Probleme pointeur qui se fige lorsque je suis sur le net • page 2

[Del-crosseur]

re,

Installe:

Malwarebytes' Antimalware par Marcin Kleczynski

*** Met-le à jour puis choisi, Exécuter un examen complet

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.

*** il est conseillé de désactivé Tea-Timer si tu as Spybot-S&D juste le temps du scan.

Voici comment faire: Lancez Spybot-S&D, passez en Mode avancé via le Menu Mode (en haut) ? cliquez sur Oui--> choisissez Outils dans la barre de navigation sur la gauche -->Résident et là vous pouvez décocher les cases situées devant les deux outils.

[cricri001]

coucou,

Mon pc a enfin fini son analyse apres 2 heures de bonheur et d activite pour ses neurones.
Il a trouve 4 pattes a notre cheval.
Il doit pas etre partie bien loin sans ses pattes...

Code: Tout sélectionner

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de donn้es: 5418

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

30/12/2010 05:39:36
mbam-log-2010-12-30 (05-39-36).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
El้ment(s) analys้(s): 270850
Temps ้coul้: 2 heure(s), 1 minute(s), 15 seconde(s)

Processus m้moire infect้(s): 0
Module(s) m้moire infect้(s): 0
Cl้(s) du Registre infect้e(s): 0
Valeur(s) du Registre infect้e(s): 0
El้ment(s) de donn้es du Registre infect้(s): 0
Dossier(s) infect้(s): 0
Fichier(s) infect้(s): 4

Processus m้moire infect้(s):
(Aucun ้l้ment nuisible d้tect้)

Module(s) m้moire infect้(s):
(Aucun ้l้ment nuisible d้tect้)

Cl้(s) du Registre infect้e(s):
(Aucun ้l้ment nuisible d้tect้)

Valeur(s) du Registre infect้e(s):
(Aucun ้l้ment nuisible d้tect้)

El้ment(s) de donn้es du Registre infect้(s):
(Aucun ้l้ment nuisible d้tect้)

Dossier(s) infect้(s):
(Aucun ้l้ment nuisible d้tect้)

Fichier(s) infect้(s):
C:\WINDOWS\system32\makecab.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\$NtServicePackUninstall$\makecab.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
E:\bureau christophe\telechargement\Logiciel\office pro_2010\mini-KMS_Activator_v1.052\mini-KMS_Activator_v1.052.exe (Riskware.Keygen) -> Quarantined and deleted successfully.
E:\bureau a ranger nov 2010\All Reflexive Games Universal Crack v5.0 [FFF].exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.


En attente de mise a mort du cheval afin de pouvoir le griller ou au moins de l exterminer.

[Del-crosseur]

Re ,

A tu déjà étais infecter au par avant ... ?

On continue ...


Scan en ligne avec -> NOD32

_->Cliquez sur le bouton vert Eset Online Scanner
_->Accepter les conditions d’utilisation, pour cela, cochez la case « Oui, j’accepte les termes du contrat de licence »
_->Cliquez ensuite sur le bouton Start
_->Acceptez l’installation de l’ActiveX NOD32
_->Le téléchargement des définitions virales s’effectuent, cela peut prendre du temps selon la vitesse de connexion.
_->Cocher la case "Supprimer les menaces détectées"
_->Clique sur le bouton Démarrer pour lancer le scan
_->Le scan du PC se lance, les menaces détectées apparaissent dans la liste en dessous de la barre de progression.
_->Laissez l’analyse s’effectuer entièrement
_->Cliquer sur le bouton « liste des menaces » permettant d’exporter la liste dans un fichier texte
_->Enregistrer celui-ci sur votre bureau par exemple

Poste moi le rapport ...

[cricri001]

Coucou,

Re ,
A tu déjà étais infecter au par avant ... ?

Pas a ma connaissance par un troyens venu d ailleurs qui se cache aussi bien...
J ai deja eu des virus recalcitrant, mais en general j arrive a me depatouiller tout seul.
Mais cette fois ci, sans la souris, c est un peu casse couille de chercher a droite et a gauche a base de <tabulation> <alt + F4> de fleches de clic a base de barre d espace, de faire le tour de tout les liens d une page juste pour cliquer le lien qu on vient de passer...et j en passe... les petits plaisirs de surfer sans net. Et parfois, on peut meme pas cliquer ou faire defiler un texte (ou alors je connais pas les raccourcis) pour accepter la licence d un fichier par exemple.
Donc je me suis dit qu un bon coup de mains s imposait.

Si t as des solutions pour se proteger efficacement sans faire ralentir la becane, je suis preneur de configuration actualise dans ce but.
Un firewall + 1 antivirus (j ai delaisser les antispyware lourd pour cause de lenteur).
ESET online est en court de telechargement, l analyse ne saurait tarder.

[Del-crosseur]

OK

Elle peut durais jusque 2H environs
En faite tu à une infection Notepad.exe .

Je t'explique ..

Ce cheval de Troie permet aux pirates d'accéder et de contrôler un système infecté. TROJ_QAZ a été initialement distribué en tant que "Notepad.exe", mais peuvent également apparaître avec des noms différents. Une fois qu'un fichier infecté est exécuté, TROJ_QAZ modifie le registre Windows afin qu'il devienne active chaque fois que Windows est démarré. TROJ_QAZ renomme également l'original "notepad.exe" fichier "note.com», puis se copie comme "notepad.exe" dans le dossier Windows. De cette façon, le cheval de Troie est également lancé à chaque fois qu'un utilisateur exécute le Bloc-notes. TROJ_QAZ tente également de se propager à d'autres lecteurs partagés sur les réseaux locaux. Ce cheval de Troie n'a pas de masse elle-même e-mail sur les listes dans le carnet d'adresse des utilisateurs cependant.

J'ai bien peur que tu le soit ... :S

Je te file la procédure une fois le Scan NOD32 fini

[cricri001]

Coucou,

Analyse de presque 3 heures, mais au moins on se rapproche de nos chevaux

Il a trouve 2 morceaux :

Code: Tout sélectionner

C:\Program Files\Mozilla Firefox\SmitfraudFix\Process.exe   Win32/PrcView application   nettoy้ par suppression - mis en quarantaine
D:\ao\Install_CookingDash.EXE   une variante de Win32/AdInstaller application   supprim้ - mis en quarantaine


La procedure maintenant ?

[Del-crosseur]

Ok ,

Fais ceci maintenant stp ...

1_Cliquez sur "Démarrer", "Tous les programmes», «Accessoires, Outils Système" "et" Restauration du système. " Cochez la case "Créer un point de restauration" cliquez sur "Suivant" et suivez les instructions.

2_Aller à l'éditeur de registre Windows en cliquant sur "Démarrer" puis "Exécuter". Tapez "regedit" dans la boîte de dialogue et cliquez sur "OK". Une fenêtre de deux carreaux s'ouvre.

3_Rechercher des "HKEY_LOCAL_MACHINE" dans le volet gauche et cliquez sur le signe "+" à côté de lui pour développer l'arborescence du menu.
Faites de même sur les menus suivants imbriquées dans cet ordre:

Logiciels
Microsoft
Windows
CurrentVersion

Sous le dossier CurrentVersion, cliquez sur le dossier Run pour afficher son contenu dans le volet droit.


4_Sous la colonne de données, pour toutes les entrées contenant le texte "notepad.exe" - cette liste contient tous les programmes qui se lancent au démarrage de Windows.
Bloc-notes n'est pas une de ces applications dans une installation normale de Windows, donc ce serait l'indication du virus Qaz Troie. Sélectionnez la ligne contenant "notepad.exe" en cliquant dessus, puis appuyez sur "Supprimer" pour le supprime.


5_Faites une recherche système du fichier "note.com" et une fois trouvé, renommez le en "notepad.exe" et écraser le fichier "notepad.exe" dans le dossier C: \ WINDOWS \ system32.
Redémarrez votre ordinateur. Cela permettra de restaurer votre fichier notepad.exe d'origine

Bonne nuit

[cricri001]

Coucou,

--> Je ne vois pas de Notepad dans le dossier Windows\CurrentVersion\run dans la partie droite.

Si tu peux agrandir l image, tu verras fssui, GrooveMonitor que je voudrais supprimer proprement.
IMJPMIG8.1, PHIME2002A, PHIME2002ASync que je ne connais pas du tout. --> Si quelqu un en connais l utilite, ce serait sympa de me le dire.

--> La recherche de fichier nomme <note.com> n a rien donne.

On cherche le mauvais cheval :p

[Del-crosseur]

Bonjour

Se sont des logiciels sans danger ...

On va faire autrement , si cela ne fonctionne pas je me renseigne au près de mes supérieurs ...

1. Cliquez sur Démarrer -> Exécuter
Tape regedit et appuyez sur touche ENTRER

2. Dans le panneau de gauche, cliquez sur le "+" à gauche de ce qui suit:

HKEY_LOCAL_MACHINE
Logiciels
Microsoft
Windows
CurrentVersion
Run

3. Dans le volet droit, recherche pour l'une des clés de Registre qui contient la valeur des données de :
startIE = XXXX \ Notepad.exe.

