Trojan qui revient tous le temps [Résolu]

MSNFix 1.673

C:\Documents and Settings\maman\Bureau\MSNFix
Fix exécuté le 01/03/2008 - 0:25:21,70 By maman
mode normal

************************ Recherche les fichiers présents

... C:\WINDOWS\system32\real.txt
... C:\DOCUME~1\maman\LOCALS~1\Temp\winlogon.exe
... C:\Documents and Settings\maman\??????.exe
... C:\Documents and Settings\maman\????????.exe

************************ Recherche les dossiers présents

Aucun dossier trouvé




************************ Suppression des fichiers

.. OK ... C:\WINDOWS\system32\real.txt
.. OK ... C:\DOCUME~1\maman\LOCALS~1\Temp\winlogon.exe
.. OK ... C:\Documents and Settings\maman\??????.exe
.. OK ... C:\Documents and Settings\maman\????????.exe



************************ Nettoyage du registre



************************ Fichiers suspects

Aucun Fichier trouvé


Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 01032008_ 0263064.zip



------------------------------------------------------------------------
Auteur : !aur3n7 Contact: http://changelog.fr
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:46:11, on 01/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\D-Tools\daemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\maman\LOCALS~1\Temp\winlogon.exe
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.13\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.13\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{11968F34-8673-412C-9C35-657E0D9F1C3A}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{11968F34-8673-412C-9C35-657E0D9F1C3A}: NameServer = 192.168.1.254
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

ComboFix 08-03-01.3 - maman 2008-03-02 0:28:40.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.189 [GMT 1:00]
Endroit: C:\Documents and Settings\maman\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\maman\Application Data\inst.exe

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-01 to 2008-03-01 ))))))))))))))))))))))))))))))))))))
.

