files\WinRAR
O43 - CFD: 01/11/2011 - 11:39:42 - [31,486] ----D- C:\Program Files\WinZip
O43 - CFD: 15/01/2012 - 13:29:26 - [31,415] ----D- C:\Program Files\WiseFixer
O43 - CFD: 19/10/2005 - 12:54:00 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 23/01/2012 - 21:34:30 - [10,108] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 26/10/2005 - 23:08:00 - [1,127] ----D- C:\Program Files\Common Files\X10
O43 - CFD: 19/01/2012 - 19:01:22 - [3,144] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 10/09/2011 - 17:14:38 - [30,069] ----D- C:\Program Files\Fichiers Communs\Adobe AIR
O43 - CFD: 19/10/2005 - 20:15:20 - [28,747] ----D- C:\Program Files\Fichiers Communs\Ahead
O43 - CFD: 19/10/2005 - 20:44:56 - [0,082] ----D- C:\Program Files\Fichiers Communs\Designer
O43 - CFD: 21/08/2010 - 18:16:38 - [22,904] ----D- C:\Program Files\Fichiers Communs\DivX Shared
O43 - CFD: 03/03/2007 - 22:18:10 - [9,077] ----D- C:\Program Files\Fichiers Communs\France Telecom
O43 - CFD: 11/03/2007 - 18:38:16 - [0,436] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
O43 - CFD: 29/07/2008 - 14:40:10 - [2,264] ----D- C:\Program Files\Fichiers Communs\HP
O43 - CFD: 04/11/2005 - 11:41:54 - [13,713] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 19/10/2005 - 20:18:00 - [28,145] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 19/10/2005 - 20:16:32 - [3,804] ----D- C:\Program Files\Fichiers Communs\LightScribe
O43 - CFD: 16/03/2011 - 19:50:38 - [19,331] ----D- C:\Program Files\Fichiers Communs\Logitech
O43 - CFD: 16/06/2011 - 20:29:46 - [173,632] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 19/10/2005 - 12:52:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 19/10/2005 - 20:16:02 - [2,154] ----D- C:\Program Files\Fichiers Communs\Nero
O43 - CFD: 04/11/2005 - 11:47:22 - [2,151] ----D- C:\Program Files\Fichiers Communs\Nullsoft
O43 - CFD: 29/12/2011 - 12:11:28 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 27/03/2011 - 09:31:22 - [0,099] ----D- C:\Program Files\Fichiers Communs\Real
O43 - CFD: 16/03/2011 - 19:50:30 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 19/10/2005 - 14:48:26 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 27/09/2008 - 09:27:50 - [12,950] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 13/02/2009 - 17:19:18 - [0] ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 16/04/2008 - 14:32:24 - [36,318] -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
O43 - CFD: 03/01/2009 - 19:05:54 - [21,466] ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
O43 - CFD: 27/03/2011 - 09:31:54 - [0,336] ----D- C:\Program Files\Fichiers Communs\xing shared
O43 - CFD: 10/09/2011 - 17:13:58 - [20,767] ----D- C:\Documents and Settings\Le_Boss\Application Data\Adobe
O43 - CFD: 04/07/2010 - 18:19:22 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\AdobeUM
O43 - CFD: 22/08/2010 - 09:09:08 - [0,001] ----D- C:\Documents and Settings\Le_Boss\Application Data\Ahead
O43 - CFD: 10/09/2011 - 17:14:48 - [0,009] ----D- C:\Documents and Settings\Le_Boss\Application Data\AirDownloaderMain.447DBE4B8352E60C6628BA362FFE0160304ED2DC.1
O43 - CFD: 31/12/2005 - 00:58:30 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\AOL
O43 - CFD: 08/03/2011 - 18:50:34 - [3,860] ----D- C:\Documents and Settings\Le_Boss\Application Data\Apple Computer
