Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rapport de ZHPDiag v1.28.1345 par Nicolas Coolman, Update du 28/08/2011
- Run by ASUS at 28/08/2011 07:25:55
- Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
- ---\\ Web Browser
- MSIE: Internet Explorer v9.0.8112.16421
- MFIE: Mozilla Firefox 6.0 v6.0 (Defaut)
- ---\\ Windows Product Information
- Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
- Windows Server License Manager Script : OK
- ~ Windows(R) 7, OEM_SLP channel
- System Locked Preinstallation (OEM_SLP) : OK
- Windows ID Activation : OK
- ~ Windows Partial Key : 9YQTR
- Windows License : OK
- ~ Windows Remaining Initializations Number : 3
- Software Protection Service (Protection logicielle) : OK
- Windows Automatic Updates : OK
- Windows Activation Technologies : OK
- ---\\ System Information
- ~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
- ~ Operating System: 64 Bits
- Boot mode: Normal (Normal boot)
- Total RAM: 3948 MB (52% free)
- System Restore: Activé (Enable)
- System drive C: has 392 GB (67%) free of 582 GB
- ---\\ Logged in mode
- ~ Computer Name: ASUS-PC
- ~ User Name: ASUS
- ~ All Users Names: HomeGroupUser$, ASUS, Administrateur,
- ~ Unselected Option: O45,O61,O62,O65,O66,O82
- Logged in as Administrator
- ---\\ Environnement Variables
- ~ System Unit : C:\
- ~ %AppData% : C:\Users\ASUS\AppData\Roaming\
- ~ %Desktop% : C:\Users\ASUS\Desktop\
- ~ %Favorites% : C:\Users\ASUS\Favorites\
- ~ %LocalAppData% : C:\Users\ASUS\AppData\Local\
- ~ %StartMenu% : C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\
- ~ %Windir% : C:\Windows\
- ~ %System% : C:\Windows\system32\
- ---\\ DOS/Devices
- C:\ Hard drive, Flash drive, Thumb drive (Free 392 Go of 582 Go)
- D:\ CD-ROM drive (Not Inserted)
- E:\ CD-ROM drive (Free 0 Go of 1 Go)
- G:\ CD-ROM drive (Not Inserted)
- ---\\ Security Center & Tools Informations
- [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
- [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
- [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
- ~ Scan Security Center in 00mn 00s
- ---\\ Recherche particulière de fichiers génériques
- [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.09/05/2011 - 01:19:30.) -- C:\Windows\Explorer.exe [2871808]
- [MD5.DD81D91FF3B0763C392422865C9AC12E] - (....) (.13/07/2009 - 20:39:31.) -- C:\Windows\system32\rundll32.exe [45568]
- [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.13/07/2009 - 20:39:52.) -- C:\Windows\system32\Wininit.exe [129024]
- [MD5.0732B49B250E306F7A6591029AF9885B] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.11/08/2011 - 00:36:16.) -- C:\Windows\system32\wininet.dll [1389056]
- [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/05/2011 - 08:25:30.) -- C:\Windows\system32\Winlogon.exe [390656]
- [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 20:52:21.) -- C:\Windows\system32\drivers\atapi.sys [24128]
- [MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.09/05/2011 - 01:41:34.) -- C:\Windows\system32\drivers\ntfs.sys [1659776]
- [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/05/2011 - 08:27:26.) -- C:\Windows\system32\sppcomapi.dll [232448]
- [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (....) (.20/05/2011 - 08:07:20.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
- ~ Scan Generic Processes in 00mn 00s
- ---\\ Etat des fichiers cachés (Caché/Total)
- ~ Mes images (My Pictures) : 1/4
- ~ Mes musiques (My Musics) : 143/976
- ~ Mes Favoris (My Favorites) : 2/22
- ~ Mes Documents (My Documents) : 3/317
- ~ Mon Bureau (My Desktop) : 350/935
- ~ Menu demarrer (Programs) : 6/37
- ~ Scan Hidden Files in 00mn 01s
- ---\\ Processus lancés
- [MD5.DAB3519FB6A4C1740E6D77434DDFA360] - (...) -- E:\SETUP.EXE [25600] [PID.2684]
- [MD5.BDD790326FABC31FB635130810245062] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440] [PID.3364]
- [MD5.852EE4F61139A1B3F44EDAA0D5B3FC14] - (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [53888] [PID.3696]
- [MD5.6529C89512CE4498919BDC512572F82C] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656] [PID.7108]
- [MD5.85206BFDD3388883F49CF4E3A68B7507] - (.Stardock - ObjectDock.) -- C:\Program Files (x86)\Stardock\ObjectDockPlus2\ObjectDock.exe [4142448] [PID.7536]
- [MD5.5666955DC9FD455A003D86A21E0483A9] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.1460]
- [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.2392]
- [MD5.B2B3FCBA37671C853879DF7DDE8A839A] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [365336] [PID.]
- [MD5.5C396DDE6AAFFB64ABC0E0FD88F53553] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3054136] [PID.3204]
- [MD5.F7C1F465E8283C806D5F52B20ECA0A77] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [17360520] [PID.3320]
- [MD5.8AF1980AD5BD21364A960299015DBEDD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [924632] [PID.5428]
- [MD5.1BF14948A57A0AF81C07F797EC0978D6] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856] [PID.3132]
- [MD5.779F05B3B1A1D24611CBDA98BCE7E7FC] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [669696] [PID.4180]
- [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.]
- [MD5.63F1212FFE13E62CA1E8D8EE19ABD9A7] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.]
- [MD5.11A52CF7B265631DEEB24C6149309EFF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [64952] [PID.]
- [MD5.1C87705CCB2F60172B0FC86B5D82F00D] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [387944] [PID.]
- [MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144] [PID.]
- [MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240] [PID.]
- [MD5.37036C07983EF1024B2FF3C28AAE5700] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [366640] [PID.]
- [MD5.C811032EBB2C2E9FACFC364599E91BE3] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [174720] [PID.]
- [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.]
- [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [113208] [PID.]
- [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.]
- [MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]
- ~ Scan Processes Running in 00mn 02s
- ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
- M0 - MFSP: prefs.js [ASUS - 5c7kgx2e.default] http://www.facebook.com/
- M2 - MFEP: prefs.js [ASUS - 5c7kgx2e.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20110704 (.WOT Services Oy.)
- P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Oracle Corporation - Next Generation Java Plug-in 10.0.0 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
- P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
- ~ Scan Firefox Browser in 00mn 00s
- ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
- R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
- R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
- R0 - HKUS\S-1-5-21-3927676143-1492199802-2699246584-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://ie.search.msn.com
- R1 - HKUS\S-1-5-21-3927676143-1492199802-2699246584-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
- R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\System32\ieframe.dll
- R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
- R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
- ~ Scan IE Browser in 00mn 00s
- ---\\ Internet Explorer, Proxy Management (R5)
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
- R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
- ~ Scan Proxy management in 00mn 00s
- ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
- F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
- F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe
- ~ Scan Keys in 00mn 00s
- ---\\ Redirection du fichier Hosts (O1)
- ~ Scan Hosts File in 00mn 00s
- ---\\ Browser Helper Objects de navigateur (O2)
- O2 - BHO: IEVkbdBHO [64Bits] - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll
- O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
- O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
- O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll
- O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
- O2 - BHO: IEVkbdBHO [64Bits] - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
- O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
- O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
- O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
- ~ Scan BHO in 00mn 00s
- ---\\ Applications démarrées par registre & par dossier (O4)
- O4 - HKLM\..\Run: [ETDWare] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe
- O4 - HKLM\..\Run: [SmartAudio] . (.Pas de propriétaire - SAIICpl MFC Application.) -- C:\Program Files\CONEXANT\SAII\SAIICpl.exe
- O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
- O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
- O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
- O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
- O4 - HKLM\..\Wow6432Node\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
- O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
- O4 - HKLM\..\Wow6432Node\Run: [ASUS Screen Saver Protector] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe
- O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
- O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
- O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
- O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
- ~ Scan Application in 00mn 00s
- ---\\ Autres liens utilisateurs (O4)
- O4 - Global Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk . (.GameRanger Technologies.) -- C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
- O4 - Global Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O4 - Global Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O4 - Global Startup: C:\Users\ASUS\Desktop\Diablo II - Lord of Destruction.lnk . (.Blizzard North.) -- C:\Program Files (x86)\Diablo II\Diablo II.exe
- O4 - Global Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- ~ Scan Global Startup in 00mn 00s
- ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
- O8 - Extra context menu item: Add to Anti-Banner . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
- O8 - Extra context menu item: E&xport to Microsoft Excel - (.not file.) - C:\PROGRA~2\MICROS~1\Office12\EXCEL.exe
- ~ Scan IE Menu Contextuel in 00mn 00s
- ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
- O9 - Extra button: &Virtual Keyboard [64Bits] - {4248FE82-7FCB-46AC-B270-339F08212110} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\kbrd.ico
- O9 - Extra button: &Virtual Keyboard [64Bits] - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~2\MICROS~4\Office12\REFBARH.ICO
- O9 - Extra button: &Virtual Keyboard [64Bits] - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\logo.ico
- ~ Scan IE Extra Buttons in 00mn 00s
- ---\\ Winsock hijacker (Layered Service Provider) (O10)
- O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
- O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
- O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
- O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
- O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
- O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
- O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
- O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
- O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
- ~ Scan Winsock in 00mn 00s
- ---\\ Modification Domaine/Adresses DNS (O17)
- O17 - HKLM\System\CCS\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpNameServer = 192.168.1.1 205.151.67.6 205.151.67.2
- O17 - HKLM\System\CCS\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpDomain = mg.cgocable.ca
- O17 - HKLM\System\CS1\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpNameServer = 192.168.1.1 205.151.67.6 205.151.67.2
- O17 - HKLM\System\CS1\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpDomain = mg.cgocable.ca
- O17 - HKLM\System\CS2\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpNameServer = 192.168.1.1 205.151.67.6 205.151.67.2
- O17 - HKLM\System\CS2\Services\Tcpip\..\{7A5DA319-5F35-40F6-9873-C5DFA317FD53}: DhcpDomain = mg.cgocable.ca
- ~ Scan Domain in 00mn 00s
- ---\\ Protocole additionnel (O18)
- O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
- O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
- O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
- O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
- O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
- O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
- O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
- O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
- O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
- O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
- O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
- O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
- O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
- O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
- ~ Scan Protocole Additionnel in 00mn 00s
- ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
- O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\Windows\System32\klogon.dll
- O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
- ~ Scan Winlogon in 00mn 00s
- ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
- O20 - AppInit_DLLs: . (.Kaspersky Lab ZAO - Sandbox r3 hooks for virtual processes.) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll
- ~ Scan AppInit DLL in 00mn 00s
- ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
- O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll
- ~ Scan SSODL in 00mn 00s
- ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
- O22 - SharedTaskScheduler: (no name) [64Bits] - {1984D045-52CF-49cd-DB77-08F378FEA4DB} . (.Stardock - Stardock ObjectDock Shell Extension.) -- C:\Program Files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll
- ~ Scan STS/SSO in 00mn 00s
- ---\\ Liste des services NT non Microsoft et non désactivés (O23)
- O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
- O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
- O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
- O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
- O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
- O23 - Service: Kaspersky Anti-Virus Service (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
- O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
- O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
- O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
- ~ Scan Services in 00mn 00s
- ---\\ Enumération Active Desktop & MHTML Editor (O24)
- O24 - Default MHTML Editor: Last - .(...) - (.not file.)