2008-03-02 00:15 . 2008-03-02 00:15 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-01 10:18 . 2008-03-02 00:26 <REP> d-------- C:\Documents and Settings\maman\Application Data\OnlineArmor
2008-03-01 10:18 . 2008-03-01 10:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\OnlineArmor
2008-03-01 10:17 . 2007-11-08 06:37 68,608 --a------ C:\WINDOWS\system32\drivers\OADriver.sys
2008-03-01 10:17 . 2007-09-29 00:06 25,600 --a------ C:\WINDOWS\system32\drivers\OAmon.sys
2008-03-01 10:17 . 2007-09-29 00:06 18,944 --a------ C:\WINDOWS\system32\drivers\ndisrd.sys
2008-03-01 10:16 . 2008-03-01 10:17 <REP> d-------- C:\Program Files\Tall Emu
2008-03-01 09:53 . 2008-03-01 09:53 <REP> d-------- C:\OnlineArmor
2008-03-01 09:51 . 2008-03-01 09:51 <REP> d-------- C:\_OTMoveIt
2008-03-01 09:43 . 2008-03-01 09:43 14,771,744 --a------ C:\Program Files\IE7-WindowsXP-x86-fra.exe
2008-03-01 00:45 . 2008-03-01 00:45 <REP> d-------- C:\Program Files\Trend Micro
2008-03-01 00:45 . 2008-03-01 00:45 812,344 --a------ C:\Program Files\HJTInstall.exe
2008-02-29 21:37 . 2008-02-29 21:37 <REP> d-------- C:\Program Files\Trojan Remover
2008-02-29 21:37 . 2008-02-29 21:37 <REP> d-------- C:\Documents and Settings\maman\Application Data\Simply Super Software
2008-02-29 21:37 . 2008-02-29 21:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-02-29 21:37 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2008-02-29 21:37 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2008-02-29 21:37 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2008-02-29 21:37 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2008-02-29 21:37 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2008-02-29 21:36 . 2008-02-29 21:37 6,894,528 --a------ C:\Program Files\trsetup.exe
2008-02-29 21:22 . 2008-03-01 10:50 5,120 --ahs---- C:\WINDOWS\system32\Thumbs.db
2008-02-29 20:47 . 2008-02-29 20:47 <REP> d--hs---- C:\found.001
2008-02-29 20:10 . 2008-02-29 20:10 407,680 --a------ C:\Program Files\aswclnr.exe
2008-02-29 19:13 . 2008-02-29 19:13 1,308,216 --a------ C:\Program Files\HiJackThis_v2.exe
2008-02-29 18:51 . 2008-02-29 18:53 <REP> d-------- C:\Program Files\Panda Security
2008-02-29 16:03 . 2008-02-29 16:03 <REP> d-------- C:\Program Files\Activision
2008-02-29 14:31 . 2008-02-29 14:31 123 --a------ C:\WINDOWS\wininit.ini
2008-02-29 13:32 . 2008-02-29 13:32 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-29 13:32 . 2008-02-29 14:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-29 13:19 . 2008-02-29 13:19 7,467,056 --a------ C:\Program Files\spybotsd15.exe
2008-02-27 08:03 . 2008-02-27 08:03 <REP> d-------- C:\Program Files\Apple Software Update
2008-02-27 08:03 . 2008-02-27 08:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-02-25 21:52 . 2008-02-25 21:52 2,563 --a------ C:\WINDOWS\image.jpg
2008-02-24 21:31 . 2008-02-24 21:31 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-02-24 21:31 . 2008-02-24 21:31 1,409 --a------ C:\WINDOWS\QTFont.for
2008-02-24 19:00 . 2008-02-24 19:00 <REP> d-------- C:\My Shared Folder
2008-02-24 18:59 . 2008-02-24 18:59 <REP> d-------- C:\Documents and Settings\maman\Application Data\Kazaa Lite
2008-02-24 18:58 . 2008-02-24 18:58 2,803,665 --a------ C:\Program Files\klitekpp243f.exe
2008-02-24 18:55 . 2008-02-24 18:55 <REP> d-------- C:\Program Files\Kazaa
2008-02-24 17:50 . 2008-02-24 17:50 <REP> d-------- C:\Program Files\Fichiers communs\FotoWire
2008-02-24 17:50 . 2008-02-24 17:50 <REP> d-------- C:\Documents and Settings\maman\Application Data\FotoWire
2008-02-24 17:49 . 2004-10-08 12:46 53,248 -ra------ C:\WINDOWS\system32\InstMed.exe
2008-02-24 17:48 . 2008-02-24 17:50 <REP> d-------- C:\Program Files\Logitech
2008-02-24 17:04 . 2008-02-24 17:04 2,402,832 --a------ C:\Program Files\WLinstaller.exe
2008-02-24 16:55 . 2008-02-29 13:01 <REP> d-------- C:\Documents and Settings\maman\Application Data\skypePM
2008-02-24 16:55 . 2008-02-24 16:55 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-02-24 16:53 . 2008-02-29 13:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype
2008-02-24 16:48 . 2008-02-24 16:51 22,690,600 --a------ C:\Program Files\SkypeSetup.exe
2008-02-24 16:06 . 2008-02-24 17:38 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
2008-02-24 16:05 . 2008-02-24 17:39 <REP> d-------- C:\Program Files\Fichiers communs\LogiShrd
2008-02-24 16:00 . 2008-02-24 16:03 32,227,136 --a------ C:\Program Files\logitech_logitech_quickcam_11.1.0.2016_whql_4219.exe
2008-02-24 13:38 . 2008-03-01 10:50 16,384 --ahs---- C:\WINDOWS\Thumbs.db
2008-02-24 13:19 . 2008-02-24 13:19 1,271,557 --a------ C:\Program Files\wrar371fr.exe
2008-02-23 18:32 . 2008-02-23 18:31 4,419,000 --a------ C:\Program Files\burn4free_burn4free_3.9.0.0_francais_14723.exe
2008-02-22 22:35 . 2008-02-22 22:35 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-02-22 22:35 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-02-22 22:34 . 2008-02-22 22:34 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-02-22 22:34 . 2008-02-22 22:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-02-22 22:30 . 2008-02-22 22:31 14,174,464 --a------ C:\Program Files\TU2008TrialFR.exe
2008-02-22 22:17 . 2008-02-24 18:55 594,880 --a------ C:\Program Files\kazaa_setup.exe
2008-02-22 22:15 . 2008-02-22 22:15 5,265,101 --a------ C:\Program Files\Shareaza_2.3.1.0_Win32.exe
2008-02-22 21:50 . 2008-02-22 23:19 <REP> d-------- C:\Program Files\Yahoo!
2008-02-22 21:50 . 2008-02-22 21:50 <REP> d-------- C:\Program Files\CCleaner
2008-02-22 21:49 . 2008-02-22 21:50 2,733,928 --a------ C:\Program Files\ccsetup204.exe
2008-02-22 21:45 . 2008-02-22 21:44 2,467,439 --a------ C:\Program Files\winamp295_full.exe
2008-02-15 23:39 . 2008-02-15 23:39 <REP> d-------- C:\Documents and Settings\maman\Application Data\dvdcss
2008-02-14 22:14 . 2008-02-14 22:51 <REP> d-------- C:\Program Files\Photo Viewer 2.4
2008-02-13 16:43 . 2008-02-15 12:52 0 --a------ C:\WINDOWS\obmetmp.htm
2008-02-12 17:54 . 2008-02-24 17:39 780 --a------ C:\WINDOWS\_delis32.ini
2008-02-11 21:39 . 2006-11-12 11:39 483,328 --a------ C:\WINDOWS\system32\actskn45.ocx
2008-02-11 16:13 . 2008-02-11 16:13 <REP> d-------- C:\Program Files\Common Files
2008-02-11 00:22 . 2008-03-01 23:08 116 --a------ C:\WINDOWS\NeroDigital.ini
2008-02-10 13:41 . 2008-02-10 13:41 <REP> d-------- C:\Program Files\Fichiers communs\Ahead
2008-02-10 13:41 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-02-10 13:41 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-02-10 13:41 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-02-10 13:41 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-02-10 13:41 . 2001-07-09 10:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-02-10 13:41 . 2004-03-02 16:37 125,184 --------- C:\WINDOWS\system32\drivers\imagesrv.sys
2008-02-10 13:41 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-02-10 13:41 . 2004-03-02 16:37 5,504 --------- C:\WINDOWS\system32\drivers\imagedrv.sys
2008-02-10 13:39 . 2008-02-10 13:39 <REP> d-------- C:\Program Files\Nero 6 (+crack)
2008-02-09 23:26 . 2008-02-10 01:23 <REP> d-------- C:\Program Files\Sims2Pack Clean Installer
2008-02-09 23:25 . 2008-02-09 23:25 441,214 --a------ C:\Program Files\Sims2PackInstaller_v1514.exe
2008-02-09 23:07 . 2008-02-09 23:07 4,922,461 --a------ C:\Program Files\theme-de-bureau.exe
2008-02-09 20:41 . 2008-02-09 20:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2008-02-09 18:16 . 2008-02-24 13:23 <REP> d-------- C:\Program Files\Maxis
2008-02-07 22:05 . 2006-11-02 17:12 348,416 --a------ C:\WINDOWS\system32\drivers\rt73.sys
2008-02-07 22:05 . 2006-06-20 22:53 319,488 --a------ C:\WINDOWS\system32\AegisI5.exe
2008-02-07 22:05 . 2006-06-17 12:29 295,018 --a------ C:\WINDOWS\system32\Install7x.dll
2008-02-07 22:05 . 2005-11-30 11:33 2,048 --a------ C:\WINDOWS\system32\drivers\rt73.bin
2008-02-07 22:05 . 2006-03-06 15:36 45 --a------ C:\WINDOWS\filespec7x
2008-02-07 22:04 . 2008-02-07 22:04 <REP> d-------- C:\Program Files\RALINK
2008-02-07 22:02 . 2008-02-07 22:02 <REP> d-------- C:\Documents and Settings\maman\Application Data\InstallShield
2008-02-06 21:04 . 2008-02-06 21:04 <REP> d-------- C:\WINDOWS\new mario62
2008-02-06 21:04 . 2008-02-06 21:04 171,520 --a------ C:\WINDOWS\system32\cncs32.dll
2008-02-06 21:04 . 2008-02-06 21:04 18 --a------ C:\WINDOWS\gfact.ini
2008-02-06 20:57 . 2008-02-06 21:50 <REP> d-------- C:\Program Files\Pcsx2
2008-02-06 10:19 . 2008-02-06 10:19 <REP> d--hs---- C:\found.000

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-01 09:50 6,144 --sha-w C:\Program Files\Thumbs.db
2008-02-29 19:40 --------- d-----w C:\Program Files\Google
2008-02-29 19:31 10,563 ----a-w C:\Program Files\hijackthis.log
2008-02-29 19:30 5,534 ----a-w C:\Program Files\aswclnr.log
2008-02-29 12:29 --------- d-----w C:\Program Files\MaxiCompte
2008-02-28 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-28 10:06 --------- d-----w C:\Program Files\eMule
2008-02-24 16:48 81,920 ------r C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
2008-02-24 16:48 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-24 16:48 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2008-02-24 15:03 --------- d-----w C:\Program Files\EA GAMES
2008-02-24 14:48 --------- d-----w C:\Program Files\Winamp
2008-02-24 14:48 --------- d-----w C:\Program Files\RegCleaner
2008-02-24 14:48 --------- d-----w C:\Program Files\QuickTime
2008-02-24 14:48 --------- d-----w C:\Program Files\Help
2008-02-24 14:48 --------- d-----w C:\Program Files\FinePixViewer
2008-02-24 12:38 --------- d-----w C:\Program Files\Disney Pix 2.0
2008-02-22 21:33 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-02-22 21:15 --------- d-----w C:\Program Files\Shareaza
2008-02-22 20:40 --------- d-----w C:\Program Files\Java
2008-02-10 23:06 21 ----a-w C:\Program Files\Sims2Pack Clean Installer.ini
2008-02-10 17:03 47,360 ----a-w C:\Documents and Settings\maman\Application Data\pcouffin.sys
2008-02-10 17:03 --------- d-----w C:\Program Files\VSO
2008-02-10 17:03 --------- d-----w C:\Documents and Settings\maman\Application Data\Vso
2008-02-10 17:02 --------- d-----w C:\Program Files\Elaborate Bytes
2008-02-10 17:01 --------- d-----w C:\Program Files\SlySoft
2008-02-10 12:41 --------- d-----w C:\Program Files\Ahead
2008-02-09 20:57 299,465 ----a-w C:\Program Files\F_N_Roxy_Tim.zip.part
2008-02-09 19:40 6,703,104 ----a-w C:\Program Files\winzip111fr.msi
2008-02-06 13:11 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2008-01-28 20:44 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-01-20 14:04 --------- d-----w C:\Program Files\THQ
2008-01-20 13:13 3,861,320 ----a-w C:\Program Files\eMule0.48a-Installer2.exe
2008-01-19 20:57 --------- d-----w C:\Program Files\Ubisoft
2008-01-19 20:53 --------- d-----w C:\Program Files\D-Tools
2008-01-11 10:11 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-01-10 20:16 1,182,550 ----a-w C:\Program Files\img017.jpg
2008-01-10 20:16 1,118,010 ----a-w C:\Program Files\img016.jpg
2008-01-10 20:14 7,230 ----a-w C:\Program Files\nouveau-24.jpg
2008-01-09 22:53 --------- d-----w C:\Documents and Settings\maman\Application Data\CopyToDvd
2008-01-04 23:48 --------- d-----w C:\Documents and Settings\maman\Application Data\CDBurnerXPP
2008-01-04 23:26 24,265,736 ----a-w C:\Program Files\dotnetfx.exe
2008-01-04 23:16 --------- d-----w C:\Program Files\MSBuild
2008-01-04 23:06 --------- d-----w C:\Program Files\Reference Assemblies
2008-01-04 22:41 2,945,816 ----a-w C:\Program Files\dotnetfx3setup.exe
2008-01-04 22:11 177,522 ----a-w C:\Program Files\installez-emule-be.exe
2007-12-29 08:23 506,368 ----a-w C:\WINDOWS\system32\winlogon.exe
2007-12-10 16:25 7,792 ----a-w C:\Program Files\CurrentCfg.tpr
2007-12-10 16:25 5,188 ----a-w C:\Program Files\TMPGEnc.ini
2007-12-05 17:22 9 ----a-w C:\Documents and Settings\maman\Application Data\mdb.bin
2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
2007-11-03 11:23 141,410 ----a-w C:\WINDOWS\Internet Logs\vsmon_2nd_2007_11_02_23_58_03_small.dmp.zip
2007-05-19 15:25 7,168 ----a-w C:\Program Files\vdremote.dll
2007-05-19 15:25 7,168 ----a-w C:\Program Files\vdicmdrv.dll
2007-05-19 15:25 5,120 ----a-w C:\Program Files\vdsvrlnk.dll
2007-05-19 15:25 16,384 ----a-w C:\Program Files\auxsetup.exe
2006-09-24 16:11 389,120 ----a-w C:\Program Files\lameACM.acm
2005-12-19 22:52 18,321 ----a-w C:\Program Files\copying
2002-04-07 10:17 414 ----a-w C:\Program Files\lame_acm.xml
2002-01-23 19:39 3,133 ----a-w C:\Program Files\LameACM.inf
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:09 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 22:18 443968]
"SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [ ]
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2008-01-01 17:49 4739072]
"TuneUp MemOptimizer"="C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" [2008-01-16 13:28 197888]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2008-02-24 17:48 20480]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 17:07 196608]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]
"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2008-01-17 10:40 816368]
"MsnMsgr"="~C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 23:43 8466432]
"nwiz"="nwiz.exe" [2007-06-28 23:43 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-28 23:43 81920]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 17:39 90112 C:\WINDOWS\SOUNDMAN.EXE]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24 286720]
"SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 23:14 155648]
"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 12:19 69632]
"SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [ ]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 22:32 53248]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2003-10-02 02:20 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe" [2008-01-15 23:54 37376]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-01-18 17:47 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-01-18 17:37 217088]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2008-02-29 18:31 866384]
"OnlineArmor GUI"="C:\Program Files\Tall Emu\Online Armor\oaui.exe" [2007-11-16 07:51 5029952]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15:09 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 22:18 443968]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55 5674352]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Exif Launcher.lnk - C:\Program Files\FinePixViewer\QuickDCF.exe [2002-01-09 21:53:14 200704]
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-02-24 17:48:09 450560]
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-02-07 22:05:50 663552]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{4F07DA45-8170-4859-9B5F-037EF2970034}"= C:\PROGRA~1\TALLEM~1\ONLINE~1\oaevent.dll [2007-11-16 07:50 633344]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"=

R0 pnpshark;pnpshark;C:\WINDOWS\system32\DRIVERS\pnpshark.sys [2003-10-02 03:16]
R0 st3shark;st3shark;C:\WINDOWS\system32\DRIVERS\st3shark.sys [2003-09-27 14:37]
R1 NDISRD;NDISRD;C:\WINDOWS\system32\drivers\NDISRD.sys [2007-09-29 00:06]
R1 OADevice;OADriver;C:\WINDOWS\system32\drivers\OADriver.sys [2007-11-08 06:37]
R1 OAmon;OAmon;C:\WINDOWS\system32\drivers\OAmon.sys [2007-09-29 00:06]
R2 EAPPkt;Realtek EAPPkt Protocol;C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2006-11-15 16:23]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 15:10]
S2 SvcOnlineArmor;Online Armor;"C:\Program Files\Tall Emu\Online Armor\oasrv.exe" [2007-11-16 07:51]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-02-22 22:35]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-27 07:03:38 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-29 19:31:50 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-02 00:30:53
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-02 0:31:40
ComboFix-quarantined-files.txt 2008-03-01 23:31:25
.
2008-02-29 13:51:27 --- E O F ---
rapport hijack this
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:36:49, on 02/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\spupdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\spnpinst.exe
C:\WINDOWS\system32\Sysocmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\D-Tools\daemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [OnlineArmor GUI] "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.13\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.13\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{11968F34-8673-412C-9C35-657E0D9F1C3A}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{11968F34-8673-412C-9C35-657E0D9F1C3A}: NameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{11968F34-8673-412C-9C35-657E0D9F1C3A}: NameServer = 192.168.1.254
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

ComboFix 08-03-03.17 - maman 2008-03-03 0:51:42.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.196 [GMT 1:00]
Endroit: C:\Documents and Settings\maman\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-03 to 2008-03-03 ))))))))))))))))))))))))))))))))))))
.

2008-03-02 20:22 . 2008-03-02 20:22 <REP> d-------- C:\Program Files\Easy Video Splitter
2008-03-02 00:15 . 2008-03-02 00:15 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-01 10:16 . 2008-03-01 10:17 <REP> d-------- C:\Program Files\Tall Emu
2008-03-01 09:53 . 2008-03-01 09:53 <REP> d-------- C:\OnlineArmor
2008-03-01 09:51 . 2008-03-01 09:51 <REP> d-------- C:\_OTMoveIt
2008-03-01 09:43 . 2008-03-01 09:43 14,771,744 --a------ C:\Program Files\IE7-WindowsXP-x86-fra.exe
2008-03-01 00:45 . 2008-03-01 00:45 <REP> d-------- C:\Program Files\Trend Micro
2008-03-01 00:45 . 2008-03-01 00:45 812,344 --a------ C:\Program Files\HJTInstall.exe
2008-02-29 21:37 . 2008-02-29 21:37 <REP> d-------- C:\Documents and Settings\maman\Application Data\Simply Super Software
2008-02-29 21:37 . 2008-02-29 21:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-02-29 21:36 . 2008-02-29 21:37 6,894,528 --a------ C:\Program Files\trsetup.exe
2008-02-29 21:22 . 2008-03-01 10:50 5,120 --ahs---- C:\WINDOWS\system32\Thumbs.db
2008-02-29 20:47 . 2008-02-29 20:47 <REP> d--hs---- C:\found.001
2008-02-29 20:10 . 2008-02-29 20:10 407,680 --a------ C:\Program Files\aswclnr.exe
2008-02-29 19:13 . 2008-02-29 19:13 1,308,216 --a------ C:\Program Files\HiJackThis_v2.exe
2008-02-29 18:51 . 2008-03-02 00:42 <REP> d-------- C:\Program Files\Panda Security
2008-02-29 16:03 . 2008-02-29 16:03 <REP> d-------- C:\Program Files\Activision
2008-02-29 14:31 . 2008-02-29 14:31 123 --a------ C:\WINDOWS\wininit.ini
2008-02-29 13:32 . 2008-02-29 13:32 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-29 13:32 . 2008-02-29 14:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-29 13:19 . 2008-02-29 13:19 7,467,056 --a------ C:\Program Files\spybotsd15.exe
2008-02-27 08:03 . 2008-02-27 08:03 <REP> d-------- C:\Program Files\Apple Software Update
2008-02-27 08:03 . 2008-02-27 08:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-02-25 21:52 . 2008-02-25 21:52 2,563 --a------ C:\WINDOWS\image.jpg
2008-02-24 19:00 . 2008-02-24 19:00 <REP> d-------- C:\My Shared Folder
2008-02-24 18:59 . 2008-02-24 18:59 <REP> d-------- C:\Documents and Settings\maman\Application Data\Kazaa Lite
2008-02-24 18:58 . 2008-02-24 18:58 2,803,665 --a------ C:\Program Files\klitekpp243f.exe
2008-02-24 18:55 . 2008-02-24 18:55 <REP> d-------- C:\Program Files\Kazaa
2008-02-24 17:50 . 2008-02-24 17:50 <REP> d-------- C:\Program Files\Fichiers communs\FotoWire
2008-02-24 17:50 . 2008-02-24 17:50 <REP> d-------- C:\Documents and Settings\maman\Application Data\FotoWire
2008-02-24 17:49 . 2004-10-08 12:46 53,248 -ra------ C:\WINDOWS\system32\InstMed.exe
2008-02-24 17:48 . 2008-02-24 17:50 <REP> d-------- C:\Program Files\Logitech
2008-02-24 17:04 . 2008-02-24 17:04 2,402,832 --a------ C:\Program Files\WLinstaller.exe
2008-02-24 16:55 . 2008-02-29 13:01 <REP> d-------- C:\Documents and Settings\maman\Application Data\skypePM
2008-02-24 16:55 . 2008-02-24 16:55 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-02-24 16:53 . 2008-02-29 13:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype
2008-02-24 16:48 . 2008-02-24 16:51 22,690,600 --a------ C:\Program Files\SkypeSetup.exe
2008-02-24 16:06 . 2008-02-24 17:38 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
2008-02-24 16:05 . 2008-02-24 17:39 <REP> d-------- C:\Program Files\Fichiers communs\LogiShrd
2008-02-24 16:00 . 2008-02-24 16:03 32,227,136 --a------ C:\Program Files\logitech_logitech_quickcam_11.1.0.2016_whql_4219.exe
2008-02-24 13:38 . 2008-03-03 00:48 16,896 --ahs---- C:\WINDOWS\Thumbs.db
2008-02-24 13:19 . 2008-02-24 13:19 1,271,557 --a------ C:\Program Files\wrar371fr.exe
2008-02-23 18:32 . 2008-02-23 18:31 4,419,000 --a------ C:\Program Files\burn4free_burn4free_3.9.0.0_francais_14723.exe
2008-02-22 22:35 . 2008-02-22 22:35 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-02-22 22:35 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-02-22 22:34 . 2008-02-22 22:34 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-02-22 22:34 . 2008-02-22 22:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-02-22 22:30 . 2008-02-22 22:31 14,174,464 --a------ C:\Program Files\TU2008TrialFR.exe
2008-02-22 22:17 . 2008-02-24 18:55 594,880 --a------ C:\Program Files\kazaa_setup.exe
2008-02-22 22:15 . 2008-02-22 22:15 5,265,101 --a------ C:\Program Files\Shareaza_2.3.1.0_Win32.exe
2008-02-22 21:50 . 2008-02-22 23:19 <REP> d-------- C:\Program Files\Yahoo!
2008-02-22 21:50 . 2008-02-22 21:50 <REP> d-------- C:\Program Files\CCleaner
2008-02-22 21:49 . 2008-02-22 21:50 2,733,928 --a------ C:\Program Files\ccsetup204.exe
2008-02-22 21:45 . 2008-02-22 21:44 2,467,439 --a------ C:\Program Files\winamp295_full.exe
2008-02-15 23:39 . 2008-02-15 23:39 <REP> d-------- C:\Documents and Settings\maman\Application Data\dvdcss
2008-02-14 22:14 . 2008-02-14 22:51 <REP> d-------- C:\Program Files\Photo Viewer 2.4
2008-02-13 16:43 . 2008-02-15 12:52 0 --a------ C:\WINDOWS\obmetmp.htm
2008-02-11 21:39 . 2006-11-12 11:39 483,328 --a------ C:\WINDOWS\system32\actskn45.ocx
2008-02-11 16:13 . 2008-02-11 16:13 <REP> d-------- C:\Program Files\Common Files
2008-02-11 00:22 . 2008-02-04 00:29 116 --a------ C:\WINDOWS\NeroDigital.ini
2008-02-10 13:41 . 2008-02-10 13:41 <REP> d-------- C:\Program Files\Fichiers communs\Ahead
2008-02-10 13:41 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-02-10 13:41 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-02-10 13:41 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-02-10 13:41 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-02-10 13:41 . 2001-07-09 10:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-02-10 13:41 . 2004-03-02 16:37 125,184 --------- C:\WINDOWS\system32\drivers\imagesrv.sys
2008-02-10 13:41 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-02-10 13:41 . 2004-03-02 16:37 5,504 --------- C:\WINDOWS\system32\drivers\imagedrv.sys
2008-02-10 13:39 . 2008-02-10 13:39 <REP> d-------- C:\Program Files\Nero 6 (+crack)
2008-02-09 23:26 . 2008-02-10 01:23 <REP> d-------- C:\Program Files\Sims2Pack Clean Installer
2008-02-09 23:25 . 2008-02-09 23:25 441,214 --a------ C:\Program Files\Sims2PackInstaller_v1514.exe
2008-02-09 23:07 . 2008-02-09 23:07 4,922,461 --a------ C:\Program Files\theme-de-bureau.exe
2008-02-09 20:41 . 2008-02-09 20:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2008-02-09 18:16 . 2008-02-24 13:23 <REP> d-------- C:\Program Files\Maxis
2008-02-07 22:05 . 2006-11-02 17:12 348,416 --a------ C:\WINDOWS\system32\drivers\rt73.sys
2008-02-07 22:05 . 2006-06-20 22:53 319,488 --a------ C:\WINDOWS\system32\AegisI5.exe
2008-02-07 22:05 . 2006-06-17 12:29 295,018 --a------ C:\WINDOWS\system32\Install7x.dll
2008-02-07 22:05 . 2005-11-30 11:33 2,048 --a------ C:\WINDOWS\system32\drivers\rt73.bin
2008-02-07 22:05 . 2006-03-06 15:36 45 --a------ C:\WINDOWS\filespec7x
2008-02-07 22:04 . 2008-02-07 22:04 <REP> d-------- C:\Program Files\RALINK
2008-02-07 22:02 . 2008-02-07 22:02 <REP> d-------- C:\Documents and Settings\maman\Application Data\InstallShield
2008-02-06 21:04 . 2008-02-06 21:04 <REP> d-------- C:\WINDOWS\new mario62
2008-02-06 21:04 . 2008-02-06 21:04 171,520 --a------ C:\WINDOWS\system32\cncs32.dll
2008-02-06 21:04 . 2008-02-06 21:04 18 --a------ C:\WINDOWS\gfact.ini
2008-02-06 20:57 . 2008-02-06 21:50 <REP> d-------- C:\Program Files\Pcsx2
2008-02-06 10:19 . 2008-02-06 10:19 <REP> d--hs---- C:\found.000
2008-02-03 19:09 . 2008-02-03 19:13 <REP> d-------- C:\Program Files\Canon
2008-02-03 18:06 . 2008-02-03 18:06 <REP> d-------- C:\Program Files\ArcSoft

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-29 19:40 --------- d-----w C:\Program Files\Google
2008-02-29 19:31 10,563 ----a-w C:\Program Files\hijackthis.log
2008-02-29 19:30 5,534 ----a-w C:\Program Files\aswclnr.log
2008-02-29 12:29 --------- d-----w C:\Program Files\MaxiCompte
2008-02-28 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-24 16:48 81,920 ------r C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
2008-02-24 16:48 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2008-02-24 15:03 --------- d-----w C:\Program Files\EA GAMES
2008-02-24 14:48 --------- d-----w C:\Program Files\Winamp
2008-02-24 14:48 --------- d-----w C:\Program Files\RegCleaner
2008-02-24 14:48 --------- d-----w C:\Program Files\QuickTime
2008-02-24 14:48 --------- d-----w C:\Program Files\Help
2008-02-24 14:48 --------- d-----w C:\Program Files\FinePixViewer
2008-02-24 12:38 --------- d-----w C:\Program Files\Disney Pix 2.0
2008-02-22 21:33 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-02-22 21:15 --------- d-----w C:\Program Files\Shareaza
2008-02-22 20:40 --------- d-----w C:\Program Files\Java
2008-02-10 23:06 21 ----a-w C:\Program Files\Sims2Pack Clean Installer.ini
2008-02-10 17:03 47,360 ----a-w C:\Documents and Settings\maman\Application Data\pcouffin.sys
2008-02-10 17:03 --------- d-----w C:\Program Files\VSO
2008-02-10 17:03 --------- d-----w C:\Documents and Settings\maman\Application Data\Vso
2008-02-10 17:02 --------- d-----w C:\Program Files\Elaborate Bytes
2008-02-10 17:01 --------- d-----w C:\Program Files\SlySoft
2008-02-10 12:41 --------- d-----w C:\Program Files\Ahead
2008-02-09 20:57 299,465 ----a-w C:\Program Files\F_N_Roxy_Tim.zip.part
2008-02-09 19:40 6,703,104 ----a-w C:\Program Files\winzip111fr.msi
2008-02-06 13:11 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2008-02-03 23:36 --------- d-----w C:\Program Files\eMule
2008-02-03 23:22 6,144 --sha-w C:\Program Files\Thumbs.db
2008-02-03 17:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-03 17:00 --------- d-----w C:\Documents and Settings\maman\Application Data\Canon
2008-01-28 20:44 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-01-20 14:04 --------- d-----w C:\Program Files\THQ
2008-01-20 13:13 3,861,320 ----a-w C:\Program Files\eMule0.48a-Installer2.exe
2008-01-19 20:57 --------- d-----w C:\Program Files\Ubisoft
2008-01-19 20:53 --------- d-----w C:\Program Files\D-Tools
2008-01-11 10:11 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-01-10 20:16 1,182,550 ----a-w C:\Program Files\img017.jpg
2008-01-10 20:16 1,118,010 ----a-w C:\Program Files\img016.jpg
2008-01-10 20:14 7,230 ----a-w C:\Program Files\nouveau-24.jpg
2008-01-09 22:53 --------- d-----w C:\Documents and Settings\maman\Application Data\CopyToDvd
2008-01-04 23:48 --------- d-----w C:\Documents and Settings\maman\Application Data\CDBurnerXPP
2008-01-04 23:26 24,265,736 ----a-w C:\Program Files\dotnetfx.exe
2008-01-04 23:16 --------- d-----w C:\Program Files\MSBuild
2008-01-04 23:06 --------- d-----w C:\Program Files\Reference Assemblies
2008-01-04 22:41 2,945,816 ----a-w C:\Program Files\dotnetfx3setup.exe
2008-01-04 22:11 177,522 ----a-w C:\Program Files\installez-emule-be.exe
2007-12-29 08:23 506,368 ----a-w C:\WINDOWS\system32\winlogon.exe
2007-12-10 16:25 7,792 ----a-w C:\Program Files\CurrentCfg.tpr
2007-12-10 16:25 5,188 ----a-w C:\Program Files\TMPGEnc.ini
2007-12-05 17:22 9 ----a-w C:\Documents and Settings\maman\Application Data\mdb.bin
2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
2007-11-03 11:23 141,410 ----a-w C:\WINDOWS\Internet Logs\vsmon_2nd_2007_11_02_23_58_03_small.dmp.zip
2007-05-19 15:25 7,168 ----a-w C:\Program Files\vdremote.dll
2007-05-19 15:25 7,168 ----a-w C:\Program Files\vdicmdrv.dll
2007-05-19 15:25 5,120 ----a-w C:\Program Files\vdsvrlnk.dll
2007-05-19 15:25 16,384 ----a-w C:\Program Files\auxsetup.exe
2006-09-24 16:11 389,120 ----a-w C:\Program Files\lameACM.acm
2005-12-19 22:52 18,321 ----a-w C:\Program Files\copying
2002-04-07 10:17 414 ----a-w C:\Program Files\lame_acm.xml
2002-01-23 19:39 3,133 ----a-w C:\Program Files\LameACM.inf
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:09 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 22:18 443968]
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2008-01-01 17:49 4739072]
"TuneUp MemOptimizer"="C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" [2008-01-16 13:28 197888]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2008-02-24 17:48 20480]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 17:07 196608]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]
"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2008-01-17 10:40 816368]
"MsnMsgr"="~C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ]
"SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 23:43 8466432]
"nwiz"="nwiz.exe" [2007-06-28 23:43 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-28 23:43 81920]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 17:39 90112 C:\WINDOWS\SOUNDMAN.EXE]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24 286720]
"SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 23:14 155648]
"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 12:19 69632]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 22:32 53248]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2003-10-02 02:20 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe" [2008-01-15 23:54 37376]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-01-18 17:47 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-01-18 17:37 217088]
"SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 15:09 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 22:18 443968]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55 5674352]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Exif Launcher.lnk - C:\Program Files\FinePixViewer\QuickDCF.exe [2002-01-09 21:53:14 200704]
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-02-24 17:48:09 450560]
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-02-07 22:05:50 663552]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{4F07DA45-8170-4859-9B5F-037EF2970034}"= C:\PROGRA~1\TALLEM~1\ONLINE~1\oaevent.dll [ ]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"=
"C:\\Program Files\\eMule\\emule.exe"=