O43 - CFD: 19/11/2011 - 15:50:08 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\BabylonToolbar
O43 - CFD: 28/10/2005 - 21:40:40 - [0,244] ----D- C:\Documents and Settings\Le_Boss\Application Data\CyberLink
O43 - CFD: 21/08/2010 - 18:42:50 - [0,255] ----D- C:\Documents and Settings\Le_Boss\Application Data\DivX
O43 - CFD: 29/12/2011 - 14:59:40 - [0,000] ----D- C:\Documents and Settings\Le_Boss\Application Data\dvdcss
O43 - CFD: 12/06/2010 - 09:53:06 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Google
O43 - CFD: 27/11/2011 - 11:02:58 - [0,000] ----D- C:\Documents and Settings\Le_Boss\Application Data\gtk-2.0
O43 - CFD: 10/07/2010 - 08:23:34 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Help
O43 - CFD: 19/10/2005 - 12:53:58 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Identities
O43 - CFD: 18/01/2012 - 22:11:02 - [0,586] ----D- C:\Documents and Settings\Le_Boss\Application Data\Image Zone Express
O43 - CFD: 10/07/2010 - 09:41:18 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\InstallShield
O43 - CFD: 18/12/2011 - 00:33:12 - [15,399] ----D- C:\Documents and Settings\Le_Boss\Application Data\IObit
O43 - CFD: 04/11/2005 - 10:17:20 - [4,956] ----D- C:\Documents and Settings\Le_Boss\Application Data\Macromedia
O43 - CFD: 29/11/2010 - 22:05:40 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Malwarebytes
O43 - CFD: 27/03/2011 - 09:46:04 - [32,056] -S--D- C:\Documents and Settings\Le_Boss\Application Data\Microsoft
O43 - CFD: 27/07/2010 - 11:19:22 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Mozilla
O43 - CFD: 09/07/2010 - 22:12:16 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\Orange
O43 - CFD: 31/12/2011 - 14:02:28 - [50,328] ----D- C:\Documents and Settings\Le_Boss\Application Data\Real
O43 - CFD: 15/10/2011 - 13:53:06 - [2,009] ----D- C:\Documents and Settings\Le_Boss\Application Data\Skype
O43 - CFD: 17/03/2011 - 22:17:52 - [0,008] ----D- C:\Documents and Settings\Le_Boss\Application Data\skypePM
O43 - CFD: 27/10/2005 - 00:15:06 - [0,003] ----D- C:\Documents and Settings\Le_Boss\Application Data\Sun
O43 - CFD: 15/07/2010 - 16:37:22 - [10,870] ----D- C:\Documents and Settings\Le_Boss\Application Data\TomTom
O43 - CFD: 30/07/2011 - 21:40:10 - [1,017] ----D- C:\Documents and Settings\Le_Boss\Application Data\vlc
O43 - CFD: 28/08/2010 - 10:36:28 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\WinRAR
O43 - CFD: 04/11/2005 - 11:47:30 - [0] ----D- C:\Documents and Settings\Le_Boss\Application Data\You've Got Pictures Screensaver
O43 - CFD: 10/09/2011 - 17:13:52 - [153,979] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Adobe
O43 - CFD: 04/11/2005 - 11:58:32 - [1,860] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Ahead
O43 - CFD: 31/12/2010 - 17:46:32 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Apple
O43 - CFD: 08/03/2011 - 18:50:34 - [42,190] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Apple Computer
O43 - CFD: 25/10/2010 - 17:16:34 - [0,003] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 16/10/2011 - 08:59:22 - [285,015] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Google
O43 - CFD: 10/07/2010 - 08:23:34 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Help
O43 - CFD: 12/06/2010 - 09:44:40 - [-1988,515] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Identities
O43 - CFD: 21/04/2011 - 18:04:04 - [26,550] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\IM