- ~ Scan Desktop Component in 00mn 00s
- ---\\ Tâches planifiées en automatique (O39)
- [MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] [APT] [ACMON] (.ATK.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
- [MD5.00000000000000000000000000000000] [APT] [ASC4_PerformanceMonitor] (...) -- C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe (.not file.)
- [MD5.7E945C1E224F7487EB1A4ED3B7056FBA] [APT] [ASUS P4G] (.ATK.) -- C:\Program Files\P4G\BatteryLife.exe
- [MD5.852EE4F61139A1B3F44EDAA0D5B3FC14] [APT] [ASUSControlDeck] (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
- [MD5.BDD790326FABC31FB635130810245062] [APT] [WC3] (...) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
- [MD5.F7C1F465E8283C806D5F52B20ECA0A77] [APT] [{B083E977-FDBF-4C1C-B70B-FE93306896B3}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
- [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
- ~ Scan Scheduled Task in 00mn 02s
- ---\\ Pilotes lancés au démarrage (O41)
- O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
- O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
- O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
- O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
- O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys
- O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\system32\DRIVERS\dtsoftbus01.sys
- O41 - Driver: (ISODrive) . (.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
- O41 - Driver: (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\system32\DRIVERS\kl2.sys
- O41 - Driver: (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_AMD64].) - C:\Windows\system32\DRIVERS\klif.sys
- O41 - Driver: (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\system32\DRIVERS\klim6.sys
- O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
- O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
- O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
- O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
- O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
- O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys
- O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
- O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
- O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys
- O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
- O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
- O41 - Driver: (VBoxDrv) . (.Oracle Corporation - VirtualBox Support Driver.) - C:\Windows\system32\DRIVERS\VBoxDrv.sys
- O41 - Driver: (VBoxUSBMon) . (.Oracle Corporation - VirtualBox USB Monitor Driver.) - C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
- O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
- O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
- O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
- O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys
- ~ Scan Drivers in 00mn 00s
- ---\\ Logiciels installés (O42)
- O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {8D0A0350-B509-B362-4827-63E4C6520E7B}
- O42 - Logiciel: ASUS MultiFrame - (.ASUS.) [HKLM] -- {9D48531D-2135-49FC-BC29-ACCDA5396A76}
- O42 - Logiciel: ASUS USB2.0 UVC VGA WebCam - (.Sonix.) [HKLM] -- ASUS USB2.0 UVC VGA WebCam
- O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
- O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
- O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
- O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
- O42 - Logiciel: BitTorrent - (.Pas de propriétaire.) [HKLM] -- BitTorrent
- O42 - Logiciel: Blender - (.Blender Foundation.) [HKLM] -- Blender
- O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
- O42 - Logiciel: CEDARLS 1.5 beta - (.Cedarville University.) [HKLM] -- CEDAR Logic Simulator_is1
- O42 - Logiciel: Caesar IV - (.Tilted Mill Entertainment.) [HKLM] -- {B7666229-351B-47D9-AA6F-DF777CF04BBF}
- O42 - Logiciel: Cities XL 2011 - (.Focus Home Interactive.) [HKLM] -- Cities XL 2011
- O42 - Logiciel: Combined Community Codec Pack 2010-10-10 - (.CCCP Project.) [HKLM] -- Combined Community Codec Pack_is1
- O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA
- O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- Steam App 240
- O42 - Logiciel: Crysis WARHEAD(R) - (.Crytek.) [HKLM] -- {7353BAE6-5E49-46C4-A9B5-8A269A313789}
- O42 - Logiciel: Crysis WARHEAD(R) - (.Electronic Arts.) [HKLM] -- Crysis WARHEAD(R)
- O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
- O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler
- O42 - Logiciel: Diablo II - (.Pas de propriétaire.) [HKLM] -- Diablo II
- O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM] -- EADM
- O42 - Logiciel: ETDWare PS/2-x64 7.0.5.9_WHQL - (.Pas de propriétaire.) [HKLM] -- Elantech
- O42 - Logiciel: Empire Earth - (.Pas de propriétaire.) [HKLM] -- {2447500B-22D7-47BD-9B13-1A927F43A267}
- O42 - Logiciel: Empire Earth - The Art of Conquest - (.Pas de propriétaire.) [HKLM] -- {B49C924C-A651-4378-94F6-5D9BF44A959F}
- O42 - Logiciel: Fallout 3 - (.Bethesda Softworks.) [HKLM] -- {974C4B12-4D02-4879-85E0-61C95CC63E9E}
- O42 - Logiciel: FileHippo.com Update Checker - (.Pas de propriétaire.) [HKLM] -- FileHippo.com
- O42 - Logiciel: Fraps (remove only) - (.Pas de propriétaire.) [HKLM] -- Fraps
- O42 - Logiciel: GIMP 2.6.11 - (.The GIMP Team.) [HKLM] -- WinGimp-2.0_is1
- O42 - Logiciel: GameRanger - (.GameRanger Technologies.) [HKCU] -- GameRanger
- O42 - Logiciel: GeoGebra - (.International GeoGebra Institute.) [HKLM] -- GeoGebra
- O42 - Logiciel: Insurgency - (.Team Insurgency.) [HKLM] -- Steam App 17700
- O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
- O42 - Logiciel: JMicron Ethernet Adapter NDIS Driver - (.JMicron Technology Corp..) [HKLM] -- {96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}
- O42 - Logiciel: JMicron Flash Media Controller Driver - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C}
- O42 - Logiciel: Kaspersky Internet Security 2011 - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}
- O42 - Logiciel: Kaspersky Internet Security 2011 - (.Kaspersky Lab.) [HKLM] -- {66F1F013-008F-4875-B283-5A814B820347}
- O42 - Logiciel: KiCad 2011.04.29 - (.Pas de propriétaire.) [HKLM] -- KiCad
- O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- LogMeIn Hamachi
- O42 - Logiciel: Logitech SetPoint 6.30 - (.Logitech.) [HKLM] -- sp6
- O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
- O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}_PROHYBRIDR_{E64BA721-2310-4B55-BE5A-2925F9706192}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
- O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
- O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
- O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
- O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
- O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Extended FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended FRA Language Pack
- O42 - Logiciel: Mozilla Firefox 6.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 6.0 (x86 fr)
- O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++
- O42 - Logiciel: ObjectDock Plus 2 - (.Stardock Corporation.) [HKLM] -- ObjectDock Plus 2
- O42 - Logiciel: Operation Flashpoint ®: Red River - (.Codemasters.) [HKLM] -- GFWL_{434D083E-7E9A-4D3A-914B-121000008100}
- O42 - Logiciel: Overlook Fing - (.Overlook.) [HKLM] -- Overlook Fing 1.4
- O42 - Logiciel: PCSX2 - Playstation 2 Emulator - (.Pas de propriétaire.) [HKLM] -- pcsx2-r4600
- O42 - Logiciel: Portal 2 - (.Pas de propriétaire.) [HKLM] -- Postal 2_is1
- O42 - Logiciel: PyScripter 2.4.1 - (.PyScripter.) [HKLM] -- PyScripter_is1
- O42 - Logiciel: Revo Uninstaller Pro 2.5.3 - (.VS Revo Group, Ltd..) [HKLM] -- {67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
- O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Extended (KB2416472) - (.Microsoft Corporation.) [HKLM] -- {8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2416472
- O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Extended (KB2487367) - (.Microsoft Corporation.) [HKLM] -- {8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2487367
- O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD907315-705A-4475-A1A0-2A1245803E4D}
- O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
- O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
- O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0173254-F442-4D04-9154-43FA157B83D0}
- O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}
- O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
- O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
- O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
- O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
- O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
- O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
- O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
- O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
- O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
- O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663
- O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870
- O42 - Logiciel: Starcraft - (.Pas de propriétaire.) [HKLM] -- Starcraft
- O42 - Logiciel: Stardock Software - (.Stardock Corporation.) [HKLM] -- {CF91A5A9-F10D-433D-A677-9505B84EAF1B}
- O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM] -- TmNationsForever_is1
- O42 - Logiciel: UltraISO Premium V9.36 - (.Pas de propriétaire.) [HKLM] -- UltraISO_is1
- O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}_PROHYBRIDR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
- O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
- O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871
- O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2473228) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228
- O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523
- O42 - Logiciel: Update for Microsoft .NET Framework 4 Extended (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871
- O42 - Logiciel: Update for Microsoft .NET Framework 4 Extended (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523
- O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
- O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}
- O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}
- O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2536413) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{95DF5260-331D-4FFD-A2D5-C64164751945}
- O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2586924) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3B65DCBC-61EC-4578-9DF2-40D3B3829CD8}
- O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst
- O42 - Logiciel: WinRAR 4.01 (64-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
- O42 - Logiciel: winpcap-overlook 4.02 - (.Pas de propriétaire.) [HKLM] -- winpcap-overlook
- ---\\ HKCU & HKLM Software Keys
- [HKCU\Software\ASUS]
- [HKCU\Software\ATI]
- [HKCU\Software\ATK0100]
- [HKCU\Software\Adobe]
- [HKCU\Software\AppDataLow\Software\Adobe]
- [HKCU\Software\AppDataLow\Software\Microsoft]
- [HKCU\Software\AppDataLow\Software]
- [HKCU\Software\AppDataLow]
- [HKCU\Software\Apple Computer, Inc.]
- [HKCU\Software\Apple Inc.]
- [HKCU\Software\Battle.net]
- [HKCU\Software\BitTorrent]
- [HKCU\Software\Blizzard Entertainment]
- [HKCU\Software\Classes]
- [HKCU\Software\Clients]
- [HKCU\Software\Crocodile Clips]
- [HKCU\Software\DT Soft]
- [HKCU\Software\DVDFab]
- [HKCU\Software\EasyBits]
- [HKCU\Software\EasyBoot Systems]
- [HKCU\Software\Elantech]
- [HKCU\Software\FileHippo.com]
- [HKCU\Software\Fraps3]
- [HKCU\Software\GNU]
- [HKCU\Software\Gabest]
- [HKCU\Software\Google]
- [HKCU\Software\Haali]
- [HKCU\Software\IGA]
- [HKCU\Software\JavaSoft]
- [HKCU\Software\KasperskyLab]
- [HKCU\Software\Leadertech]
- [HKCU\Software\Logitech]
- [HKCU\Software\Macromedia]
- [HKCU\Software\Mad Doc Software]
- [HKCU\Software\MozillaPlugins]
- [HKCU\Software\Mozilla]
- [HKCU\Software\Mumble]
- [HKCU\Software\Netscape]
- [HKCU\Software\Nexway]
- [HKCU\Software\ODBC]
- [HKCU\Software\PCSX2]
- [HKCU\Software\Piriform]
- [HKCU\Software\Policies]
- [HKCU\Software\Program Groups]
- [HKCU\Software\SSSI]
- [HKCU\Software\SecuROM]
- [HKCU\Software\Skype]
- [HKCU\Software\SmallGamesInfo]
- [HKCU\Software\Softonic]
- [HKCU\Software\Stardock]
- [HKCU\Software\Sysinternals]
- [HKCU\Software\System Requirements Lab]
- [HKCU\Software\Trolltech]
- [HKCU\Software\Usbfix]
- [HKCU\Software\VB and VBA Program Settings]
- [HKCU\Software\VS Revo Group]
- [HKCU\Software\Valve]
- [HKCU\Software\WinRAR SFX]
- [HKCU\Software\WinRAR]
- [HKCU\Software\Wintertree]
- [HKCU\Software\Wow6432Node]
- [HKCU\Software\YahooPartnerToolbar]
- [HKCU\Software\crocodile-clips]
- [HKCU\Software\cybelsoft]
- [HKCU\Software\ej-technologies]
- [HKCU\Software\kicad]
- [HKCU\Software\techPowerUp]
- [HKLM\Software\AMD]
- [HKLM\Software\ASPG]
- [HKLM\Software\ASUS]
- [HKLM\Software\ATI Technologies]
- [HKLM\Software\ATI]
- [HKLM\Software\ATK0100]
- [HKLM\Software\Adobe]
- [HKLM\Software\Alienware]
- [HKLM\Software\AppDataLow]
- [HKLM\Software\Apple Computer, Inc.]