4. Dans la fenêtre de droite, sélectionnez la clé de Registre qui charge le fichier et appuyez sur la touche SUPPR. Répondez OUI pour supprimer l'entrée.
Quittez le Registre.
Cliquez sur Démarrer choisissez "Redémarrer" l'ordinateur et cliquez sur OK.

5. Utilisez l'outil de recherche dans le menu Démarrer pour trouver et renommer Note.com à Notepad.exe.

[cricri001]

Coucou,

J ai bien fait la recherche comme tu me l as demande.
J ai meme pousser a chercher dans tout le registre chaque entree en Notepad.exe.
Aucunes keys, Values, Data ayant la forme <Notepad.exe> n est precedee d un Start IE= xxxxx...Notepad.exe
Il en existe bien des Notepad.exe, mais aucune ne semble liee a un start IE.
Je pense qu on a soit la mauvaise methode, soit on cherche le mauvais cheval ou alors j ai rate un truc. (je suis pas docteur en informatique, mais je pense pas etre une quiche non plus )

J ai meme fait la recherche du fichier <Note.com> dans tout les disques dur, il ne semble pas exister sous forme de fichier dans mon ordinateur.

En attente de solution

[Del-crosseur]

Ok , je me renseigne au près de mes supérieurs ...

Pendants se temps peut tu refaire un ZHPDiag stp ... On va viré les petites infections et se qui n'a plus rien à faire
sur ton PC .

Bonne journée

[cricri001]

Ok,

Code: Tout sélectionner

Rapport de ZHPDiag v1.27.1462 par Nicolas Coolman, Update du 27/12/2010
Run by Christophe at 30/12/2010 21:45:41
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)

---\\ System Information
Windows XP Professional Service Pack 2 (Build 2600)
Processor: x86 Family 15 Model 2 Stepping 4, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 511 MB (4% free)
System Restore: Activ้ (Enable)
System drive C: has 0 GB (1%) free of 18 GB

---\\ Logged in mode
Computer Name: HOME-D835667A1B
User Name: Christophe
All Users Names: SUPPORT_388945a0, HelpAssistant, Guest, Christophe, ASPNET, Administrator, Admin,
Unselected Option:  O1,O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 18 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 20 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 20 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)
H:\ CD-ROM drive (Not Inserted)
I:\ CD-ROM drive (Not Inserted)
J:\ CD-ROM drive (Not Inserted)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK


---\\ Search Generic System Files
[MD5.42D32722B805D7DF42D30487A0BCBD78] - (.Microsoft Corporation - Windows Explorer.) (.30/07/2007 09:54:51.) -- C:\Windows\Explorer.exe [1033216]
[MD5.01C3346C241652F43AED8E2149881BFE] - (.Microsoft Corporation - Windows NT Logon Application.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\Winlogon.exe [502272]
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\drivers\atapi.sys [95360]
[MD5.7179AC3F4258AEC9627590A842FDA1D6] - (.Microsoft Corporation - NT File System Driver.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\drivers\ntfs.sys [574976]


---\\ Running Processes
[MD5.7207DB389CEAD101251883511A676F91] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe   [135336]
[MD5.8942C0BE637B7EBFBA304D48665B516E] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe   [267944]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe   [76968]
[MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376]
[MD5.FF23862146A682FCC3DBAA002E22F958] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe   [150040]
[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE   [322120]
[MD5.56C92289535834AA26144B4368932DCB] - (.Sunbelt Software, Inc. - Sunbelt Personal Firewall SbPFLnch.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe   [95528]
[MD5.B3C9D712962DB83C280D0C4AAC8963A8] - (.Sunbelt Software, Inc. - Sunbelt Firewall Service.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe   [1365288]
[MD5.4BE6B4D0DB1E5A8167066C9E2F4F2764] - (.Speedbit Ltd. - VideoAcceleratorEngine.) -- C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe   [288368]
[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe   [602392]
[MD5.3CAADDDA144B326B0111C07E0FEE56F3] - (.Sunbelt Software, Inc. - Sunbelt Firewall GUI.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe   [1705256]
[MD5.BA893C5AB87CF065F1E2CB2937D8FE57] - (.Speedbit Ltd. - VideoAcceleratorEngine.) -- C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe   [124536]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe   [53472]
[MD5.3FFE8752B77382C5050006C31781D05A] - (.Unknown owner - No comment.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe   [15872]
[MD5.FD32127449AF0B96EBECA3CAAB74E423] - (.HP - No comment.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe   [172032]
[MD5.4FEA5B94C6A96860620A62E4A19BD07D] - (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd.exe   [49152]
[MD5.F5F1A8CDD473D55F9BF6FE23F715B0FA] - (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe   [241664]
[MD5.4022BC4ABCE309F433101911BE83C61C] - (.Unknown owner - No comment.) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe   [2656528]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe   [281768]
[MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe   [248552]
[MD5.38D198A2DD54A67120040566A38103BA] - (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe   [31016]
[MD5.9B8BBF96B67046D2CBB39AD220CB267D] - (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe   [395640]
[MD5.F34E7705751BB413283434697BF8E55D] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe   [357696]
[MD5.00E662B7A5F67DDB81AFF1BEC1573D7F] - (.Unknown owner - No comment.) -- C:\Program Files\Trackerx90\Anti Removable Disk Virus (ARDV) by Trackerx90\ardv32.exe   [172099]
[MD5.DA6B945E561B1D1DA67663BB45B4B868] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor (CUE).) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe   [237568]
[MD5.E698235FE26505F2B0F4A60CBBE7A27A] - (.Unknown owner - No comment.) -- C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe   [558864]
[MD5.D03EE270D6D1A47C06845F04A80A413D] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\PROGRA~1\Yahoo!\Messenger\ymsgr_tray.exe   [79160]
[MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   [912344]
[MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe   [16856]
[MD5.10A3DB2D6369AA2740F5796A08057BF9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\ZHPDiag\ZHPDiag.exe   [621568]


---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2)
P2 - FPN:Firefox Plugin Navigator . (.The OpenSSL Project, http://www.openssl.org - OpenSSL Shared Library.) -- C:\Program Files\Mozilla Firefox\Plugins\libdivx.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.5.0.52.) -- C:\Program Files\Mozilla Firefox\Plugins\npdivx32.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Foxit Software Company - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\npFoxitReaderPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.The OpenSSL Project, http://www.openssl.org - OpenSSL Shared Library.) -- C:\Program Files\Mozilla Firefox\Plugins\ssldivx.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Unknown owner - No comment.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 1.5.0.52.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
P2 - FPN: [HKLM] [@fileplanet.com/fpdlm] - (.IGN Entertainment - DLM Netscape Plugin (2.3.10.115).) -- C:\Program Files\Download Manager\npfpdlm.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
P2 - FPN: [HKLM] [@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6] - (.Yahoo! Inc. - Yahoo Application State Plugin version 1.0.0.7.) -- C:\Program Files\Yahoo!\Shared\npYState.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.5] - (.the VideoLAN Team - Version 1.1.5, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
M0 - MFSP: prefs.js [Christophe - wb1iaj2x.default] http://www.yahoo.fr/
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\fr@dictionaries.addons.mozilla.org] [] Dictionnaire franรงais ยซRรฉforme 1990ยป v3.5 (.Olivier R..)
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{3112ca9c-de6d-4884-a869-9855de68056c}] [] Google Toolbar for Firefox v7.1.20101113Wb1 (.Google Inc..)
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.1.1.20091029021655 (.Yahoo!.)
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}] [] ImTranslator v3.3.5 (.Smart Link Corporation.)
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.8.1 (.Michel Gutierrez.)
M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.2 (.Wladimir Palant.)