O43 - CFD: 17/01/2012 - 18:50:36 - [4,879] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Microsoft
O43 - CFD: 27/12/2010 - 23:36:06 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\PackageAware
O43 - CFD: 15/01/2012 - 14:02:02 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\PCHealth
O43 - CFD: 19/11/2011 - 16:07:24 - [0,003] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\PC_Drivers_Headquarters
O43 - CFD: 16/03/2011 - 19:55:12 - [0,017] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\PowerCinema
O43 - CFD: 25/04/2011 - 07:59:48 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\Temp
O43 - CFD: 27/07/2010 - 11:19:22 - [2,016] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\TomTom
O43 - CFD: 01/11/2011 - 11:39:46 - [0,251] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\WinZip
O43 - CFD: 19/10/2005 - 19:32:32 - [0] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 19/10/2005 - 20:17:48 - [11,148] ----D- C:\Documents and Settings\Le_Boss\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150040}
~ Scan Program Folder in 00mn 22s
---\\ Derniers fichiers modifiÚs ou crÚes sous Windows et System32 (O44)
O44 - LFC:[MD5.350945DC7B5B80598936B7344A4E88BA] - 23/01/2012 - 20:46:04 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [275167]
O44 - LFC:[MD5.674B2F816A5D402B6B5F229B717D43BD] - 23/01/2012 - 20:44:38 ---A- . (...) -- C:\WINDOWS\wiadebug.log [157]
O44 - LFC:[MD5.28D5F961D8DFDA9C374C9BC4D9529D32] - 23/01/2012 - 20:44:06 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 23/01/2012 - 20:43:56 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.E69620A43A1C27DDDC20A9290B7C5A05] - 23/01/2012 - 20:42:56 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32558]
O44 - LFC:[MD5.EF0057720237941E5B82B50861FD5D13] - 23/01/2012 - 20:42:44 ---A- . (...) -- C:\AdwCleaner[S4].txt [1420]
O44 - LFC:[MD5.B533F5D5025E68E5459B0818A4B5E72D] - 23/01/2012 - 20:41:22 ---A- . (...) -- C:\AdwCleaner[R7].txt [1265]
O44 - LFC:[MD5.A8888EF947E1A1248D189169DA5770F5] - 22/01/2012 - 21:17:24 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [202]
O44 - LFC:[MD5.B2D8ACC5DBCE5B144C9E792294E797B1] - 22/01/2012 - 20:34:43 ---A- . (...) -- C:\AdwCleaner[S3].txt [1299]
O44 - LFC:[MD5.381F4966D4645C353BC5CF0333546693] - 22/01/2012 - 20:22:35 ---A- . (...) -- C:\TB.txt [1826]
O44 - LFC:[MD5.2BA49EC25F43943A005784B7E21BAFDC] - 22/01/2012 - 20:09:41 ---A- . (...) -- C:\AdwCleaner[R6].txt [1145]
O44 - LFC:[MD5.186DA8E0D7E5173D24DADDFE18B296F1] - 22/01/2012 - 19:58:51 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.E553735F2EA25220B3D2E9654C45BD7B] - 22/01/2012 - 19:53:41 ---A- . (...) -- C:\AdwCleaner[R5].txt [1084]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/01/2012 - 19:53:36 ---A- . (...) -- C:\AdwCleaner[S2].txt [0]
O44 - LFC:[MD5.B155C74B98CC2B418D160ED479F18095] - 22/01/2012 - 19:42:56 ---A- . (...) -- C:\AdwCleaner[S1].txt [12122]
O44 - LFC:[MD5.33A87DFF938E06E2A2F432322FFA2EBC] - 22/01/2012 - 19:42:36 ---A- . (...) -- C:\AdwCleaner[R4].txt [11816]
O44 - LFC:[MD5.4708A771687FD09699C00DCB696AC36F] - 22/01/2012 - 19:42:11 ---A- . (...) -- C:\AdwCleaner[R3].txt [11755]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/01/2012 - 17:46:09 ---A- . (...) -- C:\WINDOWS\system32\drivers\lvuvc.hs [0]