- [HKLM\Software\Apple Inc.]
- [HKLM\Software\Arcai]
- [HKLM\Software\AsLdr]
- [HKLM\Software\Battle.net]
- [HKLM\Software\Bethesda Softworks]
- [HKLM\Software\BlenderFoundation]
- [HKLM\Software\Blizzard Entertainment]
- [HKLM\Software\Bohemia Interactive]
- [HKLM\Software\Classes]
- [HKLM\Software\Clients]
- [HKLM\Software\Codemasters]
- [HKLM\Software\Combined-Community-Codec-Pack]
- [HKLM\Software\Conexant Systems Inc ]
- [HKLM\Software\Conexant]
- [HKLM\Software\CoreSecurity]
- [HKLM\Software\Crytek]
- [HKLM\Software\CyberLink]
- [HKLM\Software\DT Soft]
- [HKLM\Software\ECAREME]
- [HKLM\Software\EasyBoot Systems]
- [HKLM\Software\Electronic Arts]
- [HKLM\Software\Firaxis Games]
- [HKLM\Software\Focus Home Interactive]
- [HKLM\Software\GEAR Software]
- [HKLM\Software\GNU]
- [HKLM\Software\Gabest]
- [HKLM\Software\Google]
- [HKLM\Software\HaaliMkx]
- [HKLM\Software\InstallShield]
- [HKLM\Software\Intel]
- [HKLM\Software\JavaSoft]
- [HKLM\Software\JreMetrics]
- [HKLM\Software\KasperskyLab]
- [HKLM\Software\Khronos]
- [HKLM\Software\Licenses]
- [HKLM\Software\LogMeIn, Inc.]
- [HKLM\Software\Logitech]
- [HKLM\Software\Macromedia]
- [HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
- [HKLM\Software\MimarSinan]
- [HKLM\Software\MozillaPlugins]
- [HKLM\Software\Mozilla]
- [HKLM\Software\MySQL AB]
- [HKLM\Software\ODBC]
- [HKLM\Software\Oberon Media]
- [HKLM\Software\Oracle]
- [HKLM\Software\Overlook]
- [HKLM\Software\Panda Software]
- [HKLM\Software\Piriform]
- [HKLM\Software\Policies]
- [HKLM\Software\Python]
- [HKLM\Software\RDBoot]
- [HKLM\Software\RegisteredApplications]
- [HKLM\Software\SONIX]
- [HKLM\Software\SRS Labs]
- [HKLM\Software\Sierra OnLine]
- [HKLM\Software\Sierra]
- [HKLM\Software\Skype]
- [HKLM\Software\Sonic]
- [HKLM\Software\Stardock]
- [HKLM\Software\Tilted Mill Entertainment]
- [HKLM\Software\Valve]
- [HKLM\Software\Volatile]
- [HKLM\Software\WinPcap]
- [HKLM\Software\WinRAR]
- [HKLM\Software\Wow6432Node]
- [HKLM\Software\cybelsoft]
- [HKLM\Software\mozilla.org]
- ~ Scan Softwares in 00mn 00s
- ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
- O43 - CFD: 09/05/2011 - 16:25:02 - [16518] ----D- C:\Program Files\ASUS
- O43 - CFD: 20/03/2010 - 00:56:12 - [23773090] ----D- C:\Program Files\ATI
- O43 - CFD: 26/08/2011 - 17:45:02 - [28] ----D- C:\Program Files\ATI Technologies
- O43 - CFD: 13/06/2011 - 23:23:50 - [125453357] ----D- C:\Program Files\Blender Foundation
- O43 - CFD: 22/07/2011 - 01:10:38 - [135026] ----D- C:\Program Files\Bonjour
- O43 - CFD: 26/08/2011 - 18:53:32 - [8580520] ----D- C:\Program Files\CCleaner
- O43 - CFD: 15/07/2011 - 03:20:32 - [115223732] ----D- C:\Program Files\Common Files
- O43 - CFD: 20/03/2010 - 00:59:04 - [33143216] ----D- C:\Program Files\CONEXANT
- O43 - CFD: 15/07/2011 - 03:04:24 - [9497336] ----D- C:\Program Files\Defraggler
- O43 - CFD: 17/06/2011 - 12:51:34 - [90256916] ----D- C:\Program Files\DVD Maker
- O43 - CFD: 20/03/2010 - 00:03:32 - [7127936] ----D- C:\Program Files\Elantech
- O43 - CFD: 09/05/2011 - 16:27:18 - [0] ----D- C:\Program Files\Google
- O43 - CFD: 11/08/2011 - 08:02:12 - [7099596] ----D- C:\Program Files\Internet Explorer
- O43 - CFD: 24/08/2011 - 18:51:48 - [1951827] ----D- C:\Program Files\iPod
- O43 - CFD: 24/08/2011 - 18:52:20 - [2358288] ----D- C:\Program Files\iTunes
- O43 - CFD: 04/08/2011 - 04:15:12 - [211667767] ----D- C:\Program Files\Java
- O43 - CFD: 21/05/2011 - 11:28:16 - [2401] ----D- C:\Program Files\Josip Medved
- O43 - CFD: 15/07/2011 - 03:21:04 - [27300666] ----D- C:\Program Files\Logitech
- O43 - CFD: 15/07/2011 - 03:06:28 - [9486663] ----D- C:\Program Files\ma-config.com
- O43 - CFD: 14/07/2009 - 03:45:56 - [149237810] ----D- C:\Program Files\Microsoft Games
- O43 - CFD: 23/05/2011 - 20:51:38 - [594846] ----D- C:\Program Files\Microsoft Office
- O43 - CFD: 14/07/2009 - 01:32:40 - [25757] ----D- C:\Program Files\MSBuild
- O43 - CFD: 21/05/2011 - 10:20:52 - [125978120] ----D- C:\Program Files\Oracle
- O43 - CFD: 20/03/2010 - 01:01:10 - [12442647] ----D- C:\Program Files\P4G
- O43 - CFD: 14/07/2009 - 01:32:40 - [36813993] ----D- C:\Program Files\Reference Assemblies
- O43 - CFD: 20/03/2010 - 00:59:00 - [2094004] ----D- C:\Program Files\SRS Labs
- O43 - CFD: 14/07/2009 - 01:09:28 - [0] --H-D- C:\Program Files\Uninstall Information
- O43 - CFD: 17/06/2011 - 12:55:34 - [4039680] ----D- C:\Program Files\Windows Defender
- O43 - CFD: 17/06/2011 - 12:55:34 - [9224824] ----D- C:\Program Files\Windows Journal
- O43 - CFD: 17/06/2011 - 12:55:34 - [6667776] ----D- C:\Program Files\Windows Mail
- O43 - CFD: 17/06/2011 - 12:55:34 - [7687085] ----D- C:\Program Files\Windows Media Player
- O43 - CFD: 14/07/2009 - 01:32:40 - [12627636] ----D- C:\Program Files\Windows NT
- O43 - CFD: 17/06/2011 - 12:55:34 - [5516056] ----D- C:\Program Files\Windows Photo Viewer
- O43 - CFD: 20/05/2011 - 20:25:58 - [244736] ----D- C:\Program Files\Windows Portable Devices
- O43 - CFD: 17/06/2011 - 12:55:34 - [7674699] ----D- C:\Program Files\Windows Sidebar
- O43 - CFD: 01/06/2011 - 16:11:34 - [4475558] ----D- C:\Program Files\WinRAR
- O43 - CFD: 20/05/2011 - 19:29:26 - [6580905] ----D- C:\Program Files\Common Files\Apple
- O43 - CFD: 20/03/2010 - 00:56:24 - [5317120] ----D- C:\Program Files\Common Files\ATI Technologies
- O43 - CFD: 15/07/2011 - 03:21:50 - [26017243] ----D- C:\Program Files\Common Files\LogiShrd
- O43 - CFD: 09/07/2011 - 03:00:46 - [64502703] ----D- C:\Program Files\Common Files\Microsoft Shared
- O43 - CFD: 13/07/2009 - 23:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
- O43 - CFD: 13/07/2009 - 23:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
- O43 - CFD: 17/06/2011 - 12:55:34 - [12194291] ----D- C:\Program Files\Common Files\System
- O43 - CFD: 05/07/2011 - 18:30:32 - [128654334] ----D- C:\ProgramData\Adobe
- O43 - CFD: 20/05/2011 - 23:20:40 - [80927777] ----D- C:\ProgramData\Apple
- O43 - CFD: 20/05/2011 - 20:58:40 - [753140332] ----D- C:\ProgramData\Apple Computer
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Application Data
- O43 - CFD: 31/05/2011 - 22:01:40 - [3798] ----D- C:\ProgramData\ASUS
- O43 - CFD: 26/08/2011 - 17:45:58 - [187] ----D- C:\ProgramData\ATI
- O43 - CFD: 29/06/2011 - 06:54:26 - [357] ----D- C:\ProgramData\CyberLink
- O43 - CFD: 25/06/2011 - 13:36:28 - [1368] ----D- C:\ProgramData\DAEMON Tools Lite
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Desktop
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Documents
- O43 - CFD: 17/06/2011 - 13:07:18 - [12624579] ----D- C:\ProgramData\Easybits GO
- O43 - CFD: 21/05/2011 - 15:09:36 - [402] ----D- C:\ProgramData\Electronic Arts
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Favorites
- O43 - CFD: 20/05/2011 - 21:37:04 - [0] ----D- C:\ProgramData\Google
- O43 - CFD: 21/07/2011 - 17:47:52 - [54192] ----D- C:\ProgramData\InstallShield
- O43 - CFD: 29/06/2011 - 04:14:00 - [0] ----D- C:\ProgramData\IObit
- O43 - CFD: 28/08/2011 - 07:10:52 - [580316163] ----D- C:\ProgramData\Kaspersky Lab
- O43 - CFD: 19/07/2011 - 18:53:26 - [117629980] ----D- C:\ProgramData\Kaspersky Lab Setup Files
- O43 - CFD: 15/07/2011 - 03:21:56 - [3460614] ----D- C:\ProgramData\Logishrd
- O43 - CFD: 15/07/2011 - 03:06:28 - [1414819] ----D- C:\ProgramData\ma-config.com
- O43 - CFD: 10/05/2011 - 13:00:24 - [90] ----D- C:\ProgramData\Malwarebytes
- O43 - CFD: 26/07/2011 - 01:59:22 - [265525512] -S--D- C:\ProgramData\Microsoft
- O43 - CFD: 11/08/2011 - 03:23:48 - [255558] ----D- C:\ProgramData\Microsoft Help
- O43 - CFD: 25/07/2011 - 16:32:30 - [445823] ----D- C:\ProgramData\Overlook
- O43 - CFD: 23/05/2011 - 20:51:38 - [2028] ----D- C:\ProgramData\P4G
- O43 - CFD: 09/05/2011 - 16:27:18 - [366] ----D- C:\ProgramData\Partner
- O43 - CFD: 31/07/2011 - 03:48:12 - [61480623] ----D- C:\ProgramData\Skype
- O43 - CFD: 17/06/2011 - 00:08:34 - [10447576] ----D- C:\ProgramData\Skype Extras
- O43 - CFD: 20/05/2011 - 20:40:24 - [666753] ----D- C:\ProgramData\Stardock
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Start Menu
- O43 - CFD: 10/05/2011 - 12:58:28 - [84] ----D- C:\ProgramData\Sun
- O43 - CFD: 04/07/2011 - 05:57:28 - [143502] ---AD- C:\ProgramData\Temp
- O43 - CFD: 14/07/2009 - 01:08:58 - [0] -SH-D- C:\ProgramData\Templates
- O43 - CFD: 19/06/2011 - 22:35:24 - [106057308] ----D- C:\ProgramData\TmForever
- O43 - CFD: 21/05/2011 - 14:34:54 - [14155084] --H-D- C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
- O43 - CFD: 20/05/2011 - 20:40:28 - [7636590] --H-D- C:\ProgramData\{0F4A7EFE-5950-4389-BF36-1E625D72456B}
- O43 - CFD: 20/03/2010 - 00:20:58 - [6904850] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
- O43 - CFD: 20/05/2011 - 20:59:18 - [893135] ----D- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
- O43 - CFD: 19/08/2011 - 11:49:08 - [71911663] ----D- C:\Users\ASUS\AppData\Roaming\.minecraft
- O43 - CFD: 25/08/2011 - 17:59:24 - [59603058] ----D- C:\Users\ASUS\AppData\Roaming\.minecraft server
- O43 - CFD: 12/06/2011 - 23:21:18 - [7109835] ----D- C:\Users\ASUS\AppData\Roaming\.visualvm
- O43 - CFD: 10/05/2011 - 13:00:54 - [3956348] ----D- C:\Users\ASUS\AppData\Roaming\Adobe
- O43 - CFD: 22/05/2011 - 12:26:40 - [289854083] ----D- C:\Users\ASUS\AppData\Roaming\Apple Computer
- O43 - CFD: 09/05/2011 - 15:41:30 - [0] ----D- C:\Users\ASUS\AppData\Roaming\ATI
- O43 - CFD: 28/08/2011 - 00:45:46 - [3357181] ----D- C:\Users\ASUS\AppData\Roaming\BitTorrent
- O43 - CFD: 13/06/2011 - 23:23:56 - [5795349] ----D- C:\Users\ASUS\AppData\Roaming\Blender Foundation
- O43 - CFD: 05/08/2011 - 03:54:00 - [0] ----D- C:\Users\ASUS\AppData\Roaming\DAEMON Tools Lite
- O43 - CFD: 29/06/2011 - 02:54:28 - [3704407] ----D- C:\Users\ASUS\AppData\Roaming\GameRanger