---\\ Internet Explorer Extensions, Start, Search (R3,R0,R1)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)) -- C:\WINDOWS\system32\ieframe.dll


---\\ Changed inifile Value, Mapped to Registry (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"


---\\ Browser Helper Objects (O2)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} Orphean Key
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} . (.Microsoft Corporation - Family Safety Browser Helper Object Library.) -- C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Yahoo! Inc - Yahoo! Single Instance for Mail.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll


---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll


---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [UnlockerAssistant] . (.Unknown owner - No comment.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - No comment.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HP Component Manager] . (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (.Unknown owner - No comment.) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe
O4 - HKLM\..\Run: [fssui] . (.Microsoft Corporation - Windows Live Family Safety Filter.) -- C:\Program Files\Windows Live\Family Safety\fsui.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKCU\..\Run: [igndlm.exe] . (.IGN Entertainment - Download Manager.) -- C:\Program Files\Download Manager\DLM.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [uTorrent] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe
O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [igndlm.exe] . (.IGN Entertainment - Download Manager.) -- C:\Program Files\Download Manager\DLM.exe


---\\ Other User Links (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\CCleaner.lnk . (.Piriform Ltd.)  -- C:\Program Files\CCleaner\CCleaner.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk . (.Malwarebytes Corporation.)  -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\MBRCheck.lnk . (.Unknown owner.)  -- C:\ZHPDiag\mbrcheck.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk . (.SUPERAntiSpyware.com.)  -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\VLC media player.lnk . (.Unknown owner.)  -- C:\Program Files\VideoLAN\VLC\vlc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\ZHPDiag.lnk . (.Nicolas Coolman.)  -- C:\ZHPDiag\ZHPDiag.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\ZHPFix.lnk . (.Nicolas Coolman.)  -- C:\ZHPDiag\ZHPFix.exe
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\AD-R.lnk . (.Unknown owner.)  -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\film.lnk . (.Unknown owner.)  -- E:\bureau christophe\telechargement\film
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Game.lnk . (.Westwood Studios.)  -- E:\CC\EA Games\Command & Conquer The First Decade\Command & Conquer(tm) Tiberian Sun(tm)\SUN\Game.exe
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\JDownloader.lnk . (.AppWork UG (haftungsbeschr?nkt).)  -- C:\Program Files\JDownloader\JDownloader.exe
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Paint.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\mspaint.exe


---\\ Extra items in the IE right-click menu (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe


---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (.Unknown owner - No comment.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Skype add-on for Internet Explorer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Unknown owner - No comment.) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll


---\\ Site in Trusted Zone (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org
O15 - Trusted Zone: [HKCU\...\Domains\www] *.chat-land.org


---\\ ActiveX Objects (Downloaded Program Files) (O16)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


---\\ Extra protocols and protocol Hijackers (O18)
O18 - Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} . (.Hewlett-Packard Company - HPCETIUI Protocol Handler Module.) -- C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL


---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: !SASWinLogon . (.SUPERAntiSpyware.com - SUPERAntiSpyware WinLogon Processor.) -- C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll


---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\wpdshserviceobj.dll
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll


---\\ SharedTaskScheduler (O22)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll


---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service:  (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service:  (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service:  (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service:  (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: SbPF.Launcher (SbPF.Launcher) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall SbPFLnch.) - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service:  (SPF4) . (.Sunbelt Software, Inc. - Sunbelt Firewall Service.) - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service:  (VideoAcceleratorService) . (.Speedbit Ltd. - VideoAcceleratorEngine.) - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service:  (YahooAUService) . (.Yahoo! Inc. - AutoUpater Service Module.) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe


---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Unknown owner - No comment.) -  (.not file.)


---\\ Task Planned Automatically(039)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GlaryInitialize.job
[MD5.38BB7FFCBD53051FA559FA362606BB74] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe


---\\ Drivers launched at startup (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (asplg) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\System32\asplg.sys (.not file.)
O41 - Driver:  (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver:  (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\Windows\System32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\Windows\System32\DRIVERS\redbook.sys
O41 - Driver:  (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys
O41 - Driver:  (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
O41 - Driver:  (SbFw) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall driver.) - C:\Windows\System32\drivers\SbFw.sys
O41 - Driver:  (sbhips) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall Host Intrusion Pr.) - C:\WINDOWS\system32\drivers\sbhips.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver:  (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys


---\\ Software installed (O42)
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{5A2F65A4-808F-4A1E-973E-92E17824982D}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{430971B1-C31E-45DA-81E0-72C095BAB72C}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: 7-Zip 4.45 beta - (.Microsoft Corporation.) [HKLM] -- 7-Zip
O42 - Logiciel: ?Torrent - (.SpeedBit Ltd..) [HKLM] -- uTorrent
O42 - Logiciel: ?Torrent - (.Trackerx90.) [HKCU] -- uTorrent
O42 - Logiciel: ACDSee 9 Photo Manager - (.ACD Systems Ltd..) [HKLM] -- {B2D41883-3BFC-4BA0-A2F6-5A2C9836C238}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Acrobat Reader 3.01 - (.C_XX.) [HKLM] -- Adobe Acrobat Reader 3.01
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Photoshop 7.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop 7.0
O42 - Logiciel: Adobe Reader X - Fran?ais - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Alerte Rouge Windows 95 - (.Adobe Systems, Inc..) [HKLM] -- Alerte Rouge
O42 - Logiciel: Anti Removable Disk Virus (ARDV) by Trackerx90 - (.Trackerx90.) [HKLM] -- {FB3BFBE2-8AF5-4C6B-8B00-ED87F1E7C6EC}
O42 - Logiciel: Aspell French Dictionary-0.50-3 - (.GNU.) [HKLM] -- Aspell French Dictionary_is1
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: C:\Program Files\Aspell - (.Trackerx90.) [HKLM] -- Aspell
O42 - Logiciel: C:\Program Files\Aspell - (.Trackerx90.) [HKLM] -- Aspell-fr
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CPL All-in-One - (.KelCorp.) [HKLM] -- CPLBonus
O42 - Logiciel: Coffret de pilotes Logitech QuickCam - (.Microsoft Corporation.) [HKLM] -- lvdrivers_11.90
O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: Critical Update for Windows Media Player 11 (KB959772) - (.Microsoft Corporation.) [HKLM] -- KB959772_WM11
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29}
O42 - Logiciel: Download Manager 2.3.10 - (.IGN Entertainment, Inc..) [HKLM] -- Download Manager
O42 - Logiciel: EZ Plus 2009 - (.Startup Design & Network.) [HKLM] -- {209C6E15-E71E-4DF9-8662-EA0574DECA2C}
O42 - Logiciel: EnglishToThai - (.SpeedBit Ltd..) [HKLM] -- ST6UNST #1
O42 - Logiciel: Foxit Creator - (.Foxit Corporation.) [HKLM] -- Foxit Creator
O42 - Logiciel: Foxit Reader - (.Foxit Software Company.) [HKLM] -- Foxit Reader
O42 - Logiciel: GNU Aspell 0.50-3 - (.GNU.) [HKLM] -- GNU Aspell_is1
O42 - Logiciel: GTK+ Runtime 2.14.7 rev a (remove only) - (.GNU.) [HKLM] -- GTK 2.0
O42 - Logiciel: Glary Utilities 2.15.0.728 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Microsoft.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: HN Photo Chiang Mai Screensaver - (.GNU.) [HKLM] -- HN Photo Chiang Mai Screensaver
O42 - Logiciel: HP Driver Diagnostics - (.Hewlett-Packard.) [HKLM] -- {4CCC7F68-A437-4559-A840-F5E010934951}
O42 - Logiciel: HP Image Zone 4.2 - (.HP.) [HKLM] -- HP Photo & Imaging
O42 - Logiciel: HP PSC & OfficeJet 3.5 - (.HP.) [HKLM] -- {0FABD3D7-3036-4e78-B29D-58957ADB0A12}
O42 - Logiciel: HP PSC & OfficeJet 4.2 - (.HP.) [HKLM] -- {A1062847-0846-427A-92A1-BB8251A91E91}
O42 - Logiciel: HP Product Detection - (.Hewlett-Packard Company.) [HKLM] -- {CAE7D1D9-3794-4169-B4DD-964ADBC534EE}
O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {34957B51-9676-41CE-9E52-44AE91B73F1C}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Player 11 (KB939683) - (.Microsoft Corporation.) [HKLM] -- KB939683
O42 - Logiciel: Hotfix for Windows XP (KB952287) - (.Microsoft Corporation.) [HKLM] -- KB952287
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB954708) - (.Microsoft Corporation.) [HKLM] -- KB954708
O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118
O42 - Logiciel: Hotfix for Windows XP (KB970653-v3) - (.Microsoft Corporation.) [HKLM] -- KB970653-v3
O42 - Logiciel: Hotfix for Windows XP (KB976098-v2) - (.Microsoft Corporation.) [HKLM] -- KB976098-v2
O42 - Logiciel: Hotfix for Windows XP (KB979306) - (.Microsoft Corporation.) [HKLM] -- KB979306
O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschrไnkt).) [HKLM] -- JDownloader
O42 - Logiciel: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020}
O42 - Logiciel: Java(TM) 6 Update 22 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: K-Lite Codec Pack 3.9.0 Full - (.Microsoft Corporation.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Logitech QuickCam - (.Logitech Inc..) [HKLM] -- {937B232D-9776-471E-92BD-D424E514EF14}
O42 - Logiciel: Logitech Updater - (.Logitech, Inc..) [HKLM] -- {53735ECE-E461-4FD0-B742-23A352436D3A}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {7EA6E8DF-37B3-4533-B1A4-45E490C77537}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Memories Disc Creator 2.0 - (.Memories Disc Creator 2.0.) [HKLM] -- {2E132061-C78A-48D4-A899-1D13B9D189FA}
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Yuna Software.) [HKLM] -- Microsoft .NET Framework 1.1  (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Microsoft Corporation.) [HKLM] -- M953297
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- ENTERPRISE
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)
O42 - Logiciel: Nero 6 Demo - (.Mozilla.) [HKLM] -- Nero - Burning Rom!UninstallKey
O42 - Logiciel: Notepad++ - (.Mozilla.) [HKLM] -- Notepad++
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD}
O42 - Logiciel: PFPortChecker 1.0.32 - (.Portforward.com.) [HKLM] -- PFPortChecker
O42 - Logiciel: Phone Suite - (.Donin Chang.) [HKLM] -- {A2B0E08C-3B99-47AE-B3B1-E9BBD2BF4917}
O42 - Logiciel: PhotoScape - (.Portforward.com.) [HKLM] -- PhotoScape
O42 - Logiciel: PowerDVD - (.Microsoft Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Prepwizard - GMAT Preparation Software - (.Prepwizard.com.) [HKLM] -- {D51DF25D-57AC-4129-9A6D-59863C9CD41C}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva
O42 - Logiciel: SUPERAntiSpyware Free Edition - (.SUPERAntiSpyware.com.) [HKLM] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
O42 - Logiciel: Satsuki Decoder Pack - (.Piriform.) [HKLM] -- Satsuki Decoder Pack
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB971961) - (.Microsoft Corporation.) [HKLM] -- KB971961-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB972260) - (.Microsoft Corporation.) [HKLM] -- KB972260-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB974455) - (.Microsoft Corporation.) [HKLM] -- KB974455-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB976325) - (.Microsoft Corporation.) [HKLM] -- KB976325-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB978207) - (.Microsoft Corporation.) [HKLM] -- KB978207-IE8
O42 - Logiciel: Security Update for Windows Media Player (KB952069) - (.Microsoft Corporation.) [HKLM] -- KB952069_WM9
O42 - Logiciel: Security Update for Windows Media Player (KB954155) - (.Microsoft Corporation.) [HKLM] -- KB954155_WM9
O42 - Logiciel: Security Update for Windows Media Player (KB968816) - (.Microsoft Corporation.) [HKLM] -- KB968816_WM9
O42 - Logiciel: Security Update for Windows Media Player (KB973540) - (.Microsoft Corporation.) [HKLM] -- KB973540_WM9L
O42 - Logiciel: Security Update for Windows Media Player 11 (KB936782) - (.Microsoft Corporation.) [HKLM] -- KB936782_WMP11
O42 - Logiciel: Security Update for Windows Media Player 11 (KB954154) - (.Microsoft Corporation.) [HKLM] -- KB954154_WM11
O42 - Logiciel: Security Update for Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM] -- KB923561
O42 - Logiciel: Security Update for Windows XP (KB938464-v2) - (.Microsoft Corporation.) [HKLM] -- KB938464-v2
O42 - Logiciel: Security Update for Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM] -- KB941569
O42 - Logiciel: Security Update for Windows XP (KB944338-v2) - (.Microsoft Corporation.) [HKLM] -- KB944338-v2
O42 - Logiciel: Security Update for Windows XP (KB946648) - (.Microsoft Corporation.) [HKLM] -- KB946648
O42 - Logiciel: Security Update for Windows XP (KB950760) - (.Microsoft Corporation.) [HKLM] -- KB950760
O42 - Logiciel: Security Update for Windows XP (KB950762) - (.Microsoft Corporation.) [HKLM] -- KB950762
O42 - Logiciel: Security Update for Windows XP (KB950974) - (.Microsoft Corporation.) [HKLM] -- KB950974
O42 - Logiciel: Security Update for Windows XP (KB951066) - (.Microsoft Corporation.) [HKLM] -- KB951066
O42 - Logiciel: Security Update for Windows XP (KB951376-v2) - (.Microsoft Corporation.) [HKLM] -- KB951376-v2
O42 - Logiciel: Security Update for Windows XP (KB951698) - (.Microsoft Corporation.) [HKLM] -- KB951698
O42 - Logiciel: Security Update for Windows XP (KB951748) - (.Microsoft Corporation.) [HKLM] -- KB951748
O42 - Logiciel: Security Update for Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM] -- KB952004
O42 - Logiciel: Security Update for Windows XP (KB952954) - (.Microsoft Corporation.) [HKLM] -- KB952954
O42 - Logiciel: Security Update for Windows XP (KB954600) - (.Microsoft Corporation.) [HKLM] -- KB954600
O42 - Logiciel: Security Update for Windows XP (KB955069) - (.Microsoft Corporation.) [HKLM] -- KB955069
O42 - Logiciel: Security Update for Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM] -- KB956572
O42 - Logiciel: Security Update for Windows XP (KB956744) - (.Microsoft Corporation.) [HKLM] -- KB956744
O42 - Logiciel: Security Update for Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM] -- KB956802
O42 - Logiciel: Security Update for Windows XP (KB956803) - (.Microsoft Corporation.) [HKLM] -- KB956803
O42 - Logiciel: Security Update for Windows XP (KB956841) - (.Microsoft Corporation.) [HKLM] -- KB956841
O42 - Logiciel: Security Update for Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM] -- KB956844
O42 - Logiciel: Security Update for Windows XP (KB957097) - (.Microsoft Corporation.) [HKLM] -- KB957097
O42 - Logiciel: Security Update for Windows XP (KB958215) - (.Microsoft Corporation.) [HKLM] -- KB958215
O42 - Logiciel: Security Update for Windows XP (KB958644) - (.Microsoft Corporation.) [HKLM] -- KB958644
O42 - Logiciel: Security Update for Windows XP (KB958687) - (.Microsoft Corporation.) [HKLM] -- KB958687
O42 - Logiciel: Security Update for Windows XP (KB958690) - (.Microsoft Corporation.) [HKLM] -- KB958690
O42 - Logiciel: Security Update for Windows XP (KB958869) - (.Microsoft Corporation.) [HKLM] -- KB958869
O42 - Logiciel: Security Update for Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM] -- KB959426
O42 - Logiciel: Security Update for Windows XP (KB960225) - (.Microsoft Corporation.) [HKLM] -- KB960225
O42 - Logiciel: Security Update for Windows XP (KB960714) - (.Microsoft Corporation.) [HKLM] -- KB960714
O42 - Logiciel: Security Update for Windows XP (KB960715) - (.Microsoft Corporation.) [HKLM] -- KB960715
O42 - Logiciel: Security Update for Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM] -- KB960803
O42 - Logiciel: Security Update for Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM] -- KB960859
O42 - Logiciel: Security Update for Windows XP (KB961371) - (.Microsoft Corporation.) [HKLM] -- KB961371
O42 - Logiciel: Security Update for Windows XP (KB961373) - (.Microsoft Corporation.) [HKLM] -- KB961373
O42 - Logiciel: Security Update for Windows XP (KB961501) - (.Microsoft Corporation.) [HKLM] -- KB961501
O42 - Logiciel: Security Update for Windows XP (KB963027) - (.Microsoft Corporation.) [HKLM] -- KB963027
O42 - Logiciel: Security Update for Windows XP (KB968537) - (.Microsoft Corporation.) [HKLM] -- KB968537
O42 - Logiciel: Security Update for Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM] -- KB969059
O42 - Logiciel: Security Update for Windows XP (KB969897) - (.Microsoft Corporation.) [HKLM] -- KB969897
O42 - Logiciel: Security Update for Windows XP (KB969898) - (.Microsoft Corporation.) [HKLM] -- KB969898
O42 - Logiciel: Security Update for Windows XP (KB969947) - (.Microsoft Corporation.) [HKLM] -- KB969947
O42 - Logiciel: Security Update for Windows XP (KB970238) - (.Microsoft Corporation.) [HKLM] -- KB970238
O42 - Logiciel: Security Update for Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM] -- KB970430
O42 - Logiciel: Security Update for Windows XP (KB971032) - (.Microsoft Corporation.) [HKLM] -- KB971032
O42 - Logiciel: Security Update for Windows XP (KB971468) - (.Microsoft Corporation.) [HKLM] -- KB971468
O42 - Logiciel: Security Update for Windows XP (KB971486) - (.Microsoft Corporation.) [HKLM] -- KB971486
O42 - Logiciel: Security Update for Windows XP (KB971557) - (.Microsoft Corporation.) [HKLM] -- KB971557
O42 - Logiciel: Security Update for Windows XP (KB971633) - (.Microsoft Corporation.) [HKLM] -- KB971633
O42 - Logiciel: Security Update for Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM] -- KB971657
O42 - Logiciel: Security Update for Windows XP (KB972260) - (.Microsoft Corporation.) [HKLM] -- KB972260
O42 - Logiciel: Security Update for Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM] -- KB972270
O42 - Logiciel: Security Update for Windows XP (KB973346) - (.Microsoft Corporation.) [HKLM] -- KB973346
O42 - Logiciel: Security Update for Windows XP (KB973354) - (.Microsoft Corporation.) [HKLM] -- KB973354
O42 - Logiciel: Security Update for Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM] -- KB973507
O42 - Logiciel: Security Update for Windows XP (KB973525) - (.Microsoft Corporation.) [HKLM] -- KB973525
O42 - Logiciel: Security Update for Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM] -- KB973869
O42 - Logiciel: Security Update for Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM] -- KB973904
O42 - Logiciel: Security Update for Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM] -- KB974112
O42 - Logiciel: Security Update for Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM] -- KB974318
O42 - Logiciel: Security Update for Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM] -- KB974392
O42 - Logiciel: Security Update for Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM] -- KB974571
O42 - Logiciel: Security Update for Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM] -- KB975025
O42 - Logiciel: Security Update for Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM] -- KB975467
O42 - Logiciel: Security Update for Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM] -- KB975560
O42 - Logiciel: Security Update for Windows XP (KB975561) - (.Microsoft Corporation.) [HKLM] -- KB975561
O42 - Logiciel: Security Update for Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM] -- KB975713
O42 - Logiciel: Security Update for Windows XP (KB977165-v2) - (.Microsoft Corporation.) [HKLM] -- KB977165-v2
O42 - Logiciel: Security Update for Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM] -- KB977914
O42 - Logiciel: Security Update for Windows XP (KB978037) - (.Microsoft Corporation.) [HKLM] -- KB978037
O42 - Logiciel: Security Update for Windows XP (KB978251) - (.Microsoft Corporation.) [HKLM] -- KB978251
O42 - Logiciel: Security Update for Windows XP (KB978262) - (.Microsoft Corporation.) [HKLM] -- KB978262
O42 - Logiciel: Security Update for Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM] -- KB978706
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: SiS 900 PCI Fast Ethernet Adapter Driver - (.Piriform.) [HKLM] -- SiSLan
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A}
O42 - Logiciel: Skype? 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}
O42 - Logiciel: SpeedBit Video Accelerator - (.SpeedBit Ltd..) [HKLM] -- SpeedBit Video Accelerator
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Sunbelt Personal Firewall - (.Sunbelt Software.) [HKLM] -- {82B1150E-9B37-49FC-83EB-D52197D900D0}
O42 - Logiciel: Talesrunner Launcher 1.0 - (.SpeedBit Ltd..) [HKLM] -- Talesrunner Launcher_is1
O42 - Logiciel: ThaiSoftware Dictionary - (.Skype Technologies S.A..) [HKLM] -- {D30240CC-F199-4A1D-A4D0-55A842A02488}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Windows Internet Explorer 8 (KB976662) - (.Microsoft Corporation.) [HKLM] -- KB976662-IE8
O42 - Logiciel: Update for Windows Internet Explorer 8 (KB976749) - (.Microsoft Corporation.) [HKLM] -- KB976749-IE8
O42 - Logiciel: Update for Windows Internet Explorer 8 (KB980182) - (.Microsoft Corporation.) [HKLM] -- KB980182-IE8
O42 - Logiciel: Update for Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM] -- KB955759
O42 - Logiciel: Update for Windows XP (KB955839) - (.Microsoft Corporation.) [HKLM] -- KB955839
O42 - Logiciel: Update for Windows XP (KB961503) - (.Microsoft Corporation.) [HKLM] -- KB961503
O42 - Logiciel: Update for Windows XP (KB967715) - (.Microsoft Corporation.) [HKLM] -- KB967715
O42 - Logiciel: Update for Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM] -- KB968389
O42 - Logiciel: Update for Windows XP (KB971737) - (.Microsoft Corporation.) [HKLM] -- KB971737
O42 - Logiciel: Update for Windows XP (KB973687) - (.Microsoft Corporation.) [HKLM] -- KB973687
O42 - Logiciel: Update for Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM] -- KB973815
O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM] -- {767CC44C-9BBC-438D-BAD3-FD4595DD148B}
O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Westwood Online - (.VideoLAN.) [HKLM] -- WChat
O42 - Logiciel: WinRAR archiver - (.Microsoft Corporation.) [HKLM] -- WinRAR archiver
O42 - Logiciel: WinZip - (.WinZip Computing, Inc..) [HKLM] -- WinZip
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {E6158D07-2637-4ECF-B576-37C489669174}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- {474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {6412CECE-8172-4BE5-935B-6CECACD2CA87}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {EE39FFBD-544E-49E4-A999-6819828EAE91}
O42 - Logiciel: Windows Live Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {45338B07-A236-4270-9A77-EBB4115517B5}
O42 - Logiciel: Windows Live Sync - (.Microsoft Corporation.) [HKLM] -- {B10914FD-8812-47A4-85A1-50FCDE7F1F33}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {1BD07DF4-FB06-41BA-B896-B2DA59000C96}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {178832DE-9DE0-4C87-9F82-9315A9B03985}
O42 - Logiciel: Yahoo! Barre d'outils - (.WinZip Computing, Inc..) [HKLM] -- Yahoo! Companion
O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM] -- Yahoo! Messenger
O42 - Logiciel: Yahoo! Software Update - (.Yahoo! Inc..) [HKLM] -- Yahoo! Software Update
O42 - Logiciel: overland - (.HP.) [HKLM] -- {766273C1-A39B-47EB-ACE8-DEBDD8094BCC}
O42 - Logiciel: มหาหมอดู 5.7 รุ่นลงทะเบียนของ คุณศราวุธ อัจฉริยะเดชา - (.Trackerx90.) [HKLM] -- มหาหมอดู_5.4
O42 - Logiciel: เครื่องมืออัปโหลดของ Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\AC3filter]
[HKCU\Software\ACD Systems]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avira]
[HKCU\Software\BitTorrent]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\CyberLink]
[HKCU\Software\DT Soft]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\FilePlanet]
[HKCU\Software\Foxit Software]
[HKCU\Software\GNU]
[HKCU\Software\GRETECH]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\GameSpy]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logishrd]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mooii]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\NirSoft]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Patchou]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\SPEEDBIT1]
[HKCU\Software\SUPERAntiSpyware.com]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Satsuki Decoder Pack]
[HKCU\Software\Screensaver Factory]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\SpeedBit]
[HKCU\Software\Sunbelt Software]
[HKCU\Software\TENCENT]
[HKCU\Software\Trend Micro]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\WinZip Computing]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\cybelsoft]
[HKCU\Software\mlin]
[HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec]
[HKLM\Software\781]
[HKLM\Software\ACD Systems]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Activision]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\Aspell-fr]
[HKLM\Software\Aspell]
[HKLM\Software\Avira]
[HKLM\Software\Boonty]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\CyberLink]
[HKLM\Software\DT Soft]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\DownloadHelper]
[HKLM\Software\ETeam]
[HKLM\Software\Eset]
[HKLM\Software\FilePlanet]
[HKLM\Software\Foxit Software]
[HKLM\Software\GNU]
[HKLM\Software\GRETECH]
[HKLM\Software\GTK]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Global IP Solutions]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\IDAVLab]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LEAD Technologies, Inc.]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LogiShrd]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\Mooii]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NOS]
[HKLM\Software\Nico Mak Computing]
[HKLM\Software\Nullsoft]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\OldTimer Tools]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Patchou]
[HKLM\Software\Piriform]
[HKLM\Software\PlayFirst]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\ReflexiveArcade]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\S3R521]
[HKLM\Software\SUPERAntiSpyware.com]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Silver]
[HKLM\Software\Skype]
[HKLM\Software\SolidStateNetworks]
[HKLM\Software\SpeedBit]
[HKLM\Software\Startup]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Sunbelt Software]
[HKLM\Software\Symantec]
[HKLM\Software\TENCENT]
[HKLM\Software\Thaisoft]
[HKLM\Software\TrendMicro]
[HKLM\Software\VideoLAN]
[HKLM\Software\Westwood]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Yahoo]
[HKLM\Software\ZSMC]
[HKLM\Software\ahead]
[HKLM\Software\cybelsoft]
[HKLM\Software\mozilla.org]