O44 - LFC:[MD5.AABF38BF3EE7F1FB33315DE19E1B4BE6] - 22/01/2012 - 01:41:08 ---A- . (...) -- C:\AdwCleaner[R2].txt [11694]
O44 - LFC:[MD5.F355F017B65EF3034A72F7FE19BBA4D0] - 21/01/2012 - 08:49:14 ---A- . (...) -- C:\AdwCleaner[R1].txt [11633]
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 20/01/2012 - 21:54:17 ---A- . (...) -- C:\WINDOWS\system.ini [227]
O44 - LFC:[MD5.457927C1A96BF8ABE05C3587CD055B1B] - 20/01/2012 - 21:47:40 RSHA- . (...) -- C:\boot.ini [337]
O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 20/01/2012 - 21:13:28 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [60416]
O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 20/01/2012 - 21:13:28 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [518144]
O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 20/01/2012 - 21:13:28 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [406528]
O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 20/01/2012 - 21:13:28 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480]
O44 - LFC:[MD5.F60C557D28128BED0ACB58F99119B105] - 20/01/2012 - 19:45:53 ---A- . (...) -- C:\cleannavi.txt [1397]
O44 - LFC:[MD5.3088EC5001BD10D2C5EDDE0024AEFF21] - 17/01/2012 - 19:11:33 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.AD73544E7129E6690842983BAD1E78F9] - 15/01/2012 - 10:21:23 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1044412]
O44 - LFC:[MD5.8213576AE9EA83FBA9654FC1317FE34E] - 15/01/2012 - 10:21:23 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [78382]
O44 - LFC:[MD5.DA1AEAFD60D8AF869E15402CD08C47D3] - 15/01/2012 - 10:21:23 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [94546]
O44 - LFC:[MD5.4C17BC95D47B81633D19DF18F1C44AB9] - 15/01/2012 - 10:21:23 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [416978]
O44 - LFC:[MD5.04A0F1B3FBD7A1492326F702BEE5C99B] - 15/01/2012 - 10:21:23 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [485014]
O44 - LFC:[MD5.0DA4B0BB0D90CB9E59CC2B80A560C92B] - 05/07/2011 - 16:51:23 ---A- . (...) -- C:\Boot.bak [221]
O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 26/06/2011 - 07:45:56 ---A- . (...) -- C:\WINDOWS\PEV.exe [256000]
O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\WINDOWS\MBR.exe [208896]
O44 - LFC:[MD5.48C65662EC81FBCAA110509F50C51497] - 03/08/2004 - 23:00:08 RSHA- . (...) -- C:\cmldr [263488]
O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\WINDOWS\grep.exe [80412]
O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\WINDOWS\sed.exe [98816]
O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\WINDOWS\zip.exe [68096]
~ Scan Files in 00mn 05s
---\\ Derniers fichiers crÚÚs dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.04F1D93BD497982ECD494E1D2F341875] - 22/01/2012 - 13:10:37 ---A- - C:\WINDOWS\Prefetch\PEV.3XE-358EBDB6.pf
O45 - LFCP:[MD5.DC76E5960D79DD84AC2757475B77ADFC] - 22/01/2012 - 13:10:38 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-0A31FE70.pf
O45 - LFCP:[MD5.BB63129244A7DC8163FB1830032F60FE] - 22/01/2012 - 13:10:39 ---A- - C:\WINDOWS\Prefetch\SWREG.3XE-20CC4D60.pf
O45 - LFCP:[MD5.EE4C125B2C448CC1767C48823B146479] - 22/01/2012 - 13:10:40 ---A- - C:\WINDOWS\Prefetch\GREP.3XE-0FD7DFD4.pf
O45 - LFCP:[MD5.0A983FAB0CF9F1F2D3D08712CF4CCC7B] - 22/01/2012 - 17:59:59 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2138A4AF.pf
O45 - LFCP:[MD5.48A2F9A47AC41A6D9DC4F2EA4B541292] - 22/01/2012 - 18:00:12 ---A- - C:\WINDOWS\Prefetch\SETUP_AV_FREE.EXE-2C2A48FC.pf