- O43 - CFD: 17/06/2011 - 13:01:08 - [57584] ----D- C:\Users\ASUS\AppData\Roaming\go
- O43 - CFD: 09/05/2011 - 16:25:20 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Google
- O43 - CFD: 26/08/2011 - 23:07:12 - [167] ----D- C:\Users\ASUS\AppData\Roaming\gtk-2.0
- O43 - CFD: 09/05/2011 - 15:40:58 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Identities
- O43 - CFD: 21/07/2011 - 17:47:54 - [0] ----D- C:\Users\ASUS\AppData\Roaming\InstallShield
- O43 - CFD: 29/06/2011 - 04:16:56 - [1720] ----D- C:\Users\ASUS\AppData\Roaming\IObit
- O43 - CFD: 15/07/2011 - 03:22:16 - [471] ----D- C:\Users\ASUS\AppData\Roaming\Leadertech
- O43 - CFD: 27/05/2011 - 18:47:22 - [177538] ----D- C:\Users\ASUS\AppData\Roaming\Logishrd
- O43 - CFD: 15/07/2011 - 03:22:34 - [5371] ----D- C:\Users\ASUS\AppData\Roaming\Logitech
- O43 - CFD: 05/07/2011 - 15:27:22 - [8196471] ----D- C:\Users\ASUS\AppData\Roaming\Macromedia
- O43 - CFD: 10/05/2011 - 13:00:26 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Malwarebytes
- O43 - CFD: 14/07/2009 - 03:44:40 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Media Center Programs
- O43 - CFD: 22/07/2011 - 01:22:34 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Media Player Classic
- O43 - CFD: 25/08/2011 - 23:46:24 - [5090908] -S--D- C:\Users\ASUS\AppData\Roaming\Microsoft
- O43 - CFD: 20/05/2011 - 18:31:08 - [41552578] ----D- C:\Users\ASUS\AppData\Roaming\Mozilla
- O43 - CFD: 09/08/2011 - 00:19:46 - [1364788] ----D- C:\Users\ASUS\AppData\Roaming\Mumble
- O43 - CFD: 25/07/2011 - 21:35:32 - [342878] ----D- C:\Users\ASUS\AppData\Roaming\Notepad++
- O43 - CFD: 25/07/2011 - 16:34:44 - [445823] ----D- C:\Users\ASUS\AppData\Roaming\Overlook
- O43 - CFD: 20/05/2011 - 21:41:56 - [116849] ----D- C:\Users\ASUS\AppData\Roaming\PyScripter
- O43 - CFD: 28/08/2011 - 07:24:46 - [9010390] ----D- C:\Users\ASUS\AppData\Roaming\Skype
- O43 - CFD: 29/05/2011 - 11:32:22 - [44048] ----D- C:\Users\ASUS\AppData\Roaming\skypePM
- O43 - CFD: 20/05/2011 - 20:40:44 - [3970] ----D- C:\Users\ASUS\AppData\Roaming\Stardock
- O43 - CFD: 21/05/2011 - 13:01:48 - [20356] ----D- C:\Users\ASUS\AppData\Roaming\Subversion
- O43 - CFD: 17/06/2011 - 22:55:20 - [658032] ----D- C:\Users\ASUS\AppData\Roaming\SystemRequirementsLab
- O43 - CFD: 14/07/2011 - 20:16:46 - [0] ----D- C:\Users\ASUS\AppData\Roaming\Vso
- O43 - CFD: 20/05/2011 - 20:43:24 - [12] ----D- C:\Users\ASUS\AppData\Roaming\WinRAR
- O43 - CFD: 10/05/2011 - 13:00:54 - [15287915] ----D- C:\Users\ASUS\AppData\Local\Adobe
- O43 - CFD: 20/05/2011 - 19:29:40 - [0] ----D- C:\Users\ASUS\AppData\Local\Apple
- O43 - CFD: 23/05/2011 - 13:53:38 - [16867630] ----D- C:\Users\ASUS\AppData\Local\Apple Computer
- O43 - CFD: 09/05/2011 - 15:32:18 - [0] -SH-D- C:\Users\ASUS\AppData\Local\Application Data
- O43 - CFD: 31/05/2011 - 22:01:38 - [1373755] ----D- C:\Users\ASUS\AppData\Local\ASUS
- O43 - CFD: 09/05/2011 - 15:41:30 - [65224] ----D- C:\Users\ASUS\AppData\Local\ATI
- O43 - CFD: 13/08/2011 - 19:30:58 - [62303] ----D- C:\Users\ASUS\AppData\Local\Diagnostics
- O43 - CFD: 21/05/2011 - 14:15:50 - [13554963] ----D- C:\Users\ASUS\AppData\Local\Downloaded Installations
- O43 - CFD: 22/08/2011 - 03:15:58 - [2300] ----D- C:\Users\ASUS\AppData\Local\Eclipse
- O43 - CFD: 26/06/2011 - 14:08:48 - [0] ----D- C:\Users\ASUS\AppData\Local\ElevatedDiagnostics
- O43 - CFD: 04/08/2011 - 02:49:32 - [125] ----D- C:\Users\ASUS\AppData\Local\Fallout3
- O43 - CFD: 19/07/2011 - 19:41:02 - [60155075] ----D- C:\Users\ASUS\AppData\Local\Focus Home Interactive
- O43 - CFD: 09/05/2011 - 15:32:18 - [0] -SH-D- C:\Users\ASUS\AppData\Local\Historique
- O43 - CFD: 27/08/2011 - 20:03:16 - [703781] ----D- C:\Users\ASUS\AppData\Local\LogMeIn Hamachi
- O43 - CFD: 09/07/2011 - 20:07:12 - [73748718] ----D- C:\Users\ASUS\AppData\Local\Microsoft
- O43 - CFD: 30/06/2011 - 15:22:34 - [106180] ----D- C:\Users\ASUS\AppData\Local\Microsoft Help
- O43 - CFD: 20/05/2011 - 18:31:04 - [47617424] ----D- C:\Users\ASUS\AppData\Local\Mozilla
- O43 - CFD: 04/07/2011 - 09:00:44 - [1065487] ----D- C:\Users\ASUS\AppData\Local\My Games
- O43 - CFD: 20/05/2011 - 20:53:22 - [789] ----D- C:\Users\ASUS\AppData\Local\ODUI
- O43 - CFD: 13/08/2011 - 21:36:40 - [215] ----D- C:\Users\ASUS\AppData\Local\pcsx2
- O43 - CFD: 04/07/2011 - 07:20:20 - [522] ----D- C:\Users\ASUS\AppData\Local\SKIDROW
- O43 - CFD: 09/05/2011 - 15:41:30 - [7195] ----D- C:\Users\ASUS\AppData\Local\SRS Labs
- O43 - CFD: 20/05/2011 - 20:53:18 - [67544] ----D- C:\Users\ASUS\AppData\Local\Stardock
- O43 - CFD: 28/08/2011 - 07:24:54 - [157139322] ----D- C:\Users\ASUS\AppData\Local\Temp
- O43 - CFD: 09/05/2011 - 15:32:18 - [0] -SH-D- C:\Users\ASUS\AppData\Local\Temporary Internet Files
- O43 - CFD: 21/05/2011 - 13:06:24 - [18483515] ----D- C:\Users\ASUS\AppData\Local\VirtualStore
- O43 - CFD: 29/06/2011 - 06:25:08 - [195539378] ----D- C:\Users\ASUS\AppData\Local\VS Revo Group
- O43 - CFD: 15/08/2011 - 01:13:02 - [1321547] ----D- C:\Users\ASUS\AppData\Local\Zachtronics Industries
- O43 - CFD: 20/03/2010 - 00:20:58 - [12683094] ----D- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
- O43 - CFD: 05/07/2011 - 18:30:30 - [118365137] ----D- C:\Program Files (x86)\Adobe
- O43 - CFD: 26/08/2011 - 17:45:24 - [2436124] ----D- C:\Program Files (x86)\AMD APP
- O43 - CFD: 07/06/2011 - 17:14:02 - [2307582] ----D- C:\Program Files (x86)\Apple Software Update
- O43 - CFD: 09/05/2011 - 16:25:52 - [72474342] ----D- C:\Program Files (x86)\ASUS
- O43 - CFD: 20/05/2011 - 18:56:30 - [47191558] ----D- C:\Program Files (x86)\ATI Technologies
- O43 - CFD: 04/08/2011 - 02:36:18 - [5939343848] ----D- C:\Program Files (x86)\Bethesda Softworks
- O43 - CFD: 20/05/2011 - 19:21:06 - [4771184] ----D- C:\Program Files (x86)\BitTorrent
- O43 - CFD: 22/07/2011 - 01:10:38 - [628515] ----D- C:\Program Files (x86)\Bonjour
- O43 - CFD: 14/07/2011 - 12:15:30 - [9540182] ----D- C:\Program Files (x86)\CEDAR Logic
- O43 - CFD: 25/06/2011 - 14:58:40 - [4865295441] ----D- C:\Program Files (x86)\Codemasters
- O43 - CFD: 10/05/2011 - 12:58:46 - [27588661] ----D- C:\Program Files (x86)\Combined Community Codec Pack
- O43 - CFD: 26/08/2011 - 17:45:18 - [458696481] ----D- C:\Program Files (x86)\Common Files
- O43 - CFD: 04/08/2011 - 16:59:14 - [23636673] ----D- C:\Program Files (x86)\DAEMON Tools Lite
- O43 - CFD: 04/08/2011 - 21:14:22 - [1984577917] ----D- C:\Program Files (x86)\Diablo II
- O43 - CFD: 28/06/2011 - 23:56:48 - [0] ----D- C:\Program Files (x86)\directx
- O43 - CFD: 21/05/2011 - 14:30:26 - [6056915699] ----D- C:\Program Files (x86)\Electronic Arts
- O43 - CFD: 20/05/2011 - 19:06:46 - [381086] ----D- C:\Program Files (x86)\FileHippo.com
- O43 - CFD: 04/07/2011 - 08:49:26 - [1606267781] ----D- C:\Program Files (x86)\Firaxis Games
- O43 - CFD: 19/07/2011 - 19:34:12 - [5250332273] ----D- C:\Program Files (x86)\Focus Home Interactive
- O43 - CFD: 05/08/2011 - 03:02:22 - [116819590] ----D- C:\Program Files (x86)\Fraps
- O43 - CFD: 25/06/2011 - 01:23:40 - [0] ----D- C:\Program Files (x86)\Games
- O43 - CFD: 20/05/2011 - 21:35:58 - [6287101] ----D- C:\Program Files (x86)\GeoGebra
- O43 - CFD: 17/08/2011 - 17:05:00 - [113140994] ----D- C:\Program Files (x86)\GIMP-2.0
- O43 - CFD: 20/05/2011 - 21:37:04 - [0] ----D- C:\Program Files (x86)\Google
- O43 - CFD: 04/08/2011 - 20:47:48 - [186676511] --H-D- C:\Program Files (x86)\InstallShield Installation Information
- O43 - CFD: 20/03/2010 - 00:59:16 - [12985106] ----D- C:\Program Files (x86)\Intel
- O43 - CFD: 11/08/2011 - 08:02:12 - [7365828] ----D- C:\Program Files (x86)\Internet Explorer
- O43 - CFD: 29/06/2011 - 18:30:06 - [0] ----D- C:\Program Files (x86)\IObit
- O43 - CFD: 24/08/2011 - 18:52:20 - [122400899] ----D- C:\Program Files (x86)\iTunes
- O43 - CFD: 10/05/2011 - 12:58:12 - [89486639] ----D- C:\Program Files (x86)\Java
- O43 - CFD: 20/03/2010 - 00:59:34 - [4009901] ----D- C:\Program Files (x86)\JMicron
- O43 - CFD: 21/05/2011 - 15:01:36 - [75156940] ----D- C:\Program Files (x86)\Kaspersky Lab
- O43 - CFD: 21/05/2011 - 12:13:02 - [316421308] ----D- C:\Program Files (x86)\KiCad
- O43 - CFD: 22/08/2011 - 03:28:32 - [4553246] ----D- C:\Program Files (x86)\LogMeIn Hamachi
- O43 - CFD: 27/08/2011 - 18:45:42 - [2857664] ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware
- O43 - CFD: 23/05/2011 - 20:51:36 - [494496] ----D- C:\Program Files (x86)\Microsoft
- O43 - CFD: 25/06/2011 - 12:55:52 - [9362570] ----D- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
- O43 - CFD: 29/06/2011 - 07:32:40 - [581955243] ----D- C:\Program Files (x86)\Microsoft Office
- O43 - CFD: 14/06/2011 - 20:53:12 - [38411899] ----D- C:\Program Files (x86)\Microsoft Silverlight
- O43 - CFD: 30/06/2011 - 08:31:04 - [14904] ----D- C:\Program Files (x86)\Microsoft Visual Studio
- O43 - CFD: 23/05/2011 - 21:12:02 - [1387249] ----D- C:\Program Files (x86)\Microsoft Visual Studio 8
- O43 - CFD: 30/06/2011 - 08:31:14 - [3726168] ----D- C:\Program Files (x86)\Microsoft Works
- O43 - CFD: 03/07/2011 - 14:47:48 - [6076507] ----D- C:\Program Files (x86)\Microsoft XNA
- O43 - CFD: 10/05/2011 - 12:23:36 - [8175999] ----D- C:\Program Files (x86)\Microsoft.NET
- O43 - CFD: 17/08/2011 - 04:26:10 - [35990027] ----D- C:\Program Files (x86)\Mozilla Firefox
- O43 - CFD: 30/06/2011 - 08:31:08 - [26521] ----D- C:\Program Files (x86)\MSBuild
- O43 - CFD: 23/05/2011 - 14:28:20 - [0] ----D- C:\Program Files (x86)\MSECACHE
- O43 - CFD: 20/03/2010 - 00:31:20 - [154033] ----D- C:\Program Files (x86)\MSXML 4.0
- O43 - CFD: 15/07/2011 - 11:48:08 - [32512873] ----D- C:\Program Files (x86)\Mumble
- O43 - CFD: 26/08/2011 - 19:01:04 - [0] ----D- C:\Program Files (x86)\netcut