R0 pnpshark;pnpshark;C:\WINDOWS\system32\DRIVERS\pnpshark.sys [2003-10-02 03:16]
R0 st3shark;st3shark;C:\WINDOWS\system32\DRIVERS\st3shark.sys [2003-09-27 14:37]
R2 EAPPkt;Realtek EAPPkt Protocol;C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2006-11-15 16:23]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 15:10]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-02-22 22:35]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-27 07:03:38 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-29 19:31:50 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-03 00:52:53
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-03 0:53:41
ComboFix-quarantined-files.txt 2008-03-02 23:53:31
ComboFix2.txt 2008-03-02 23:47:41
ComboFix3.txt 2008-03-01 23:31:41
.
2008-03-03 02:00:40 --- E O F ---


AntiVir PersonalEdition Classic
Report file date: lundi 3 mars 2008 11:40

Scanning for 1131710 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: maman
Computer name: DEMARTEA-N2BXL5

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 06:52:47
ANTIVIR2.VDF : 7.0.2.181 1993728 Bytes 24/02/2008 06:52:47
ANTIVIR3.VDF : 7.0.2.225 154112 Bytes 03/03/2008 06:52:47
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 03/03/2008 06:52:47
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 03/03/2008 06:52:48
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

Configuration settings for the scan:
Jobname..........................: Rootkit search
Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\rootkit.avp
Logging..........................: high
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Scan memory......................: off
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high
Expanded search settings.........: 0x00300922

Start of the scan: lundi 3 mars 2008 11:40

Starting search for hidden objects.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32\cd042efbbd7f7af1647644e76e06692b
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32\bca643cdc5c2726b20d2ecedcc62c59b
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32\2c81e34222e8052573023a60d06dd016
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32\2582ae41fb52324423be06337561aa48
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32\caaeda5fd7a9ed7697d9686d4b818472
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32\a4a1bcf2cc2b8bc3716b74b2b4522f5d
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32\4d370831d2c43cd13623e232fed27b7b
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32\1d68fe701cdea33e477eb204b76f993d
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32\1fac81b91d8e3c5aa4b0a51804d844a3
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32\f5f62a6129303efb32fbe080bb27835b
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32\fd4e2e1a3940b94dceb5a6a021f2e3c6
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32\threadingmodel
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32\8a8aec57dd6508a385616fbc86791ec2
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&1ee3d36f&0\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&319d8414&0\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&350b3c2c&0\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB\4&c2a22ca&0\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\ROOT_HUB20\4&205a5c46&0\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_03eb&Pid_3301\5&3302c37f&0&2\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3302c37f&0&1\friendlyname
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_092c\5&3379506f&0&1\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&2eff1ceb&0&1\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3302c37f&0&1\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\5&3379506f&0&2\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&2\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&3\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_046d&Pid_c016\6&24e1efa2&0&4\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714\703C33\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_00\7&4e5101e&0&0000\friendlyname
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04a9&Pid_1714&MI_01\7&4e5101e&0&0001\parentidprefix
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\locationinformation
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\capabilities
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\uinumber
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\hardwareid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\compatibleids
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\classguid
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\class
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\driver
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\mfg
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\service
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04b0&Pid_0205\4617757\configflags
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04cb&Pid_0118\Y-411^^^^^020912XFPX0009004364\device parameters
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04cb&Pid_0118\Y-411^^^^^020912XFPX0009004364\devicedesc
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\USB\Vid_04cb&Pid_0118\Y-411^^^^^020912XFPX0009004364\locationinformation
[NOTE] The registry entry is invisible.