O45 - LFCP:[MD5.4E8A30193CED5BB2646F29BF3F56FFF0] - 22/01/2012 - 18:10:31 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf
O45 - LFCP:[MD5.90E32715A99438D49E57F13FB56B033C] - 22/01/2012 - 18:45:41 ---A- - C:\WINDOWS\Prefetch\TASKSCHEDULE.EXE-24838F69.pf
O45 - LFCP:[MD5.C24A1840A8214B5259CA9E68A2A1CA52] - 22/01/2012 - 18:47:42 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2576181F.pf
O45 - LFCP:[MD5.25C20D60E7A9AF19DB5FF5D6E44398E4] - 22/01/2012 - 19:37:24 ---A- - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf
O45 - LFCP:[MD5.993ECE03B3BC9C28450BFFED4BD14486] - 22/01/2012 - 19:37:30 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-46702906.pf
O45 - LFCP:[MD5.4B8FDECEADD8BB693D027E667F9C3990] - 22/01/2012 - 19:56:36 ---A- - C:\WINDOWS\Prefetch\LADS.EXE-06335087.pf
O45 - LFCP:[MD5.34AE660EE9D8CC73295AA364F3ECACA6] - 22/01/2012 - 19:56:39 ---A- - C:\WINDOWS\Prefetch\SIGCHECK.EXE-306CABDB.pf
O45 - LFCP:[MD5.0ABA48588B17F589811B1A8C22FF383D] - 22/01/2012 - 19:58:49 ---A- - C:\WINDOWS\Prefetch\NSLOOKUP.EXE-160B1221.pf
O45 - LFCP:[MD5.80894B2556B1D315C4A227F2E6C6A423] - 22/01/2012 - 19:58:50 ---A- - C:\WINDOWS\Prefetch\MBR.EXE-313604BE.pf
O45 - LFCP:[MD5.AD969BA659AA3F510E38299310870151] - 22/01/2012 - 19:58:51 ---A- - C:\WINDOWS\Prefetch\MBRCHECK.EXE-2B10ECF1.pf
O45 - LFCP:[MD5.81274C8218410AF6AE3A87DCF5CDFBAE] - 22/01/2012 - 20:21:23 ---A- - C:\WINDOWS\Prefetch\TOOLBARSD.EXE-1E0E4A32.pf
O45 - LFCP:[MD5.5AE6988D037ED5AE8EF813D336C6E8CB] - 22/01/2012 - 20:21:41 ---A- - C:\WINDOWS\Prefetch\SETPATH.EXE-38F85A52.pf
O45 - LFCP:[MD5.24281A1663F5000210210BAAFE1D7A50] - 22/01/2012 - 20:21:51 ---A- - C:\WINDOWS\Prefetch\OSV.EXE-1A4D2F4B.pf
O45 - LFCP:[MD5.966DAF9FD44693AC4710476401044A6F] - 22/01/2012 - 20:21:51 ---A- - C:\WINDOWS\Prefetch\WSCRIPT.EXE-32960AB9.pf
O45 - LFCP:[MD5.913D868410CBCFEC4FCAF5C81DBE4A5E] - 22/01/2012 - 20:22:10 ---A- - C:\WINDOWS\Prefetch\MODE.COM-31685BAE.pf
O45 - LFCP:[MD5.8B1EE9CDD07FE014661DEA69E238A945] - 22/01/2012 - 20:22:11 ---A- - C:\WINDOWS\Prefetch\SC.EXE-012262AF.pf
O45 - LFCP:[MD5.1B170F733A104168F51CD808676C8B21] - 22/01/2012 - 20:22:17 ---A- - C:\WINDOWS\Prefetch\CHCP.COM-18156052.pf
O45 - LFCP:[MD5.21E7B9AC55721F8063C9F4156FED1877] - 22/01/2012 - 20:22:17 ---A- - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf
O45 - LFCP:[MD5.79D97D2856998F68730B1F742C4A6C0B] - 22/01/2012 - 20:22:17 ---A- - C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf
O45 - LFCP:[MD5.A0A71CCAD1C627F65FC44EF048C76EAE] - 22/01/2012 - 20:22:26 ---A- - C:\WINDOWS\Prefetch\REG.EXE-0D2A95F7.pf
O45 - LFCP:[MD5.9EDC205F64573B4D8BB208FAC73E5E0F] - 22/01/2012 - 21:03:01 ---A- - C:\WINDOWS\Prefetch\WINWORD.EXE-29F5CB89.pf
O45 - LFCP:[MD5.B1E9E5111EA1931E48F55A7FC0DC549B] - 22/01/2012 - 21:17:26 ---A- - C:\WINDOWS\Prefetch\DIVX PLUS PLAYER.EXE-0AB59959.pf
O45 - LFCP:[MD5.EC588A05BCFB23A8AB32146172B687CC] - 22/01/2012 - 21:17:26 ---A- - C:\WINDOWS\Prefetch\DIVXUPDATE.EXE-24EAF9C6.pf
O45 - LFCP:[MD5.558AC73A6DA7BD9C8D2C53410E998273] - 22/01/2012 - 21:49:07 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf
O45 - LFCP:[MD5.FA0E8237B486BDD246B7D7E033364282] - 22/01/2012 - 21:49:07 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
O45 - LFCP:[MD5.D2F9EE23E8E5C33F8F7B5E4F25DB688E] - 22/01/2012 - 21:49:33 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf
O45 - LFCP:[MD5.9DCF4976DB5BBF041EA1AFE0A533F544] - 22/01/2012 - 21:52:22 ---A- - C:\WINDOWS\Prefetch\MSCONFIG.EXE-35E4DAE9.pf
O45 - LFCP:[MD5.4A091E607DC55F3C9BEF922353210E76] - 22/01/2012 - 21:58:16 ---A- - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf
O45 - LFCP:[MD5.238B206BA74C1D1BD09997B7003A373C] - 22/01/2012 - 22:00:13 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf
O45 - LFCP:[MD5.AFD4067DA39D7504903AFAEE2F3BDA2B] - 22/01/2012 - 22:49:37 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf
O45 - LFCP:[MD5.FEFEBF7D7B38352D34D69C4B1C0210B9] - 22/01/2012 - 22:49:50 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1F20A0D1.pf
O45 - LFCP:[MD5.87BCE0125EF23B603820060FAAE51E20] - 23/01/2012 - 19:51:13 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf
O45 - LFCP:[MD5.790BAECD1C9B0BF9BA39271E045BB8E8] - 23/01/2012 - 20:36:24 ---A- - C:\WINDOWS\Prefetch\Layout.ini
O45 - LFCP:[MD5.2C7BC7F07DEACA9E501D954072744232] - 23/01/2012 - 20:41:29 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER.EXE-3B4C4C1B.pf
O45 - LFCP:[MD5.344693867761B40A38F95DD7A2F7A080] - 23/01/2012 - 20:46:17 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
O45 - LFCP:[MD5.BDE5C0CDFC9376C35D63CE044313385F] - 23/01/2012 - 20:46:17 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-26322309.pf
O45 - LFCP:[MD5.26AB3F62184068D058225F3DC863B613] - 23/01/2012 - 20:46:17 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.D7B259094C6B2E225EBB3A05F69DA07B] - 23/01/2012 - 20:46:17 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
O45 - LFCP:[MD5.AA26D021304FDAAF4FE34BA9ED2E99BE] - 23/01/2012 - 20:46:26 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf
O45 - LFCP:[MD5.D283B0914C7F36466F195D88F776FD6E] - 23/01/2012 - 20:46:31 ---A- - C:\WINDOWS\Prefetch\GOOGLEQUICKSEARCHBOX.EXE-0A3FF7F0.pf
O45 - LFCP:[MD5.ADDCFD5438EBF1633EF7AD707AF74626] - 23/01/2012 - 20:46:38 ---A- - C:\WINDOWS\Prefetch\QTTASK.EXE-342507FB.pf
O45 - LFCP:[MD5.1B6C374CAF89F0719C3C8B431B2AD5AC] - 23/01/2012 - 20:46:39 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-3629C61D.pf
O45 - LFCP:[MD5.F4C8EFBD2DD30DCDA44FAB45292F90AC] - 23/01/2012 - 20:46:40 ---A- - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf
O45 - LFCP:[MD5.4706F0E358005E65AFC1EEDDE3CD171D] - 23/01/2012 - 20:46:41 ---A- - C:\WINDOWS\Prefetch\ASCTRAY.EXE-2509FB98.pf
O45 - LFCP:[MD5.11DC4F4EE4DE6011E8D6CFA4C758909E] - 23/01/2012 - 20:46:41 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf
O45 - LFCP:[MD5.9031F60E9B8E6E0D04928407B7F0C424] - 23/01/2012 - 20:47:03 ---A- - C:\WINDOWS\Prefetch\DELAYLOAD.EXE-305A10F1.pf
O45 - LFCP:[MD5.A525EA6BAAA02BBE284A700D933B6C96] - 23/01/2012 - 20:47:11 ---A- - C:\WINDOWS\Prefetch\ASCTOOLTIPS.EXE-2C017A23.pf
O45 - LFCP:[MD5.15F9CE740A77611664F9DC240A4804B1] - 23/01/2012 - 20:49:31 ---A- - C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf
O45 - LFCP:[MD5.44CAD06E2AA1CBB0B9A6B77B9EC1F17F] - 23/01/2012 - 20:51:13 ---A- - C:\WINDOWS\Prefetch\ALERTMODULE.EXE-06570574.pf
O45 - LFCP:[MD5.5D7AEBEB199ABA88E7154DCB72563DDF] - 23/01/2012 - 20:55:31 ---A- - C:\WINDOWS\Prefetch\CONNECTIVITYMANAGER.EXE-2A95C2B6.pf
O45 - LFCP:[MD5.D4334EE4838D1AFCD9FF1EFB768E3E6A] - 23/01/2012 - 20:55:31 ---A- - C:\WINDOWS\Prefetch\CORECOM.EXE-23570F6B.pf