- O43 - CFD: 07/06/2011 - 17:07:26 - [11490044] ----D- C:\Program Files (x86)\Notepad++
- O43 - CFD: 25/07/2011 - 16:32:30 - [4706687] ----D- C:\Program Files (x86)\Overlook Fing 1.4
- O43 - CFD: 26/07/2011 - 03:13:44 - [0] ----D- C:\Program Files (x86)\Panda Security
- O43 - CFD: 13/08/2011 - 22:05:32 - [11716134] ----D- C:\Program Files (x86)\PCSX2 0.9.8
- O43 - CFD: 23/08/2011 - 03:42:02 - [12135435] ----D- C:\Program Files (x86)\PyScripter
- O43 - CFD: 06/07/2011 - 00:27:50 - [58059952] ----D- C:\Program Files (x86)\Python
- O43 - CFD: 06/08/2011 - 05:18:10 - [75697179] ----D- C:\Program Files (x86)\QuickTime
- O43 - CFD: 14/07/2009 - 01:32:40 - [39159041] ----D- C:\Program Files (x86)\Reference Assemblies
- O43 - CFD: 21/07/2011 - 17:49:32 - [1938610392] ----D- C:\Program Files (x86)\Sierra
- O43 - CFD: 26/08/2011 - 17:23:56 - [17360610] R---D- C:\Program Files (x86)\Skype
- O43 - CFD: 12/07/2011 - 06:54:54 - [0] ----D- C:\Program Files (x86)\sms-pc
- O43 - CFD: 28/08/2011 - 01:29:44 - [121433954] ----D- C:\Program Files (x86)\Starcraft
- O43 - CFD: 20/05/2011 - 20:40:38 - [35140704] ----D- C:\Program Files (x86)\Stardock
- O43 - CFD: 27/08/2011 - 23:02:26 - [32151137086] ----D- C:\Program Files (x86)\Steam
- O43 - CFD: 02/08/2011 - 15:47:08 - [489784] ----D- C:\Program Files (x86)\SystemRequirementsLab
- O43 - CFD: 18/06/2011 - 18:28:10 - [762920513] ----D- C:\Program Files (x86)\TmNationsForever
- O43 - CFD: 21/05/2011 - 13:32:40 - [5060484267] ----D- C:\Program Files (x86)\Ubisoft
- O43 - CFD: 21/05/2011 - 12:27:44 - [6042711] ----D- C:\Program Files (x86)\UltraISO
- O43 - CFD: 14/07/2009 - 00:57:08 - [0] --H-D- C:\Program Files (x86)\Uninstall Information
- O43 - CFD: 22/07/2011 - 02:38:54 - [12317555124] ----D- C:\Program Files (x86)\Valve
- O43 - CFD: 29/06/2011 - 06:46:04 - [26593828] ----D- C:\Program Files (x86)\VS Revo Group
- O43 - CFD: 17/06/2011 - 12:55:34 - [524800] ----D- C:\Program Files (x86)\Windows Defender
- O43 - CFD: 23/05/2011 - 20:51:12 - [48022] ----D- C:\Program Files (x86)\Windows Installer Clean Up
- O43 - CFD: 17/06/2011 - 12:55:36 - [6181376] ----D- C:\Program Files (x86)\Windows Mail
- O43 - CFD: 17/06/2011 - 12:55:34 - [5024017] ----D- C:\Program Files (x86)\Windows Media Player
- O43 - CFD: 14/07/2009 - 01:32:40 - [12197556] ----D- C:\Program Files (x86)\Windows NT
- O43 - CFD: 17/06/2011 - 12:55:34 - [4417800] ----D- C:\Program Files (x86)\Windows Photo Viewer
- O43 - CFD: 20/05/2011 - 20:26:06 - [189952] ----D- C:\Program Files (x86)\Windows Portable Devices
- O43 - CFD: 17/06/2011 - 12:55:36 - [5994626] ----D- C:\Program Files (x86)\Windows Sidebar
- O43 - CFD: 25/08/2011 - 22:48:10 - [251189] ----D- C:\Program Files (x86)\WinPcap
- O43 - CFD: 18/08/2011 - 01:05:30 - [0] ----D- C:\Program Files (x86)\Z8Games
- O43 - CFD: 28/08/2011 - 07:26:06 - [6599339] ----D- C:\Program Files (x86)\ZHPDiag
- O43 - CFD: 05/07/2011 - 18:30:34 - [3747043] ----D- C:\Program Files (x86)\Common Files\Adobe
- O43 - CFD: 24/08/2011 - 18:51:46 - [96662340] ----D- C:\Program Files (x86)\Common Files\Apple
- O43 - CFD: 26/08/2011 - 17:45:18 - [241664] ----D- C:\Program Files (x86)\Common Files\ATI Technologies
- O43 - CFD: 20/03/2010 - 01:01:28 - [53563] ----D- C:\Program Files (x86)\Common Files\ControlDeck
- O43 - CFD: 30/06/2011 - 08:31:14 - [86016] ----D- C:\Program Files (x86)\Common Files\DESIGNER
- O43 - CFD: 21/05/2011 - 12:27:44 - [262144] ----D- C:\Program Files (x86)\Common Files\EZB Systems
- O43 - CFD: 29/06/2011 - 00:21:48 - [8103129] ----D- C:\Program Files (x86)\Common Files\InstallShield
- O43 - CFD: 12/06/2011 - 23:14:22 - [1258951] ----D- C:\Program Files (x86)\Common Files\Java
- O43 - CFD: 15/07/2011 - 03:22:14 - [517484] ----D- C:\Program Files (x86)\Common Files\LogiShrd
- O43 - CFD: 09/07/2011 - 03:00:46 - [227231161] ----D- C:\Program Files (x86)\Common Files\microsoft shared
- O43 - CFD: 20/03/2010 - 00:43:48 - [354896] ----D- C:\Program Files (x86)\Common Files\Oberon Media
- O43 - CFD: 20/03/2010 - 00:59:18 - [166332] ----D- C:\Program Files (x86)\Common Files\postureAgent
- O43 - CFD: 13/07/2009 - 23:20:10 - [2702] ----D- C:\Program Files (x86)\Common Files\Services
- O43 - CFD: 13/07/2009 - 23:20:10 - [41103783] ----D- C:\Program Files (x86)\Common Files\SpeechEngines
- O43 - CFD: 20/05/2011 - 20:40:24 - [20832516] ----D- C:\Program Files (x86)\Common Files\Stardock
- O43 - CFD: 02/08/2011 - 15:26:54 - [411432] ----D- C:\Program Files (x86)\Common Files\Steam
- O43 - CFD: 30/06/2011 - 08:25:42 - [46862223] ----D- C:\Program Files (x86)\Common Files\System
- O43 - CFD: 09/05/2011 - 15:33:02 - [10799102] ----D- C:\Program Files (x86)\Common Files\Windows Live
- ~ Scan Program Folder in 00mn 05s
- ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
- O44 - LFC:[MD5.F9FCA628ECC9729566D5608792FE96BA] - 28/08/2011 - 06:08:04 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
- O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/08/2011 - 06:04:52 ---A- . (...) -- C:\UsbFix.txt [0]
- O44 - LFC:[MD5.AC849B99E032F4017BB1CE37934DD4AF] - 28/08/2011 - 05:33:22 ---A- . (...) -- C:\Windows\setupact.log [112]
- O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/08/2011 - 00:00:02 ---A- . (...) -- C:\Windows\setuperr.log [0]
- O44 - LFC:[MD5.78983057528BC8A320D9642322BFCFD7] - 27/08/2011 - 13:10:09 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
- O44 - LFC:[MD5.FAA8D5426BD7C04CFDB1286B19C4DFA4] - 26/08/2011 - 16:43:50 RSHAD . (.JMicron Technology Corporation - JMicron PCIe Flash Media Controller Driver.) -- C:\Windows\system32\drivers\jmcr.sys [175192]
- O44 - LFC:[MD5.8BA7054064AE3C08FEFC79A10150EB1E] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1662566]
- O44 - LFC:[MD5.C3913FC775A6E8F58B9520625DF5D9EC] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [121292]
- O44 - LFC:[MD5.536D1377210B00AB71B96FB0F463B140] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [149004]
- O44 - LFC:[MD5.C9878EF6BB8E9EF8B57ED087728883A6] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [652360]
- O44 - LFC:[MD5.8D1EAE4B514442A42EC56F2FA4B4A58F] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745518]
- O44 - LFC:[MD5.8BA7054064AE3C08FEFC79A10150EB1E] - 11/08/2011 - 07:09:52 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1662566]
- O44 - LFC:[MD5.C3913FC775A6E8F58B9520625DF5D9EC] - 11/08/2011 - 07:09:52 RSHAD . (...) -- C:\Windows\system32\perfc009.dat [121292]
- O44 - LFC:[MD5.536D1377210B00AB71B96FB0F463B140] - 11/08/2011 - 07:09:52 RSHAD . (...) -- C:\Windows\system32\perfc00C.dat [149004]
- O44 - LFC:[MD5.C9878EF6BB8E9EF8B57ED087728883A6] - 11/08/2011 - 07:09:52 RSHAD . (...) -- C:\Windows\system32\perfh009.dat [652360]
- O44 - LFC:[MD5.8D1EAE4B514442A42EC56F2FA4B4A58F] - 11/08/2011 - 07:09:52 RSHAD . (...) -- C:\Windows\system32\perfh00C.dat [745518]
- O44 - LFC:[MD5.DBB487D09F56C674430AC454FD8BCAB9] - 09/08/2011 - 19:43:40 RSHAD . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtihdW76.sys [231440]
- O44 - LFC:[MD5.D0A57DA77E09A4CAD7481D59D71FF1DF] - 04/08/2011 - 16:30:51 ---A- . (...) -- C:\Windows\DIIUnin.dat [41959]
- O44 - LFC:[MD5.11FA697004DAAAF162920A0DFF2B5584] - 04/08/2011 - 14:15:03 ---A- . (...) -- C:\Windows\DIIUnin.pif [2829]
- O44 - LFC:[MD5.BBF0373A7C04161F6AFF2B9543703FFC] - 04/08/2011 - 14:15:03 ---A- . (.Blizzard Entertainment - Diablo II Uninstaller.) -- C:\Windows\DIIUnin.exe [94208]
- O44 - LFC:[MD5.D3D64CF7B2BCEAA34A270F45A3FFFB36] - 04/08/2011 - 03:21:57 RSHAD . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\system32\drivers\dtsoftbus01.sys [270912]
- O44 - LFC:[MD5.ED00A17D267CE111E8EA9DC40CCBC65F] - 04/08/2011 - 03:15:12 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\deployJava1.dll [627600]
- O44 - LFC:[MD5.F57017B60928710F1652D9F4CFE6FC87] - 04/08/2011 - 03:15:12 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\java.exe [188808]
- O44 - LFC:[MD5.BAB9AEFD415CB12819939AD30D48AC91] - 04/08/2011 - 03:15:12 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Windows\SysNative\javaw.exe [188808]
- O44 - LFC:[MD5.40C1A8FE63D65E6D30D86C43A1B9F09F] - 04/08/2011 - 03:15:12 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\SysNative\javaws.exe [252296]
- O44 - LFC:[MD5.ED00A17D267CE111E8EA9DC40CCBC65F] - 04/08/2011 - 03:15:12 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\deployJava1.dll [627600]
- O44 - LFC:[MD5.F57017B60928710F1652D9F4CFE6FC87] - 04/08/2011 - 03:15:12 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\java.exe [188808]
- O44 - LFC:[MD5.BAB9AEFD415CB12819939AD30D48AC91] - 04/08/2011 - 03:15:12 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\javaw.exe [188808]
- O44 - LFC:[MD5.40C1A8FE63D65E6D30D86C43A1B9F09F] - 04/08/2011 - 03:15:12 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\system32\javaws.exe [252296]
- ~ Scan Files in 00mn 12s
- ---\\ Contrôle du Safe Boot (CSB) (O49)
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
- O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys
- ~ Scan CSB in 00mn 00s
- ---\\ Trojan Driver Search Data (HKLM) (O52)
- O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
- O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\system32\frapsv64.dll
- O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
- O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\system32\frapsv64.dll
- ~ Scan Keys in 00mn 00s
- ---\\ ShareTools MSconfig StartupReg (O53)
- O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)
- O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
- O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
- O53 - SMSR:HKLM\...\startupreg\LogMeIn Hamachi Ui [Key] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