---\\ Contents of the Common Files folders (O43)
O43 - CFD: 20/04/2008 - 13:21:52 ----D- C:\Program Files\7-Zip
O43 - CFD: 20/04/2008 - 13:33:08 ----D- C:\Program Files\ACD Systems
O43 - CFD: 30/12/2010 - 01:52:56 ----D- C:\Program Files\Ad-Remover
O43 - CFD: 12/12/2010 - 21:03:48 ----D- C:\Program Files\Adobe
O43 - CFD: 20/04/2008 - 13:45:16 ----D- C:\Program Files\Ahead
O43 - CFD: 27/01/2010 - 00:54:22 ----D- C:\Program Files\Aspell
O43 - CFD: 05/06/2009 - 08:10:10 ----D- C:\Program Files\Avira
O43 - CFD: 12/12/2010 - 16:27:56 ----D- C:\Program Files\CCleaner
O43 - CFD: 02/12/2010 - 01:08:30 ----D- C:\Program Files\Common Files
O43 - CFD: 20/06/2009 - 05:04:16 ----D- C:\Program Files\COMODO
O43 - CFD: 20/12/2010 - 22:10:42 ----D- C:\Program Files\ConvertHelper
O43 - CFD: 20/04/2008 - 13:42:44 ----D- C:\Program Files\CyberLink
O43 - CFD: 27/04/2010 - 19:21:34 ----D- C:\Program Files\DAEMON Tools Lite
O43 - CFD: 19/12/2009 - 06:58:52 ----D- C:\Program Files\DivX
O43 - CFD: 02/05/2010 - 10:57:56 ----D- C:\Program Files\DNA
O43 - CFD: 25/10/2010 - 04:27:50 ----D- C:\Program Files\Download Manager
O43 - CFD: 11/08/2008 - 19:41:42 ----D- C:\Program Files\EnglilshToThai
O43 - CFD: 07/06/2009 - 05:50:06 ----D- C:\Program Files\EZPlus2009
O43 - CFD: 01/09/2008 - 12:16:34 ----D- C:\Program Files\FlashGet
O43 - CFD: 14/05/2010 - 02:01:10 ----D- C:\Program Files\Foxit Software
O43 - CFD: 27/08/2009 - 04:51:16 ----D- C:\Program Files\Glary Utilities
O43 - CFD: 06/06/2009 - 16:49:18 ----D- C:\Program Files\Google
O43 - CFD: 20/04/2008 - 13:15:20 ----D- C:\Program Files\HashTab Shell Extension
O43 - CFD: 02/11/2009 - 07:02:54 ----D- C:\Program Files\HP
O43 - CFD: 22/07/2010 - 19:22:36 --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 29/11/2010 - 02:39:12 ----D- C:\Program Files\Internet Explorer
O43 - CFD: 15/10/2010 - 02:58:56 ----D- C:\Program Files\Java
O43 - CFD: 27/12/2010 - 02:34:00 ----D- C:\Program Files\JDownloader
O43 - CFD: 20/06/2009 - 09:27:36 ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 21/01/2010 - 20:26:00 ----D- C:\Program Files\Logitech
O43 - CFD: 29/12/2010 - 09:34:12 ----D- C:\Program Files\ma-config.com
O43 - CFD: 28/07/2010 - 10:23:14 ----D- C:\Program Files\MAKEMSI Package Documentation
O43 - CFD: 30/12/2010 - 03:25:04 ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 26/04/2009 - 19:11:04 ----D- C:\Program Files\Messenger
O43 - CFD: 10/11/2010 - 22:29:30 ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD: 21/03/2009 - 20:33:02 ----D- C:\Program Files\Microsoft
O43 - CFD: 23/03/2009 - 03:01:30 ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 02/12/2010 - 01:09:04 ----D- C:\Program Files\Microsoft Office
O43 - CFD: 21/03/2009 - 20:35:52 ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 20/04/2008 - 13:50:52 ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 02/12/2010 - 01:10:00 ----D- C:\Program Files\Microsoft Works
O43 - CFD: 02/12/2010 - 01:06:58 ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 29/11/2010 - 03:24:28 ----D- C:\Program Files\Movie Maker
O43 - CFD: 10/12/2010 - 20:00:26 ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 15/08/2009 - 15:55:30 ----D- C:\Program Files\MSBuild
O43 - CFD: 26/04/2009 - 11:13:06 ----D- C:\Program Files\MSN
O43 - CFD: 20/04/2008 - 13:15:14 ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 22/03/2009 - 03:09:30 ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 26/04/2009 - 19:12:10 ----D- C:\Program Files\NetMeeting
O43 - CFD: 04/04/2010 - 07:30:54 ----D- C:\Program Files\Norton Security Scan
O43 - CFD: 20/04/2008 - 13:21:52 ----D- C:\Program Files\Notepad++
O43 - CFD: 20/04/2008 - 13:16:44 ----D- C:\Program Files\Online Services
O43 - CFD: 01/08/2010 - 18:09:44 ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 14/08/2009 - 03:07:02 ----D- C:\Program Files\Outlook Express
O43 - CFD: 19/11/2009 - 12:47:02 ----D- C:\Program Files\Overland
O43 - CFD: 25/02/2010 - 02:32:38 ----D- C:\Program Files\PFPortChecker
O43 - CFD: 28/07/2010 - 10:23:14 ----D- C:\Program Files\PhoneSuite
O43 - CFD: 29/09/2010 - 22:46:00 ----D- C:\Program Files\PhotoScape
O43 - CFD: 19/07/2009 - 21:00:22 ----D- C:\Program Files\Realtek
O43 - CFD: 21/08/2010 - 01:37:26 ----D- C:\Program Files\Recuva
O43 - CFD: 15/08/2009 - 15:55:20 ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 01/08/2009 - 20:37:22 ----D- C:\Program Files\ReflexiveArcade
O43 - CFD: 20/06/2009 - 09:29:24 ----D- C:\Program Files\Satsuki Decoder Pack
O43 - CFD: 07/08/2010 - 04:14:26 R---D- C:\Program Files\Skype
O43 - CFD: 27/04/2009 - 19:14:18 ----D- C:\Program Files\SpeedBit Video Accelerator
O43 - CFD: 15/08/2009 - 03:09:26 ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 20/06/2009 - 08:48:50 ----D- C:\Program Files\Sunbelt Software
O43 - CFD: 29/12/2010 - 08:07:32 ----D- C:\Program Files\SUPERAntiSpyware
O43 - CFD: 04/04/2010 - 07:31:20 ----D- C:\Program Files\SuperCopier2
O43 - CFD: 20/04/2008 - 13:59:00 ----D- C:\Program Files\Trackerx90
O43 - CFD: 28/11/2010 - 04:53:18 ----D- C:\Program Files\Trend Micro
O43 - CFD: 20/04/2008 - 13:25:34 --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 02/10/2008 - 09:57:04 ----D- C:\Program Files\Unlocker
O43 - CFD: 21/12/2010 - 22:27:12 ----D- C:\Program Files\uTorrent
O43 - CFD: 20/04/2008 - 14:00:40 ----D- C:\Program Files\VideoLAN
O43 - CFD: 26/05/2010 - 23:19:22 ----D- C:\Program Files\Windows Live
O43 - CFD: 21/03/2009 - 20:32:44 ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 20/04/2008 - 13:16:34 ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 08/08/2009 - 11:17:16 ----D- C:\Program Files\Windows Media Player
O43 - CFD: 26/04/2009 - 19:12:12 ----D- C:\Program Files\Windows NT
O43 - CFD: 20/04/2008 - 13:19:14 --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 30/03/2010 - 02:08:14 ----D- C:\Program Files\WinRAR
O43 - CFD: 20/04/2008 - 13:57:42 ----D- C:\Program Files\WinZip
O43 - CFD: 18/07/2010 - 15:25:44 ----D- C:\Program Files\Yahoo!
O43 - CFD: 20/04/2008 - 13:53:08 ----D- C:\Program Files\มหาหมอดู 5.7
O43 - CFD: 20/04/2008 - 13:33:12 ----D- C:\Program Files\Common Files\ACD Systems
O43 - CFD: 12/12/2010 - 21:05:06 ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 07/02/2009 - 21:30:00 ----D- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 20/04/2008 - 13:45:16 ----D- C:\Program Files\Common Files\Ahead
O43 - CFD: 04/10/2008 - 20:08:58 ----D- C:\Program Files\Common Files\BOONTY Shared
O43 - CFD: 02/12/2010 - 01:08:30 ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 19/07/2009 - 22:18:06 ----D- C:\Program Files\Common Files\DivX Shared
O43 - CFD: 27/01/2010 - 00:43:56 ----D- C:\Program Files\Common Files\GTK
O43 - CFD: 10/08/2008 - 22:05:38 ----D- C:\Program Files\Common Files\Hewlett-Packard
O43 - CFD: 10/08/2008 - 22:02:34 ----D- C:\Program Files\Common Files\HP
O43 - CFD: 01/03/2009 - 04:13:00 ----D- C:\Program Files\Common Files\INCA Shared
O43 - CFD: 01/07/2009 - 06:06:52 ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 10/08/2010 - 00:21:44 ----D- C:\Program Files\Common Files\Java
O43 - CFD: 21/04/2009 - 10:00:26 ----D- C:\Program Files\Common Files\logishrd
O43 - CFD: 11/09/2009 - 16:20:26 ----D- C:\Program Files\Common Files\Logitech
O43 - CFD: 02/12/2010 - 01:29:08 ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 20/04/2008 - 13:18:22 ----D- C:\Program Files\Common Files\MSSoap
O43 - CFD: 20/04/2008 - 20:05:14 ----D- C:\Program Files\Common Files\ODBC
O43 - CFD: 20/04/2008 - 13:18:24 ----D- C:\Program Files\Common Files\Services
O43 - CFD: 07/08/2010 - 04:12:12 ----D- C:\Program Files\Common Files\Skype
O43 - CFD: 20/04/2008 - 20:05:10 ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 04/04/2010 - 07:30:50 ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 02/12/2010 - 01:05:56 ----D- C:\Program Files\Common Files\System
O43 - CFD: 27/01/2010 - 01:27:52 ----D- C:\Program Files\Common Files\Tencent
O43 - CFD: 21/03/2009 - 20:15:42 ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 19/06/2009 - 14:39:06 ----D- C:\Program Files\Common Files\Wise Installation Wizard


---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.84EF1200A915817C00FCFD7F58F01200] - 30/12/2010 - 15:52:02 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\WindowsUpdate.log   [1934623]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 30/12/2010 - 13:31:06 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.84EF1200A915817C00FCFD7F58F01200] - 30/12/2010 - 13:30:43 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\wiadebug.log   [159]
O44 - LFC:[MD5.84EF1200A915817C00FCFD7F58F01200] - 30/12/2010 - 13:30:31 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\wiaservc.log   [50]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 30/12/2010 - 13:30:06 -S-A- . (.Unknown owner - No comment.) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.6C5BBC51DD2FD8863B5490D4D85B5B87] - 30/12/2010 - 12:38:05 ---A- . (.Unknown owner - No comment.) -- C:\Ad-Report-SCAN[2].txt   [2717]
O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 30/12/2010 - 03:24:45 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys   [38224]
O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 30/12/2010 - 03:24:27 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys   [20952]
O44 - LFC:[MD5.22DB52BD5A688AC3198340DF65CED1BD] - 30/12/2010 - 02:19:59 ---A- . (.Unknown owner - No comment.) -- C:\Ad-Report-CLEAN[1].txt   [4895]
O44 - LFC:[MD5.8ABE69749BBEECF5EED9BBC1575B5BA7] - 30/12/2010 - 02:15:01 -SHA- . (.Unknown owner - No comment.) -- C:\WINDOWS\Thumbs.db   [7168]
O44 - LFC:[MD5.F287FDED25EDD6939B6A74CC532A6E05] - 30/12/2010 - 01:54:31 ---A- . (.Unknown owner - No comment.) -- C:\Ad-Report-SCAN[1].txt   [4431]
O44 - LFC:[MD5.C5C5ED4889FF02B47447FBEA14A45C54] - 29/12/2010 - 07:36:15 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\wpa.dbl   [2206]
O44 - LFC:[MD5.045EA6BB82B74699DA5B7780B1036F64] - 03/12/2010 - 14:14:36 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\lvcoinst.log   [53257]
O44 - LFC:[MD5.051621ED13E662D0F16A7292BA82E7B8] - 02/12/2010 - 05:19:15 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\FNTCACHE.DAT   [357752]
O44 - LFC:[MD5.3BEB1C0FCEB632B5FAE13A627E7FEE49] - 02/12/2010 - 01:04:35 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\win.ini   [546]


---\\ Operations and functions at Windows Explorer startup (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL


---\\ Export authorized application key (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft? Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\FlashGet\flashget.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\rundll32.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\DNA\btdna.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\DAP\DAP.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Christophe\Desktop\utorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\trademanager\AliIM.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\ADSLTV\adsltv.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\ADSLTV\VLC\vlc.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Admin\Program Files\DNA\btdna.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft? Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) --


---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll


---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d


---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak? Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\System32\lvcodec2.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo? Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo? audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo? video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.ACDV"="ACDV.dll" . (.ACD Systems - ACDV.) -- C:\WINDOWS\System32\ACDV.dll
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\System32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo? audio software" . (.Intel Corporation - Indeo? audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo? video 5.10" . (.Unknown owner - No comment.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ACDV.dll"="ACDV 1.0" . (.Unknown owner - No comment.) -- (.not file.)
O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (.Unknown owner - No comment.) -- (.not file.)
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec v1.2-dev" . (.Unknown owner - No comment.) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.97b2" . (.Unknown owner - No comment.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.5 Codec" . (.Unknown owner - No comment.) -- (.not file.)


---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\aliim  [Key] . (.Unknown owner - No comment.) -- C:\Program Files\trademanager\aliim.exe
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.Unknown owner - No comment.) -- C:\Program Files\DAEMON Tools Lite\daemon.exe
O53 - SMSR:HKLM\...\startupreg\NeroFilterCheck  [Key] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe
O53 - SMSR:HKLM\...\startupreg\PowerDVD  [Key] . (.CyberLink Corp. - PowerDVD.) -- C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe
O53 - SMSR:HKLM\...\startupreg\RemoteControl  [Key] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O53 - SMSR:HKLM\...\startupreg\SUPERAntiSpyware  [Key] . (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O53 - SMSR:HKLM\...\startupreg\uTorrent  [Key] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe


---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll


---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "SynchronousMachineGroupPolicy"=0
O55 - MWPS:[HKLM\...\Policies\System] - "SynchronousUserGroupPolicy"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0


---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsMenu"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoChangeStartMenu"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogOff"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoRemoteRecursiveEvents"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1


---\\ System Drivers List (SDL) (O58)
O58 - SDL:[MD5.11C04B17ED2ABBB4833694BCD644AC90] - 01/04/2002 - 13:15:00 ---A- . (.Andrea Electronics Corporation - Andrea Audio Stub Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys   [4816]
O58 - SDL:[MD5.0EBB674888CBDEFD5773341C16DD6A07] - 08/10/2004 - 08:16:04 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS   [35840]
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 12:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys   [45416]
O58 - SDL:[MD5.1EB7D72A82F94F7E9496D363FCE00B68] - 17/08/2010 - 13:39:11 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys   [60936]
O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 17/06/2010 - 15:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys   [22360]
O58 - SDL:[MD5.F8C56231ED5ECF7D1B46B0330880CCEF] - 17/08/2010 - 13:39:11 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys   [126856]
O58 - SDL:[MD5.B562592B7F5759C99E179CA467ECFB4C] - 30/07/2007 - 09:54:51 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM Main Driver.) -- C:\WINDOWS\system32\drivers\cinemst2.sys   [262528]
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 30/07/2007 - 09:54:51 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys   [11776]
O58 - SDL:[MD5.3FCC124B6E08EE0E9351F717DD136939] - 30/07/2007 - 09:54:51 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys   [138752]
O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 30/07/2007 - 09:54:51 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudio.sys   [145920]
O58 - SDL:[MD5.5FABA4775D4C61E55EC669D643FFC71F] - 23/06/2004 - 01:16:46 ---A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys   [51088]
O58 - SDL:[MD5.A3C43980EE1F1BEAC778B44EA65DBDD4] - 23/06/2004 - 01:16:46 ---A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys   [16496]
O58 - SDL:[MD5.2906949BD4E206F2BB0DD1896CE9F66F] - 23/06/2004 - 01:16:46 ---A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys   [21744]
O58 - SDL:[MD5.970178E8E003EB1481293830069624B9] - 04/08/2004 - 05:41:48 ---A- . (.Conexant Systems, Inc. - HSF_HWB2 WDM driver.) -- C:\WINDOWS\system32\drivers\HSFBS2S2.sys   [220032]
O58 - SDL:[MD5.1225EBEA76AAC3C84DF6C54FE5E5D8BE] - 04/08/2004 - 05:41:50 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSFCXTS2.sys   [685056]
O58 - SDL:[MD5.EBB354438A4C5A3327FB97306260714A] - 04/08/2004 - 05:41:56 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSFDPSP2.sys   [1041536]
O58 - SDL:[MD5.FCCF4AE4EF72CBABA6D6BEFEFD77E940] - 29/03/2003 - 15:45:18 ---A- . (.Ahead Software AG and its licensors - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys   [89184]
O58 - SDL:[MD5.4349C7DC0C982CFFC11946FFF20F8524] - 17/12/2008 - 12:53:22 ---A- . (.Logitech Inc. - Audio filter for Express Plus.) -- C:\WINDOWS\system32\drivers\lv302af.sys   [13848]
O58 - SDL:[MD5.36EDDCEFDD036FFFA95AA84D1645DD67] - 06/12/2005 - 10:30:19 R--A- . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\system32\drivers\LV302AV.SYS   [916096]
O58 - SDL:[MD5.4FC23DAE30EF4F6A2952CD93104909E7] - 17/12/2008 - 12:53:44 ---A- . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\system32\drivers\LV302V32.SYS   [2686104]
O58 - SDL:[MD5.F96CFB47903854F228BAAF3E2D41A0A3] - 16/12/2008 - 21:58:54 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys   [25624]
O58 - SDL:[MD5.E22FD7852E74F04CCEB6B8A684A51F3E] - 17/12/2008 - 13:00:12 ---A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\WINDOWS\system32\drivers\lvrs.sys   [768024]
O58 - SDL:[MD5.5F987FC1AAD215EC2C60CF07719B1CCE] - 17/12/2008 - 13:01:20 ---A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys   [41752]
O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 15:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys   [20952]
O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 15:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys   [38224]
O58 - SDL:[MD5.195741AEE20369980796B557358CD774] - 04/08/2004 - 05:41:56 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys   [11868]
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys   [12032]
O58 - SDL:[MD5.2B298519EDBFCF451D43E0F1E8F1006D] - 04/08/2004 - 05:29:56 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys   [1897408]
O58 - SDL:[MD5.957B82EC80AD7EAD64E5E47DF6B0DC40] - 20/04/2008 - 13:33:04 ---A- . (.Padus, Inc. - Padus(R) ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys   [10368]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 30/07/2007 - 09:54:51 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys   [17792]
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys   [12032]
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys   [12032]
O58 - SDL:[MD5.1EBDE650D97A8ECCDC1CC4A0804647CD] - 10/07/2007 - 09:56:00 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys   [4449280]
O58 - SDL:[MD5.419883201CA9AD697CCFB8FC46DD6F78] - 31/10/2008 - 07:09:06 R--A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall driver.) -- C:\WINDOWS\system32\drivers\SbFw.sys   [270888]
O58 - SDL:[MD5.F01B8409A11C319E3C5B9DD418676D2C] - 21/06/2008 - 04:54:54 ---A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall NDIS Intermediate driver.) -- C:\WINDOWS\system32\drivers\SbFwIm.sys   [65576]
O58 - SDL:[MD5.31CA701F26EA66468AD3C3C6498755CE] - 21/06/2008 - 04:54:54 R--A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall Host Intrusion Prevention Driver.) -- C:\WINDOWS\system32\drivers\sbhips.sys   [66600]
O58 - SDL:[MD5.07F7F501AD50DE2BA2D5842D9B6D6155] - 30/07/2007 - 09:54:51 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys   [163644]
O58 - SDL:[MD5.61CA562DEF09A782D26B3E7EDEC5369A] - 18/07/2003 - 15:58:20 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\WINDOWS\system32\drivers\SISAGPX.SYS   [36992]
O58 - SDL:[MD5.A1348A901A44760CCD76043525E851D0] - 14/02/2006 - 21:02:56 ---A- . (.SiS Corporation - SiS PCI Fast Ethernet Adapter Driver.) -- C:\WINDOWS\system32\drivers\sisnicxp.sys   [32768]
O58 - SDL:[MD5.F1771926A47A18BD3A3EDAC334FC78E0] - 08/04/2003 - 10:30:48 ---A- . (.Analog Devices, Inc. - SoundMAX Stub Driver.) -- C:\WINDOWS\system32\drivers\smsens.sys   [3744]
O58 - SDL:[MD5.BF208C85119770E6A9B6577019A3D810] - 29/08/2003 - 15:09:00 ---A- . (.Analog Devices, Inc. - SoundMAX Integrated Digital Audio.) -- C:\WINDOWS\system32\drivers\smwdm.sys   [578304]
O58 - SDL:[MD5.A1ECEEAA5C5E74B2499EB51D38185B84] - 17/08/2001 - 13:56:16 ---A- . (.Sony Corporation - Sony USB Lower Filter driver.) -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS   [7552]
O58 - SDL:[MD5.84EF1200A915817C00FCFD7F58F01200] - 09/12/2009 - 00:00:00 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\sptd.sys   [691696]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 17/06/2010 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys   [28520]
O58 - SDL:[MD5.DF8444A8FA8FD38D8848BDD40A8403B3] - 05/06/2009 - 06:36:48 ---A- . (.Trend Micro Inc. - TrendMicro Common Module.) -- C:\WINDOWS\system32\drivers\tmcomm.sys   [102664]
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 30/07/2007 - 09:54:51 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys   [21376]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 30/07/2007 - 09:54:51 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys   [58112]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ansi.sys   [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\country.sys   [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\himem.sys   [4768]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\key01.sys   [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\keyboard.sys   [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos.sys   [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos404.sys   [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos411.sys   [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos412.sys   [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos804.sys   [29146]
O58 - SDL:[MD5.4FE09F868CE65B334B42862C372C69CC] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio.sys   [33840]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio404.sys   [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio411.sys   [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio412.sys   [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio804.sys   [34560]


---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: Ad-Remover By C_XX - (.C_XX.) [HKLM] -- Ad-Remover
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: ZHPFix 1.12 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
O63 - Logiciel: Dial-a-fix - (.Djlizard.)


---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe


---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe


---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
O69 - SBI: SearchScopes [HKCU] {557C21FE-7274-410D-853E-9ED4471BF193} - (cherche.us) - http://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%3BGFNT%3AB7B7B7%3BLC%3A2200cc%3BBGC%3AFFFFFF%3BVLC%3A551a8b%3BGALT%3A008B45%3BFORID%3A11%3BDIV%3A%23FFFFF0%3B&ie=ISO-8859-1&q={searchTerms}+&meta=
O69 - SBI: SearchScopes [HKCU] {C54DD1E9-F3A1-4490-9943-C643FCCB6E1C} [DefaultScope] - (Google) - http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}


---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 20/12/2010 251760 | C:\Windows\System32\drivers\LVUSBSta.sys (maconfservice) . (.Logitech Inc..) - C:\Program Files\ma-config.com\maconfservice.exe
SR - | Auto 19/06/2003 322120 | C:\Windows\system32\drivers\LVUSBSta.sys (MDM) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe
SS - | Disabled 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Messenger) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe
SS - | Demand 27/10/2006 65824 | C:\Windows\system32\drivers\LVUSBSta.sys (Microsoft Office Groove Audit Service) . (.Logitech Inc..) - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
SS - | Demand 30/07/2007 32768 | C:\Windows\system32\drivers\LVUSBSta.sys (mnmsrvc) . (.Logitech Inc..) - C:\WINDOWS\system32\mnmsrvc.exe
SS - | Demand 30/07/2007 6144 | C:\Windows\system32\drivers\LVUSBSta.sys (MSDTC) . (.Logitech Inc..) - C:\WINDOWS\system32\msdtc.exe
SS - | Demand 30/07/2007 78848 | C:\Windows\system32\drivers\LVUSBSta.sys (MSIServer) . (.Logitech Inc..) - C:\WINDOWS\system32\msiexec.exe
SS - | Disabled 30/07/2007 111104 | C:\Windows\system32\drivers\LVUSBSta.sys (NetDDE) . (.Logitech Inc..) - C:\WINDOWS\system32\netdde.exe
SS - | Disabled 30/07/2007 111104 | C:\Windows\system32\drivers\LVUSBSta.sys (NetDDEdsdm) . (.Logitech Inc..) - C:\WINDOWS\system32\netdde.exe
SS - | Demand 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (Netlogon) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe
SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Netman) . (.Logitech Inc..) - C:\WINDOWS\System32\svchost.exe
SS - | Disabled 29/07/2008 132096 | C:\Windows\system32\drivers\LVUSBSta.sys (NetTcpPortSharing) . (.Logitech Inc..) - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Nla) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe
SS - | Demand 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (NtLmSsp) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe
SS - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (NtmsSvc) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe
SS - | Demand 26/10/2006 441136 | C:\Windows\system32\drivers\LVUSBSta.sys (odserv) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.exe
SS - | Demand 26/10/2006 145184 | C:\Windows\system32\drivers\LVUSBSta.sys (ose) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.exe
SR - | Auto 06/02/2009 110592 | C:\Windows\system32\drivers\LVUSBSta.sys (PlugPlay) . (.Logitech Inc..) - C:\WINDOWS\system32\services.exe
SS - | Demand 18/03/2004 65536 | C:\Windows\system32\drivers\LVUSBSta.sys (Pml Driver HPZ12) . (.Logitech Inc..) - C:\WINDOWS\system32\HPZipm12.exe
SR - | Auto 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (PolicyAgent) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe
SR - | Auto 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (ProtectedStorage) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe
SS - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (RasAuto) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe
SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (RasMan) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe


---\\ Search Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net
Run by Christophe at 30/12/2010 21:49:32

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x823C81F8]<<
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x8234CAB8]
3 CLASSPNP[0xF8575FCF] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000068[0x82355338]
5 ACPI[0xF83E1620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x82341940]
\Driver\atapi[0x823556C0] -> IRP_MJ_CREATE -> 0x823C81F8
kernel: MBR read successfully
detected hooks:
\Driver\atapi -> 0x823c81f8
user & kernel MBR OK
Warning: possible MBR rootkit infection !
Use "ZHPFix" command "MBRFix" to clear infection !


---\\ Search Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Christophe at 30/12/2010 21:49:32
Use the desktop link 'MBRCheck' to have full report




---\\ List of CD/DVD Emulators (MBR Hook)
O58 - SDL:[MD5.84EF1200A915817C00FCFD7F58F01200] - 09/12/2009 - 00:00:00 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\sptd.sys   [691696]



End of the scan (1183 lines in 03mn 50s)(0)


A bientot

[cricri001]

Le rapport ZHPDiag :
http://cjoint.com/?0mEqTgZbvqL

[cricri001]

Le rapport Ad-remover :
http://cjoint.com/?0mEqYvfFuvj

[cricri001]

Le nouveau rapport Hijackthis :
http://cjoint.com/?0mEq7iiHato