O45 - LFCP:[MD5.0BA35550E0E41D980CB8B81050DCCA5A] - 23/01/2012 - 20:55:31 ---A- - C:\WINDOWS\Prefetch\DESKBOARD.EXE-04D11079.pf
O45 - LFCP:[MD5.057516AB93709FACE503AD4A693C9A2F] - 23/01/2012 - 20:55:31 ---A- - C:\WINDOWS\Prefetch\FTCOMMODULE.EXE-0B9BBC42.pf
O45 - LFCP:[MD5.3A10972A01438FC4231FAD8907FAB632] - 23/01/2012 - 20:55:33 ---A- - C:\WINDOWS\Prefetch\SYSTRAYAPP.EXE-2AA773D0.pf
O45 - LFCP:[MD5.00E85926EAD67BEADDB3755040DF8D5E] - 23/01/2012 - 20:55:34 ---A- - C:\WINDOWS\Prefetch\ORACONFIGRECOVER.EXE-1CFB1EA3.pf
O45 - LFCP:[MD5.762B59E8DF4EFC7B7A492E5AAE8F585A] - 23/01/2012 - 20:55:35 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
O45 - LFCP:[MD5.CC739262FDE3515889D25407AFAEF1B0] - 23/01/2012 - 21:03:07 ---A- - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf
O45 - LFCP:[MD5.14F61F35D4591B784A7AD8D55AD063C5] - 23/01/2012 - 21:11:07 ---A- - C:\WINDOWS\Prefetch\WORDCONV.EXE-1B72C490.pf
O45 - LFCP:[MD5.FB598FB8B2A009831ECE933BDB48637C] - 23/01/2012 - 21:23:58 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf
O45 - LFCP:[MD5.F29428FE66EF44E42F0BE3AEB0BE3322] - 23/01/2012 - 21:25:04 ---A- - C:\WINDOWS\Prefetch\POWERPNT.EXE-0CAC7674.pf
O45 - LFCP:[MD5.69E88729FE413533C3AE1A39EFC9BCF4] - 23/01/2012 - 21:25:12 ---A- - C:\WINDOWS\Prefetch\OFFICELIVESIGNIN.EXE-042374FE.pf
O45 - LFCP:[MD5.E40CF4DF5E22910D8362237C9BA19FE2] - 23/01/2012 - 21:27:00 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf
O45 - LFCP:[MD5.F04B96FFC2E5F6115636B8BCBEBDDE80] - 23/01/2012 - 21:27:42 ---A- - C:\WINDOWS\Prefetch\LAUNCHER.EXE-13840303.pf
O45 - LFCP:[MD5.3E02B779F6819AC5CBB904ABD4E4EDDC] - 23/01/2012 - 21:29:13 ---A- - C:\WINDOWS\Prefetch\REALUPGRADE.EXE-38293202.pf
O45 - LFCP:[MD5.1EEB9A560F13BB3F716594524EFF0C90] - 23/01/2012 - 21:32:37 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
O45 - LFCP:[MD5.8E264FC5EDB9D0B8E79CC40FB50CABCE] - 23/01/2012 - 21:33:28 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf
O45 - LFCP:[MD5.4129BE0C2EE9371FF8994D03D9CA52F6] - 23/01/2012 - 21:34:27 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
O45 - LFCP:[MD5.8A98F1E9EF11F035B408ADA6E53FDC0E] - 23/01/2012 - 21:34:27 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf
~ Scan Prefetcher in 00mn 00s
---\\ Export de clÚ d'application autorisÚe (O47)
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau Ó distance de Microsoft«.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\ftp.exe" [Enabled] .(.Microsoft Corporation - Logiciel de transfert de fichiers.) -- C:\WINDOWS\system32\ftp.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\fxsclnt.exe" [Enabled] .(.Microsoft Corporation - Microsoft Fax Console.) -- C:\WINDOWS\system32\fxsclnt.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP AiO Fax Manager.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P..) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P..) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe" [Enabled] .(.Pas de propriÚtaire - hpqscnvw.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe" [Enabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqCopy.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - Version Test application.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqCopy.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP Fax Setup Wizard.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P..) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P..) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe
O47 - AAKE:Key Export SP - "C:\Program Files\DNA\btdna.exe" [Enabled] .(.BitTorrent, Inc. - DNA.) -- C:\Program Files\DNA\btdna.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau Ó distance de Microsoft«.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Connectivity\ConnectivityManager.exe" [Enabled] .(.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\Connectivity\ConnectivityManager.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O47 - AAKE:Key Export DP - "C:\WINDOWS\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau Ó distance de Microsoft«.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export DP - "C:\WINDOWS\system32\fxsclnt.exe" [Enabled] .(.Microsoft Corporation - Microsoft Fax Console.) -- C:\WINDOWS\system32\fxsclnt.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau Ó distance de Microsoft«.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
~ Scan Keys in 00mn 00s
---\\ DÚni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'?diteur de configuration de sÚcuritÚ Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ Scan Keys in 00mn 00s
---\\ Contr¶le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de dÚmarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\procexp90.Sys . (...) -- C:\WINDOWS\system32\Drivers\procexp90.Sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de systÞme de fichiers pour la restauration du systÞme.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de dÚmarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\procexp90.Sys . (...) -- C:\WINDOWS\system32\Drivers\procexp90.Sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de systÞme de fichiers pour la restauration du systÞme.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ Scan CSB in 00mn 00s
---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s
---\\ MountPoints2 Shell Key (O51) (None)
---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak« Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\system32\lvcodec2.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo« Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo« audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo« video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="L3CODECA.ACM" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo« audio software" . (.Intel Corporation - Indeo« audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo« video 5.10" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"L3CODECA.ACM"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\WINDOWS\system32\l3codecp.acm
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak« Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \drivers.desc\"lvcodec2.dll"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\system32\lvcodec2.dll
O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo« Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (...) -- (.not file.)
~ Scan Keys in 00mn 00s
---\\ ShareTools MSconfig StartupReg (O53) (None)
---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s
---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0
O55 - MWPS:[HKCU\...\Policies\System] - "disableregistrytools"=0
~ Scan Keys in 00mn 00s
| |||||||
Les bons plans du moment PC Astuces | Tous les Bons Plans | ||||||||||||||||||
|