- O53 - SMSR:HKLM\...\startupreg\Malwarebytes' Anti-Malware [Key] . (...) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (.not file.)
- O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
- O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\Steam.exe
- ~ Scan SMSR Keys in 00mn 00s
- ---\\ Microsoft Control Security Providers (O54)
- O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
- O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
- ~ Scan Keys in 00mn 00s
- ---\\ Microsoft Windows Policies System (O55)
- O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
- O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
- O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
- O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
- O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
- O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
- O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
- O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
- O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
- ~ Scan Keys in 00mn 00s
- ---\\ Microsoft Windows Policies Explorer (O56)
- O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
- O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
- O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
- O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
- ~ Scan Keys in 00mn 00s
- ---\\ Liste des Drivers Système (O58)
- O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 10/06/2009 - 20:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088]
- O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 13/07/2009 - 20:52:21 RSHAD . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536]
- O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 13/07/2009 - 20:52:21 RSHAD . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864]
- O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 13/07/2009 - 20:52:21 RSHAD . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440]
- O58 - SDL:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 09/05/2011 - 01:41:12 RSHAD . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [107904]
- O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 10/06/2009 - 20:52:20 RSHAD . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128]
- O58 - SDL:[MD5.540DAF1CEA6094886D72126FD7C33048] - 09/05/2011 - 01:41:12 RSHAD . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [27008]
- O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 13/07/2009 - 20:52:21 RSHAD . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632]
- O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 13/07/2009 - 20:52:21 RSHAD . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856]
- O58 - SDL:[MD5.0ACC06FCF46F64ED4F11E57EE461C1F4] - 04/10/2009 - 20:33:59 RSHAD . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athrx.sys [1542656]
- O58 - SDL:[MD5.D481083348138B4933ACFE95812DB71C] - 18/11/2009 - 05:30:55 RSHAD . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtiHdmi.sys [123408]
- O58 - SDL:[MD5.DBB487D09F56C674430AC454FD8BCAB9] - 09/08/2011 - 17:07:00 RSHAD . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtihdW76.sys [231440]
- O58 - SDL:[MD5.5B03217859B014B090CB5060C1D96875] - 26/08/2011 - 17:23:16 RSHAD . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [9980416]
- O58 - SDL:[MD5.35D2184A99AD4CD5D17284D6C9F382C9] - 26/08/2011 - 15:54:10 RSHAD . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\system32\drivers\atikmpag.sys [309248]
- O58 - SDL:[MD5.032D35C996F21D19A205A7C8F0B76F3C] - 20/03/2010 - 11:07:20 RSHAD . (.ASUS - ATK0100 ACPI Utility.) -- C:\Windows\system32\drivers\ATK64AMD.sys [15928]
- O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 15:34:23 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848]
- O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 13/07/2009 - 15:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432]
- O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 13/07/2009 - 15:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704]
- O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 13/07/2009 - 20:19:07 RSHAD . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720]
- O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 13/07/2009 - 15:41:10 RSHAD . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104]
- O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 13/07/2009 - 15:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976]
- O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 13/07/2009 - 15:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720]
- O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 15:34:28 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480]
- O58 - SDL:[MD5.F7CA3ACCF5AA0E2182546C5BE42B2E96] - 29/10/2009 - 21:50:03 RSHAD . (.Conexant Systems Inc. - 64-bit High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\CHDRT64.sys [704512]
- O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 13/07/2009 - 20:52:31 RSHAD . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488]
- O58 - SDL:[MD5.D3D64CF7B2BCEAA34A270F45A3FFFB36] - 04/08/2011 - 03:21:57 RSHAD . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\system32\drivers\dtsoftbus01.sys [270912]
- O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 10/06/2009 - 20:47:48 RSHAD . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496]
- O58 - SDL:[MD5.3C38648375B7F3988691F53A7AAE10A9] - 15/10/2009 - 04:23:19 RSHAD . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Windows\system32\drivers\ETD.sys [117760]
- O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 15:34:33 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016]
- O58 - SDL:[MD5.E403AACF8C7BB11375122D2464560311] - 20/05/2011 - 12:17:08 RSHAD . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [34152]
- O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 21/05/2011 - 16:35:42 RSHAD . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\system32\drivers\hamachi.sys [33856]
- O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 13/07/2009 - 15:31:59 RSHAD . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [31232]
- O58 - SDL:[MD5.B6AC71AAA2B10848F57FC49D55A651AF] - 20/03/2010 - 14:54:54 RSHAD . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\system32\drivers\HECIx64.sys [56344]
- O58 - SDL:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 20/05/2011 - 08:33:35 RSHAD . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [78720]
- O58 - SDL:[MD5.BBB3B6DF1ABB0FE35802EDE85CC1C011] - 06/08/2009 - 16:24:13 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStor.sys [408600]
- O58 - SDL:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 09/05/2011 - 01:41:26 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys [410496]
- O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 13/07/2009 - 20:48:04 RSHAD . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44112]
- O58 - SDL:[MD5.FAA8D5426BD7C04CFDB1286B19C4DFA4] - 26/08/2011 - 10:28:38 RSHAD . (.JMicron Technology Corporation - JMicron PCIe Flash Media Controller Driver.) -- C:\Windows\system32\drivers\jmcr.sys [175192]
- O58 - SDL:[MD5.3BE544029149D46814C2B0E5A7439A82] - 22/07/2011 - 16:32:46 RSHAD . (.JMicron Technology Corp. - JMicron NDIS6.20 Driver.) -- C:\Windows\system32\drivers\JME.sys [140816]
- O58 - SDL:[MD5.E63EF8C3271D014F14E2469CE75FECB4] - 20/07/2009 - 04:29:39 RSHAD . (.Pas de propriétaire - Keyboard Filter Driver.) -- C:\Windows\system32\drivers\kbfiltr.sys [15416]
- O58 - SDL:[MD5.8D7120743A0973CEAB548B475C9D4289] - 21/05/2011 - 16:43:56 RSHAD . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\system32\drivers\kl1.sys [460888]
- O58 - SDL:[MD5.CD146D8E525D6EEBDCAF24120A8AB9CE] - 21/05/2011 - 16:44:00 RSHAD . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\system32\drivers\kl2.sys [11864]
- O58 - SDL:[MD5.C1786C2F8DE0F62E076F7EF8DEA4E87A] - 21/05/2011 - 13:55:43 RSHAD . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_AMD64].) -- C:\Windows\system32\drivers\klif.sys [556120]
- O58 - SDL:[MD5.2A64B3A9EED93A2E96537B67C079FC96] - 21/05/2011 - 18:07:36 RSHAD . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\Windows\system32\drivers\klim6.sys [27736]
- O58 - SDL:[MD5.9468D07E91BA136D82415F5DFC1FE168] - 21/05/2011 - 19:27:10 RSHAD . (.Kaspersky Lab - KLMOUFLT Mouse Device Filter [fre_wlh_AMD64].) -- C:\Windows\system32\drivers\klmouflt.sys [22544]
- O58 - SDL:[MD5.1074C77A47835E03C15BF92452F9A750] - 15/07/2011 - 06:59:22 RSHAD . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\system32\drivers\LHidFilt.Sys [66840]
- O58 - SDL:[MD5.96999C364C649E2866A268F7420A304A] - 15/07/2011 - 06:59:22 RSHAD . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\Windows\system32\drivers\LMouFilt.Sys [60184]
- O58 - SDL:[MD5.64AEB5790901EA8854884981F104CAA6] - 15/07/2011 - 02:21:45 RSHAD . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\Windows\system32\drivers\LNonPnP.sys [18960]
- O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 13/07/2009 - 20:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [114752]
- O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 13/07/2009 - 20:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [106560]
- O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 13/07/2009 - 20:48:04 RSHAD . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [65600]
- O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 13/07/2009 - 20:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [115776]
- O58 - SDL:[MD5.9C4FB231B6E02F84580DE2F00F3C5293] - 10/05/2011 - 18:52:42 RSHAD . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [25912]
- O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 10/06/2009 - 20:48:04 RSHAD . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys [35392]
- O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 13/07/2009 - 20:48:04 RSHAD . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [284736]
- O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 13/07/2009 - 20:48:26 RSHAD . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51264]
- O58 - SDL:[MD5.351533ACC2A069B94E80BBFC177E8FDF] - 25/07/2011 - 12:07:26 RSHAD . (.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\system32\drivers\npf.sys [35344]
- O58 - SDL:[MD5.0A92CB65770442ED0DC44834632F66AD] - 09/05/2011 - 01:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [148352]
- O58 - SDL:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 09/05/2011 - 01:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [166272]
- O58 - SDL:[MD5.AF7CE12C4F3DC8CB2B07685C916BBCFE] - 14/07/2011 - 23:22:21 RSHAD . (.VSO Software - low level access layer for CD/DVD/BD devices.) -- C:\Windows\system32\drivers\pcouffin.sys [82816]
- O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 10/06/2009 - 20:45:46 RSHAD . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1524816]
- O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 13/07/2009 - 20:45:45 RSHAD . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [128592]
- O58 - SDL:[MD5.9C3AC71A9934B884FAC567A8807E9C4D] - 29/06/2011 - 10:21:26 RSHAD . (.VS Revo Group - Revo Uninstaller Minifilter.) -- C:\Windows\system32\drivers\revoflt.sys [31800]
- O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 13/07/2009 - 15:37:19 RSHAD . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040]
- O58 - SDL:[MD5.1BC348CF6BAA90EC8E533EF6E6A69933] - 10/06/2009 - 15:35:57 RSHAD . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSG664.sys [56832]
- O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 10/06/2009 - 20:45:45 RSHAD . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [43584]
- O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 13/07/2009 - 20:45:46 RSHAD . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [80464]
- O58 - SDL:[MD5.1CDADE078F46F10919F21E08E22D227D] - 29/12/2008 - 04:14:27 RSHAD . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys [35456]
- O58 - SDL:[MD5.F06A6DE8438F7446BFF9E61F31356521] - 11/08/2009 - 22:38:01 RSHAD . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys [1799680]
- O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 20:45:55 RSHAD . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [24656]
- O58 - SDL:[MD5.EA43DE1743C1BA0D2D17B8DB90C91D88] - 28/07/2011 - 15:08:58 RSHAD . (.TrueCrypt Foundation - TrueCrypt Driver.) -- C:\Windows\system32\drivers\truecrypt.sys [230352]
- O58 - SDL:[MD5.AA33FC47ED58C34E6E9261E4F850B7EB] - 07/06/2011 - 07:06:08 RSHAD . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl64.sys [51712]
- O58 - SDL:[MD5.F6B266FDA43A39924E40B1A42B91C983] - 21/05/2011 - 17:35:12 RSHAD . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\system32\drivers\VBoxDrv.sys [231600]
- O58 - SDL:[MD5.D119C47F337B5B5A80E259563703A922] - 21/05/2011 - 17:35:14 RSHAD . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\system32\drivers\VBoxNetAdp.sys [156912]
- O58 - SDL:[MD5.A10EB38D1395F5FCE91E07608E0185B6] - 21/05/2011 - 17:35:14 RSHAD . (.Oracle Corporation - VirtualBox Bridged Networking Driver.) -- C:\Windows\system32\drivers\VBoxNetFlt.sys [176560]
- O58 - SDL:[MD5.6DD88EA539217A9CFEFF4EF888C9D101] - 21/05/2011 - 17:35:14 RSHAD . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\system32\drivers\VBoxUSBMon.sys [56752]
- O58 - SDL:[MD5.8FC6E3D302550A06C7C5DB9F1AB54193] - 04/08/2011 - 05:29:20 RSHAD . (.Elaborate Bytes AG - VirtualCloneCD Driver.) -- C:\Windows\system32\drivers\VClone.sys [35840]
- O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 13/07/2009 - 20:45:55 RSHAD . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17488]
- O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 10/06/2009 - 20:45:55 RSHAD . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [161872]
- O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 02/06/2011 - 16:35:42 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\system32\hamachi.sys [33856]
- ~ Scan Drivers in 00mn 02s
- ---\\ Liste des outils de nettoyage (O63)
- O63 - Logiciel: UsbFix By TeamXscript - (.TeamXscript.) [HKLM] -- Usbfix
- O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
- ~ Scan ADS in 00mn 00s
- ---\\ Liste des services Legacy (O64)
- O64 - Services: CurCS - 28/07/2011 - C:\Windows\system32\DRIVERS\atikmdag.sys - No object(No service) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
- O64 - Services: CurCS - 02/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys - No object(No service) .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64
- O64 - Services: CurCS - 02/07/2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys - No object(No service) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2X64
- O64 - Services: CurCS - 29/01/2010 - C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys - No object(No service) .(.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - LEGACY_ISODRIVE
- O64 - Services: CurCS - 09/06/2010 - C:\Windows\system32\DRIVERS\kl1.sys - No object(No service) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL1
- O64 - Services: CurCS - 09/06/2010 - C:\Windows\system32\DRIVERS\kl2.sys - No object(No service) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL2
- O64 - Services: CurCS - 21/05/2011 - C:\Windows\system32\DRIVERS\klif.sys - No object(No service) .(.Kaspersky Lab - Klif Mini-Filter [fre_wlh_AMD64].) - LEGACY_KLIF
- O64 - Services: CurCS - 22/04/2010 - C:\Windows\system32\DRIVERS\klim6.sys - No object(No service) .(.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - LEGACY_KLIM6
- O64 - Services: CurCS - 06/07/2011 - C:\Windows\system32\drivers\mbam.sys - No object(No service) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR
- O64 - Services: CurCS - 25/06/2010 - C:\Windows\system32\drivers\npf.sys - No object(No service) .(.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) - LEGACY_NPF
- O64 - Services: CurCS - 16/05/2011 - C:\Windows\system32\DRIVERS\VBoxDrv.sys - No object(No service) .(.Oracle Corporation - VirtualBox Support Driver.) - LEGACY_VBOXDRV
- O64 - Services: CurCS - 16/05/2011 - C:\Windows\system32\DRIVERS\VBoxUSBMon.sys - No object(No service) .(.Oracle Corporation - VirtualBox USB Monitor Driver.) - LEGACY_VBOXUSBMON
- O64 - Services: CurCS - ??/??/???? - C:\Users\ASUS\AppData\Local\Temp\005DF8.tmp (.not file.) - No object (No service) .(...) - LEGACY_X6VA005
- ~ Scan Services in 00mn 02s
- ---\\ File Associations Shell Spawning (O67)
- O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*
- O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
- O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*
- O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*
- O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
- O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
- O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
- O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
- O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
- O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*
- O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*
- O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
- O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
- O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
- ~ Scan Keys in 00mn 00s
- ---\\ Start Menu Internet (O68)
- O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- ~ Scan Keys in 00mn 00s
- ---\\ Recherche particuliere à la racine de certains dossiers (O84)
- [MD5.AF7CE12C4F3DC8CB2B07685C916BBCFE] [SPRF][14/07/2011] (.VSO Software - low level access layer for CD/DVD/BD devices.) -- C:\Users\ASUS\AppData\Roaming\pcouffin.sys [82816]
- [MD5.6AC349AB0980C713CD8FFB37199443F3] [SPRF][23/06/2009] (.Bethesda Softworks - Fallout3.) -- C:\Users\ASUS\Desktop\Fallout3.exe [15044024]
- [MD5.9BDE0F461F037126DB1B820CED98A8F2] [SPRF][28/10/2008] (.Bethesda Softworks - Fallout 3 Launcher.) -- C:\Users\ASUS\Desktop\FalloutLauncher.exe [18552088]
- ~ Scan Files in 00mn 00s
- ---\\ Firewall Active Exception List (FirewallRules) (O87)
- O87 - FAEL: "{49FF230E-5F5E-420C-BF96-3DC2AC3BE37A}" | In - None - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
- O87 - FAEL: "{4A058CDE-408F-43B6-8382-55E16142FB8A}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
- O87 - FAEL: "{DB8169CC-1671-40AB-B034-95C72DBD9DEA}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
- O87 - FAEL: "{8AAD3F9A-82D4-48F3-9187-8A28694D75FE}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\Steam.exe
- O87 - FAEL: "{8677FB14-BC21-4ACC-A1FF-62DFF1162573}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files (x86)\Steam\Steam.exe
- O87 - FAEL: "TCP Query User{FA65A7FB-2D05-4989-A8E6-62101854DC27}C:\program files (x86)\python\pythonw.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\python\pythonw.exe
- O87 - FAEL: "UDP Query User{52FF24F9-D103-4814-8EC8-19F5A7C4F1F8}C:\program files (x86)\python\pythonw.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\python\pythonw.exe
- O87 - FAEL: "TCP Query User{51056688-9308-4912-8DAA-7B8965D6F334}C:\program files (x86)\ubisoft\the settlers 7 - a l’aube d’un nouveau royaume\data\base\_dbg\bin\release\settlers7r.exe" | In - Private - P6 - TRUE | .(.Blue Byte GmbH.) -- C:\program files
- O87 - FAEL: "UDP Query User{67E3CAEB-13DF-4988-9116-6DB468C4EC18}C:\program files (x86)\ubisoft\the settlers 7 - a l’aube d’un nouveau royaume\data\base\_dbg\bin\release\settlers7r.exe" | In - Private - P17 - TRUE | .(.Blue Byte GmbH.) -- C:\program file
- O87 - FAEL: "{D551EB62-4003-4006-822D-2379F8343C21}" | In - Public - P17 - TRUE | .(.Blue Byte GmbH.) -- C:\program files (x86)\ubisoft\the settlers 7 - a l’aube d’un nouveau royaume\data\base\_dbg\bin\release\settlers7r.exe
- O87 - FAEL: "{CC5125E8-AF33-4E27-BF38-B8F04D52E864}" | In - Public - P6 - TRUE | .(.Blue Byte GmbH.) -- C:\program files (x86)\ubisoft\the settlers 7 - a l’aube d’un nouveau royaume\data\base\_dbg\bin\release\settlers7r.exe
- O87 - FAEL: "{23BF891C-FCFA-4B69-93B3-87A8EEB25D93}" | In - Public - P6 - TRUE | .(.Codemasters Software Company Limited - Pas de description.) -- C:\Program Files (x86)\Codemasters\Operation Flashpoint Red River\RedRiver.exe
- O87 - FAEL: "{A94CDDA9-7E30-479D-BBCD-CFCBBBF11DFD}" | In - Public - P17 - TRUE | .(.Codemasters Software Company Limited - Pas de description.) -- C:\Program Files (x86)\Codemasters\Operation Flashpoint Red River\RedRiver.exe
- O87 - FAEL: "{09F8FF36-BF8C-4E74-BC5B-C99C41DDA0AF}" | In - Public - P6 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- C:\Program Files (x86)\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe
- O87 - FAEL: "{CB559732-D40B-45E6-BD76-2EA1E72CAAE7}" | In - Public - P17 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- C:\Program Files (x86)\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe
- O87 - FAEL: "TCP Query User{7A483601-8FDE-4EAE-AD49-7372017AB472}C:\program files (x86)\starcraft\starcraft.exe" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - StarCraft.) -- C:\program files (x86)\starcraft\starcraft.exe
- O87 - FAEL: "UDP Query User{97F80D39-6FD8-43C5-9DE2-89C9720EF44B}C:\program files (x86)\starcraft\starcraft.exe" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - StarCraft.) -- C:\program files (x86)\starcraft\starcraft.exe
- O87 - FAEL: "TCP Query User{B5FB3538-BB32-4550-9BE9-20B636877714}C:\program files (x86)\steam\steamapps\saliste\insurgency\hl2.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\saliste\insurgency\hl2.exe
- O87 - FAEL: "UDP Query User{2BBA0CF8-6D3D-462E-B558-F91D417F3497}C:\program files (x86)\steam\steamapps\saliste\insurgency\hl2.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\steam\steamapps\saliste\insurgency\hl2.exe
- O87 - FAEL: "TCP Query User{7B5A3CA2-4F82-4515-B809-C68C418234DA}C:\program files (x86)\sierra\empire earth\empire earth.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\sierra\empire earth\empire earth.exe
- O87 - FAEL: "UDP Query User{42854AF0-60F5-4E13-ADAB-3AE7B6F8BE2F}C:\program files (x86)\sierra\empire earth\empire earth.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\sierra\empire earth\empire earth.exe
- O87 - FAEL: "TCP Query User{013CD58C-999D-4F59-879E-5E6DD3C1471E}C:\users\asus\appdata\roaming\gameranger\gameranger\gameranger.exe" | In - Private - P6 - TRUE | .(.GameRanger Technologies.) -- C:\users\asus\appdata\roaming\gameranger\gameranger\gamerang
- O87 - FAEL: "UDP Query User{15FD918D-EFC1-4F9A-9F27-8C54C872302B}C:\users\asus\appdata\roaming\gameranger\gameranger\gameranger.exe" | In - Private - P17 - TRUE | .(.GameRanger Technologies.) -- C:\users\asus\appdata\roaming\gameranger\gameranger\gameran
- O87 - FAEL: "TCP Query User{4E8CA96B-007E-4CB6-BCD3-CE60B36AA3C0}C:\program files (x86)\sierra\empire earth - the art of conquest\ee-aoc.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\sierra\empire earth - the art of conquest\ee-aoc.e
- O87 - FAEL: "UDP Query User{B9D3629E-6BDF-4F3E-B9AE-CC3C5FED62B7}C:\program files (x86)\sierra\empire earth - the art of conquest\ee-aoc.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\sierra\empire earth - the art of conquest\ee-aoc.
- O87 - FAEL: "{392BF202-2B74-4F81-8CEC-30BF119341AB}" | In - Private - P6 - TRUE | .(.Firaxis Games - Sid Meier's Civilization 4.) -- C:\Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe
- O87 - FAEL: "{DEE1DA3C-7863-4248-AF17-C2169E00617E}" | In - Private - P17 - TRUE | .(.Firaxis Games - Sid Meier's Civilization 4.) -- C:\Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe
- O87 - FAEL: "TCP Query User{F2C45D50-64B9-4395-9EA6-28CEF5ED7613}C:\users\asus\dock jimmy\eclipse\eclipse.exe" | In - Private - P6 - TRUE | .(...) -- C:\users\asus\dock jimmy\eclipse\eclipse.exe
- O87 - FAEL: "UDP Query User{51EACF1A-0EEC-4B26-B4B5-E11942EC4931}C:\users\asus\dock jimmy\eclipse\eclipse.exe" | In - Private - P17 - TRUE | .(...) -- C:\users\asus\dock jimmy\eclipse\eclipse.exe
- O87 - FAEL: "{0F9F22AE-17FF-414A-B859-86DCF4E41B16}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
- O87 - FAEL: "{D0FBA0DC-24C7-4C11-91B4-509841B36049}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
- O87 - FAEL: "TCP Query User{73716843-658C-47C4-83E7-B22BEFB511B0}C:\program files (x86)\valve\portal 2\portal2.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\valve\portal 2\portal2.exe
- O87 - FAEL: "UDP Query User{9FC780E5-292D-4E43-93D4-C494CE48595F}C:\program files (x86)\valve\portal 2\portal2.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\valve\portal 2\portal2.exe
- O87 - FAEL: "TCP Query User{3C36C032-F699-496B-9658-0649FFD2B6FC}C:\users\asus\appdata\roaming\gameranger\gameranger\gameranger.exe" | In - Public - P6 - TRUE | .(.GameRanger Technologies.) -- C:\users\asus\appdata\roaming\gameranger\gameranger\gamerange
- O87 - FAEL: "UDP Query User{8EABFC97-D396-40C4-A6D8-F1B310753FA2}C:\users\asus\appdata\roaming\gameranger\gameranger\gameranger.exe" | In - Public - P17 - TRUE | .(.GameRanger Technologies.) -- C:\users\asus\appdata\roaming\gameranger\gameranger\gamerang
- O87 - FAEL: "{BC9ED561-6908-47B4-9CA7-E38A020D6A9F}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
- O87 - FAEL: "TCP Query User{FA3C10B8-05FE-4098-BE3A-A9D86F763E10}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
- O87 - FAEL: "UDP Query User{790122A7-99F6-4F14-BA38-7968069B6205}C:\program files\java\jre7\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
- O87 - FAEL: "{AA1E59FA-3D3C-4A0A-9FD2-D7169945A340}" | In - Public - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
- O87 - FAEL: "{5809E2E1-8BE7-4899-919D-00E1E944F294}" | In - Public - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
- O87 - FAEL: "{04ABDC01-853E-4C69-9950-F1E3058A1B3B}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\saliste\counter-strike source\hl2.exe
- O87 - FAEL: "{85AA20EB-98B1-4044-A02F-A4E3DE672DD9}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\saliste\counter-strike source\hl2.exe
- O87 - FAEL: "{C3196FC4-88E3-4084-81B8-FBCDF053D098}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
- O87 - FAEL: "{652159D1-A7BC-489A-89C4-51ADC1790DAE}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\saliste\counter-strike source\hl2.exe
- O87 - FAEL: "{12AA9F79-D82B-4D2E-BE44-0C087115FCC8}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\saliste\counter-strike source\hl2.exe
- ~ Scan Firewall in 00mn 02s
- ---\\ Recherche détournement de DNS routeur (O89)
- Serveur : UnKnown
- Address: 192.168.1.1
- Nom : www.l.google.com
- Addresses: 74.125.226.177
- 74.125.226.178
- 74.125.226.180
- 74.125.226.179
- 74.125.226.176
- Aliases: www.google.fr
- www.google.com
- ~ Scan DNS in 00mn 02s
- ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
- SR - | Auto 05/07/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
- SR - | Auto 26/08/2011 204288 | (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe
- SR - | Auto 20/05/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
- SR - | Auto 20/03/2010 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
- SR - | Auto 20/03/2010 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
- SR - | Auto 21/05/2011 365336 | (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
- SR - | Auto 22/07/2011 387944 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- SR - | Auto 22/08/2011 2329480 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
- SS - | Demand 21/05/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
- SR - | Demand 24/08/2011 934760 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
- SS - | Demand 15/07/2011 359192 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
- SR - | Auto 20/03/2010 262144 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
- SS - | Demand 15/07/2011 421376 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
- SR - | Disabled 27/08/2011 366640 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
- SS - | Demand 0 | Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (...) - %ProgramFiles(x86)%\WinPcap\rpcapd.exe
- SS - | Disabled 20/05/2011 411432 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
- SR - | Auto 20/03/2010 2314240 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
- SR - | Auto 13/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe
- SS - | Demand 0 | (X6va005) . (...) - C:\Users\ASUS\AppData\Local\Temp\005DF8.tmp
- ~ Scan Services in 00mn 03s
- ---\\ Recherche Master Boot Record Infection (MBR)(O80)
- Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
- Run by ASUS at 28/08/2011 07:26:51
- device: opened successfully
- user: error reading MBR
- Disk trace:
- error: Read Descripteur non valide
- kernel: error reading MBR
- ~ Scan MBR in 00mn 05s
- ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
- Written by ad13, http://ad13.geekstog
- Run by ASUS at 28/08/2011 07:26:53
- ********* Dump file Name *********
- C:\PhysicalDisk0_MBR.bin
- ~ Scan MBR in 00mn 07s
- End of the scan (1288 lines in 00mn 57s)(0)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement