Forums Zebulon.fr: Virus et rapport ZHPDiag - Forums Zebulon.fr

Bonjour Zeb Help Processus

m'indique plusieurs problèmes :

C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe
O23 - Service: XAMPP Service (XAMPP) - C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe
O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.reg -->13/07/2009 - 11:24:04
O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.txt -->13/07/2009 - 11:24:04


Or je n'ai pas de répertoire
C:\Documents and Settings\NF\Bureau\xam


Ca sent donc le paté

Voici mon ZHPDIAG

merci


Rapport de ZHPDiag v1.21 par Nicolas Coolman
Enregistré le 13/07/2009 13:23:57
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
MSIE: Internet Explorer v7.0.5730.13
MFIE: Mozilla Firefox (3.0.11)

---\\ Processus lancés
C:\Program Files\Spamihilator\spamihilator.exe
C:\xampplite\apache\bin\apache.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ati2sgag.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Winilab\azurCfrService.exe
C:\PVSW\Bin\WGE_SRV.exe
C:\WINDOWS\system32\services.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:/xampplite/mysql/bin/mysqld-nt.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\Program Files\Switch Off\swoff.exe
C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\Ipswitch\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: ALToolBar BHO - {7F1A79F9-78D1-4186-9F60-EE0B63DF042A} - C:\Program Files\ESTsoft\ALToolBar\ALToolBand_114_25.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: ALToolBar - {38FBE93D-4CA1-4414-AF6A-94920C5BD8DA} - C:\Program Files\ESTsoft\ALToolBar\ALToolBand_114_25.dll

---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [Spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [Switch Off] C:\Program Files\Switch Off\swoff.exe
O4 - HKLM\..\policies\Explorer: [NoWelcomeScreen] Data="1"
O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1"
O4 - HKLM\..\policies\Explorer: [NoDriveAutoRun] Data="67108863"
O4 - HKLM\..\policies\Explorer: [NoDriveTypeAutoRun] Data="323"
O4 - HKLM\..\policies\Explorer: [NoDrives] Data="0"

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: ALToolBar &Search - res://C:\Program Files\ESTsoft\ALToolBar\ALToolBandRes.dll/23/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll,101
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/e/4.../OGAControl.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.4.1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1210939207203
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/Tran...ransferCtrl.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab
O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.micros...ntent/opuc4.cab

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll
O20 - Winlogon Notify: WLEventStart - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Apache2.2 (Apache2.2) - C:\xampplite\apache\bin\apache.exe" -k runservice
O23 - Service: (Ati HotKey Poller) - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart (ATI Smart) - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Anti-Virus (avp) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe -r
O23 - Service: (azurCfrService) - C:\Program Files\Winilab\azurCfrService.exe
O23 - Service: EBP Pervasive.SQL (EBP Pervasive.SQL) - C:\PVSW\Bin\WGE_SRV.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf
O23 - Service: Message Queuing (MSMQ) - C:\WINDOWS\System32\mqsvc.exe
O23 - Service: Message Queuing Triggers (MSMQTriggers) - C:\WINDOWS\System32\mqtgsvc.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
O23 - Service: MySql (MySql) - C:/xampplite/mysql/bin/mysqld-nt.exe
O23 - Service: NMSAccessU (NMSAccessU) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Services TCP/IP simplifiés (SimpTcp) - C:\WINDOWS\System32\tcpsvcs.exe
O23 - Service: Service SNMP (SNMP) - C:\WINDOWS\System32\snmp.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: SQL Server Browser (SQLBrowser) - c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
O23 - Service: Switch Off (Switch Off) - C:\Program Files\Switch Off\swoff.exe -service
O23 - Service: XAMPP Service (XAMPP) - C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE
O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Adobe Shockwave Director 11.0 - {233C1507-6A77-46A4-9443-F871F945D258} - C:\WINDOWS\system32\Adobe\Director\SwDir.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)
O40 - ASIC: Adobe Shockwave Director 11.0 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Browser Customizations - {323D2C37-674F-CF17-11D6-AFBB362DD265} - (not file)
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: .NET Framework - {3F7924B9-D148-3141-87B1-68F36043A940} - (not file)
O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.7 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: .NET Framework - {72AD53CC-CCC0-3757-8480-9EE176866A7C} - (not file)
O40 - ASIC: Web Folders - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Lecteur Windows Media - {7F800EED-25D4-E3DB-A6F7-CC5360992CAC} - (not file)
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file)
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)
O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\FlDbg9f.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys
O41 - Driver: Environnement de prise en charge de réseau AFD (AFD) - C:\WINDOWS\System32\drivers\afd.sys
O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys
O41 - Driver: (no object) (ati2mtag) - C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\System32\DRIVERS\atmarpc.sys
O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\System32\DRIVERS\audstub.sys
O41 - Driver: Broadcom 440x 10/100 Integrated Controller XP Driver (bcm4sbxp) - C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys
O41 - Driver: (no object) (cswupad20) - C:\WINDOWS\system32\drivers\cswupad2.sys
O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys
O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys
O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys
O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys
O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys
O41 - Driver: USB Serial Converter Driver (FTDIBUS) - C:\WINDOWS\system32\drivers\ftdibus.sys
O41 - Driver: USB Serial Port Driver (FTSER2K) - C:\WINDOWS\system32\drivers\ftser2k.sys
O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\System32\DRIVERS\msgpc.sys
O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\System32\DRIVERS\HDAudBus.sys
O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\System32\DRIVERS\hidusb.sys
O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\System32\DRIVERS\ipinip.sys
O41 - Driver: Traducteur d'adresses réseau IP (IpNat) - C:\WINDOWS\System32\DRIVERS\ipnat.sys
O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\System32\DRIVERS\irenum.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
O41 - Driver: Kl1 (kl1) - C:\WINDOWS\system32\drivers\kl1.sys
O41 - Driver: Kaspersky Lab Boot Guard Driver (klbg) - C:\WINDOWS\system32\drivers\klbg.sys
O41 - Driver: Kaspersky Lab Driver (klif) - C:\WINDOWS\system32\DRIVERS\klif.sys
O41 - Driver: Kaspersky Anti-Virus NDIS Filter (klim5) - C:\WINDOWS\system32\DRIVERS\klim5.sys
O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys
O41 - Driver: Machnm32 Driver (Machnm32) - C:\WINDOWS\System32\Machnm32.sys
O41 - Driver: Motorola USB CDC ACM Driver (motmodem) - C:\WINDOWS\system32\DRIVERS\motmodem.sys
O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\System32\DRIVERS\mouhid.sys
O41 - Driver: Message Queuing access control (MQAC) - C:\WINDOWS\System32\drivers\mqac.sys
O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\System32\DRIVERS\mrxdav.sys
O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys
O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys
O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\System32\DRIVERS\mssmbios.sys
O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\System32\DRIVERS\ndistapi.sys
O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\System32\DRIVERS\ndisuio.sys
O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\System32\DRIVERS\ndiswan.sys
O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\System32\DRIVERS\netbios.sys
O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys
O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys
O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\System32\DRIVERS\raspptp.sys
O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\System32\DRIVERS\processr.sys
O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\System32\DRIVERS\psched.sys
O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\System32\DRIVERS\ptilink.sys
O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\System32\DRIVERS\raspppoe.sys
O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\System32\DRIVERS\raspti.sys
O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\System32\DRIVERS\rdpdr.sys
O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\System32\DRIVERS\redbook.sys
O41 - Driver: Reliable Multicast Protocol driver (RMCAST) - C:\WINDOWS\System32\drivers\RMCast.sys
O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\System32\DRIVERS\secdrv.sys
O41 - Driver: Serenum Filter Driver (Serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys
O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys
O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\System32\DRIVERS\sr.sys
O41 - Driver: Srv (Srv) - C:\WINDOWS\System32\DRIVERS\srv.sys
O41 - Driver: SAMSUNG Mobile USB Device 1.0 driver (WDM) (ss_bus) - C:\WINDOWS\system32\DRIVERS\ss_bus.sys
O41 - Driver: SAMSUNG Mobile USB Modem 1.0 Filter (ss_mdfl) - C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys
O41 - Driver: SAMSUNG Mobile USB Modem 1.0 Drivers (ss_mdm) - C:\WINDOWS\system32\DRIVERS\ss_mdm.sys
O41 - Driver: SigmaTel High Definition Audio CODEC (STHDA) - C:\WINDOWS\system32\drivers\sthda.sys
O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\System32\DRIVERS\swenum.sys
O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys
O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys
O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
O41 - Driver: ULYS USB Acquisition device driver (UPAD) - C:\WINDOWS\System32\Drivers\CSWUPAD.sys
O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\System32\DRIVERS\update.sys
O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\System32\DRIVERS\usbccgp.sys
O41 - Driver: Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft (usbehci) - C:\WINDOWS\System32\DRIVERS\usbehci.sys
O41 - Driver: Pilote de concentrateur standard USB Microsoft (usbhub) - C:\WINDOWS\System32\DRIVERS\usbhub.sys
O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\System32\DRIVERS\usbohci.sys
O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys
O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys
O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS
O41 - Driver: Virtual Machine Monitor (vmm) - C:\WINDOWS\system32\Drivers\vmm.sys
O41 - Driver: Virtual Machine Network Services Driver (VPCNetS2) - C:\WINDOWS\system32\DRIVERS\VMNetSrv.sys
O41 - Driver: Performance Tools Driver 9.0 (VSPerfDrv90) - C:\Program Files\Microsoft Visual Studio 9.0\Team Tools\Performance Tools\VSPerfDrv90.sys
O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\System32\DRIVERS\wanarp.sys
O41 - Driver: Wdf01000 (Wdf01000) - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) - C:\WINDOWS\System32\drivers\ws2ifsl.sys
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: ALSong
O42 - Logiciel: ALToolbar
O42 - Logiciel: ALTools Update
O42 - Logiciel: ALZip
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel
O42 - Logiciel: ATI Catalyst Control Center
O42 - Logiciel: ATI Display Driver
O42 - Logiciel: Access to MySQL 4.3 Demo
O42 - Logiciel: Active Ports
O42 - Logiciel: Adobe AIR
O42 - Logiciel: Adobe Anchor Service CS4
O42 - Logiciel: Adobe Bridge CS4
O42 - Logiciel: Adobe CMaps CS4
O42 - Logiciel: Adobe CSI CS4
O42 - Logiciel: Adobe Default Language CS4
O42 - Logiciel: Adobe Device Central CS4
O42 - Logiciel: Adobe Dreamweaver CS4
O42 - Logiciel: Adobe Extension Manager CS4
O42 - Logiciel: Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flex Builder 3
O42 - Logiciel: Adobe Illustrator CS2
O42 - Logiciel: Adobe Output Module
O42 - Logiciel: Adobe Photoshop 7.0
O42 - Logiciel: Adobe Reader 9.1.2 - Français
O42 - Logiciel: Adobe Service Manager Extension
O42 - Logiciel: Adobe Setup
O42 - Logiciel: Adobe Shockwave Player 11
O42 - Logiciel: Adobe Type Support CS4
O42 - Logiciel: Adobe Update Manager CS4
O42 - Logiciel: Adobe XMP Panels CS4
O42 - Logiciel: Athlon 64 Processor Driver
O42 - Logiciel: Avanquest update
O42 - Logiciel: Axialis IconWorkshop 6.0
O42 - Logiciel: Broadcom 440x 10/100 Integrated Controller
O42 - Logiciel: CDBurnerXP
O42 - Logiciel: Chameleon Flash Pro edition 1.20
O42 - Logiciel: Connect
O42 - Logiciel: Diagram Designer
O42 - Logiciel: EBP Btrieve 8.6
O42 - Logiciel: EBP Comptabilité 12.0
O42 - Logiciel: EBP Gestion Commerciale 12.0
O42 - Logiciel: EBP Paye 12.0
O42 - Logiciel: FTDI USB Serial Converter Drivers
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)
O42 - Logiciel: High Definition Audio Driver Package - KB835221
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Hotfix for Office (KB950278)
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5)
O42 - Logiciel: IIS Diagnostics Toolkit January 2006 (x86)
O42 - Logiciel: ISV Settings Manager
O42 - Logiciel: InfoRapid Search & Replace
O42 - Logiciel: Instant PLUS
O42 - Logiciel: Ipswitch WS_FTP Pro
O42 - Logiciel: Java DB 10.3.1.4
O42 - Logiciel: Java™ 6 Update 11
O42 - Logiciel: Java™ 6 Update 6
O42 - Logiciel: Java™ 6 Update 7
O42 - Logiciel: Java™ SE Development Kit 6 Update 6
O42 - Logiciel: Kaspersky Anti-Virus 2009
O42 - Logiciel: KeyyoFax 1.0
O42 - Logiciel: Lecteur Windows Media 11
O42 - Logiciel: Lunascape5
O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 6 Service Pack 2 (KB954459)
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Micro Application - 3D Architecte Pro 2008
O42 - Logiciel: Microsoft .NET Framework 1.1
O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366)
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Bootvis
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP
O42 - Logiciel: Microsoft Device Emulator version 3.0 - FRA
O42 - Logiciel: Microsoft Document Explorer 2008
O42 - Logiciel: Microsoft Document Explorer 2008 Language Pack - FRA
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
O42 - Logiciel: Microsoft National Language Support Downlevel APIs
O42 - Logiciel: Microsoft Office Professional Edition 2003
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
O42 - Logiciel: Microsoft Office Visual Web Developer 2007
O42 - Logiciel: Microsoft Office Visual Web Developer MUI (French) 2007
O42 - Logiciel: Microsoft SQL Server 2005
O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition
O42 - Logiciel: Microsoft SQL Server Compact 3.5 for Devices FRA
O42 - Logiciel: Microsoft SQL Server Database Publishing Wizard 1.3
O42 - Logiciel: Microsoft SQL Server Native Client
O42 - Logiciel: Microsoft SQL Server VSS Writer
O42 - Logiciel: Microsoft SQL Server Compact 3.5 SP1 - Français
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: Microsoft Silverlight 2 SDK - Français
O42 - Logiciel: Microsoft Silverlight Tools for Visual Studio 2008 SP1 - FRA
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0
O42 - Logiciel: Microsoft Virtual PC 2007 SP1
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime
O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack
O42 - Logiciel: Microsoft Visual Studio 2008 Performance Collection Tools - FRA
O42 - Logiciel: Microsoft Visual Studio Team System 2008 Development Edition - Français
O42 - Logiciel: Microsoft Visual Studio Team System 2008 Development Edition - Français Service Pack 1 (KB945140)
O42 - Logiciel: Microsoft Visual Studio Web Authoring Component
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - fra
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SP1 Tools
O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SP1 Win32 Tools
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: Module linguistique Microsoft Document Explorer 2008 - FRA
O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FRA
O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FRA Service Pack 1 (KB949258)
O42 - Logiciel: Mozilla Firefox (3.0.11)
O42 - Logiciel: MySQL Connector/ODBC 5.1
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: Norton PartitionMagic 8.0
O42 - Logiciel: Notepad++
O42 - Logiciel: Osiris
O42 - Logiciel: Outils de conception SQL Server Compact 3.5 SP1 - Français
O42 - Logiciel: PDFCreator
O42 - Logiciel: PHPEdit 3.0.6
O42 - Logiciel: Package de pilotes Windows - DataApex Ltd. (cswint9) Chromatography (02/15/2007 5.0.3.3)
O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
O42 - Logiciel: Photoshop Camera Raw
O42 - Logiciel: Pilotes Canon MP
O42 - Logiciel: PokerStars
O42 - Logiciel: Protection PLUS .NET
O42 - Logiciel: Protection PLUS 4.4 Enterprise Edition
O42 - Logiciel: RC-WinTrans 7 Professional
O42 - Logiciel: SAMSUNG Mobile Composite Device Software
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software
O42 - Logiciel: SAMSUNG Mobile USB Modem Software
O42 - Logiciel: SWiSH Max2
O42 - Logiciel: SWiSH Studio2
O42 - Logiciel: Samsung Mobile phone USB driver Software
O42 - Logiciel: Samsung PC Studio 3
O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer
O42 - Logiciel: Sauvegarde des Dossiers personnels Microsoft Outlook
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB954326)
O42 - Logiciel: ShopFactory V7 Demo
O42 - Logiciel: SigmaTel Audio
O42 - Logiciel: Spamihilator
O42 - Logiciel: Suite Shared Configuration CS4
O42 - Logiciel: Switch Off
O42 - Logiciel: Trust SpamAssassin Headers 0.3
O42 - Logiciel: Ulys 2
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
O42 - Logiciel: Update for Microsoft Visual Studio Web Authoring Component (KB945140)
O42 - Logiciel: Utilitaires LanBooster V2.5.3
O42 - Logiciel: Version d'évaluation d'Adobe InDesign 2.0
O42 - Logiciel: VideoLAN VLC media player 0.8.6f
O42 - Logiciel: Visual C++ 2008 IA64 Runtime - (v9.0.30729)
O42 - Logiciel: Visual C++ 2008 IA64 Runtime - v9.0.30729.01
O42 - Logiciel: Visual C++ 2008 x64 Runtime - (v9.0.30729)
O42 - Logiciel: Visual C++ 2008 x64 Runtime - v9.0.30729.01
O42 - Logiciel: Visual C++ CRT 9.0
O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime
O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime
O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)
O42 - Logiciel: WampServer 2.0
O42 - Logiciel: WinISO 5.3
O42 - Logiciel: WinZip
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474)
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130)
O42 - Logiciel: Windows Imaging Component
O42 - Logiciel: Windows Installer Clean Up
O42 - Logiciel: Windows Internet Explorer 7
O42 - Logiciel: Windows Media Format 11 runtime
O42 - Logiciel: Windows Media Player 11
O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Pocket PC
O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Smartphone
O42 - Logiciel: Windows XP Service Pack 3
O42 - Logiciel: Winilab III
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0
O42 - Logiciel: ZebHelpProcess 2.33.12
O42 - Logiciel: kuler

---\\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe AIR
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe Systems Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Borland Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\CC100Topologic
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\DESIGNER
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\EBP
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\iS3
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Macrovision Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Merge Modules
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Motorola Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\PC SOFT
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\RC-WinTrans
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SWiSHzone.com
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Vbox
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Wise Installation Wizard

---\\ Derniers fichiers modifiés ou crées sous System32 (O44)
O44 - LFC:Last File Created - C:\WINDOWS\System32\access.ctl -->05/06/2009 - 07:46:33
O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->29/04/2009 - 05:45:34
O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->11/06/2009 - 08:53:08
O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->28/04/2009 - 10:06:49
O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->29/04/2009 - 05:45:35
O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->28/04/2009 - 10:06:24
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->29/04/2009 - 05:45:35
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieencode.dll -->29/04/2009 - 05:45:36
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->29/04/2009 - 05:45:38
O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->29/04/2009 - 05:45:38
O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->28/04/2009 - 10:06:24
O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->29/04/2009 - 05:45:39
O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009 - 16:33:02
O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009 - 17:51:12
O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->29/04/2009 - 05:45:40
O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->29/04/2009 - 05:45:40
O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->29/04/2009 - 05:45:41
O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->29/04/2009 - 05:45:42
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->11/06/2009 - 09:05:57
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->11/06/2009 - 09:05:57
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->11/06/2009 - 09:05:57
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->11/06/2009 - 09:05:57
O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->11/06/2009 - 09:05:57
O44 - LFC:Last File Created - C:\WINDOWS\System32\pngfilt.dll -->29/04/2009 - 05:45:42
O44 - LFC:Last File Created - C:\WINDOWS\System32\rpcrt4.dll -->15/04/2009 - 15:53:29
O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.reg -->13/07/2009 - 11:24:04
O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.txt -->13/07/2009 - 11:24:04
O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->29/04/2009 - 05:45:43
O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009 - 20:50:30
O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->29/04/2009 - 05:45:44
O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->13/07/2009 - 12:06:47
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\klick.dat -->20/05/2009 - 15:31:07
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\klin.dat -->20/05/2009 - 15:31:07
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbam.sys -->17/06/2009 - 10:27:44
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->17/06/2009 - 10:27:56
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\StarOpen.sys -->18/06/2009 - 11:15:11

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSFIX.EXE-32B75403.pf -->07/07/2009 - 09:42:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSFIXINSTALLER.EXE-16EE80F8.pf -->07/07/2009 - 08:12:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSVIEWER.EXE-297CD185.pf -->07/07/2009 - 09:14:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-3A1F13AE.pf -->10/07/2009 - 07:28:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf -->13/07/2009 - 08:12:41
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADDALIAS.EXE-397F89DD.pf -->10/07/2009 - 13:07:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBELMSVC.EXE-004A961E.pf -->10/07/2009 - 08:55:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBELM_CLEANUP.0001-29037A35.pf -->10/07/2009 - 08:55:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE_UPDATER.EXE-32E1E9B7.pf -->10/07/2009 - 07:28:37
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALBNCOLLECTOR.EXE-3496DC3B.pf -->07/07/2009 - 09:11:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALUPDATE.EXE-398D663A.pf -->07/07/2009 - 09:11:29
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALZIP.EXE-328886AF.pf -->07/07/2009 - 09:13:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\APPLNCH.EXE-00E4DDF1.pf -->13/07/2009 - 07:16:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AR-2.3.11116-DEMO.EXE-00D17F7A.pf -->07/07/2009 - 08:53:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AR.EXE-21B6D7BD.pf -->07/07/2009 - 08:54:34
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ARCON.EXE-1BB32FDD.pf -->07/07/2009 - 14:00:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ASTDEMARRAGE.EXE-3981E4C2.pf -->07/07/2009 - 14:00:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVP.EXE-0C478C0B.pf -->13/07/2009 - 12:23:20
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BACKAPPL.EXE-34EAB192.pf -->02/07/2009 - 16:44:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRIDGE.EXE-3000AD98.pf -->02/07/2009 - 15:24:20
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CDBXPP.EXE-090EB7B9.pf -->07/07/2009 - 07:51:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CIDAEMON.EXE-27AE97A4.pf -->10/07/2009 - 07:11:32
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->13/07/2009 - 12:18:07
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXECF-27E83661.pf -->13/07/2009 - 10:38:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMBOFIX.EXE-0DE2B838.pf -->13/07/2009 - 10:38:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMPTA.EXE-161CA122.pf -->06/07/2009 - 13:02:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CS4SERVICEMANAGER.EXE-09846F10.pf -->07/07/2009 - 07:48:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DCCPROC.EXE-3284D294.pf -->10/07/2009 - 12:46:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf -->10/07/2009 - 12:33:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf -->10/07/2009 - 12:33:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-1ECB6754.pf -->07/07/2009 - 19:00:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-442AE492.pf -->07/07/2009 - 19:00:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-3B8CA5B4.pf -->08/07/2009 - 08:50:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf -->13/07/2009 - 07:34:01
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->13/07/2009 - 07:16:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EDIT2D.EXE-1B08188A.pf -->07/07/2009 - 14:00:43
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXCEL.EXE-13B3F319.pf -->10/07/2009 - 11:19:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf -->13/07/2009 - 11:06:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf -->13/07/2009 - 11:32:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FLASHGOT.EXE-1DBE9A23.pf -->13/07/2009 - 11:32:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FNPLICENSINGSERVICE.EXE-057818D9.pf -->08/07/2009 - 08:51:40
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GESTION.EXE-398E1879.pf -->07/07/2009 - 10:46:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GRAPH.EXE-20E5C6D1.pf -->03/07/2009 - 10:12:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GREP.CFEXE-273BC5E1.pf -->13/07/2009 - 10:38:02
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GRPCONV.EXE-111CD845.pf -->13/07/2009 - 10:38:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GSAR.CFEXE-0E6FCB31.pf -->13/07/2009 - 10:38:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf -->10/07/2009 - 07:50:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HIDEC.EXE-3B166DB3.pf -->13/07/2009 - 10:37:55
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HTTPD.EXE-23B8DFE5.pf -->07/07/2009 - 12:20:35
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->13/07/2009 - 07:19:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ILLUSTRATOR.EXE-06A07E3D.pf -->10/07/2009 - 08:54:32
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAGEREADY.EXE-09057436.pf -->07/07/2009 - 08:49:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->13/07/2009 - 12:23:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INDESIGN.EXE-09E55CCA.pf -->09/07/2009 - 08:53:00
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IS-K907C.TMP-0A290677.pf -->07/07/2009 - 08:47:26
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf -->09/07/2009 - 09:31:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCOMP.EXE-227A6609.pf -->07/07/2009 - 09:10:05
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCOMP.EXE-399C85EC.pf -->06/07/2009 - 16:16:34
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCU40.EXE-20D91F21.pf -->07/07/2009 - 09:09:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf -->13/07/2009 - 11:32:30
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\KEYYOFAX.EXE-03EC4360.pf -->07/07/2009 - 07:49:02
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->10/07/2009 - 12:33:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf -->10/07/2009 - 12:28:21
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LUNA.EXE-397A456B.pf -->07/07/2009 - 07:49:06
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LUNAMIG.EXE-0C6E6640.pf -->07/07/2009 - 07:49:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MICROAPP.EXE-35EF8A2E.pf -->07/07/2009 - 14:00:17
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MINIREG.EXE-1232A49D.pf -->10/07/2009 - 13:07:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSACCESS.EXE-175F0AD1.pf -->07/07/2009 - 12:44:08
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSCONFIG.EXE-35E4DAE9.pf -->08/07/2009 - 07:43:52
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->13/07/2009 - 07:18:33
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MYSQLD.EXE-33995A2C.pf -->07/07/2009 - 12:20:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\N.PIF-1B75D06C.pf -->13/07/2009 - 10:37:54
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->13/07/2009 - 12:23:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTBACKUP.EXE-012B886C.pf -->07/07/2009 - 19:00:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->13/07/2009 - 12:07:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OUTLOOK.EXE-106351DB.pf -->10/07/2009 - 09:55:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PDFCREATOR.EXE-09D304A3.pf -->09/07/2009 - 09:14:16
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PDFSPOOLER.EXE-30F28A9A.pf -->09/07/2009 - 09:14:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PEV.EXE-2937A365.pf -->13/07/2009 - 10:38:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PHOTOSHOP.EXE-0FCBABE3.pf -->07/07/2009 - 08:48:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PHP-WIN.EXE-37882195.pf -->07/07/2009 - 12:20:23
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PLANSELECTOR.EXE-14B4A08F.pf -->07/07/2009 - 14:00:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\POKERSTARS.EXE-1798CEA7.pf -->09/07/2009 - 07:45:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\POKERSTARSUPDATE.EXE-03EA29B1.pf -->09/07/2009 - 07:45:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PV.CFEXE-23E4A9A0.pf -->13/07/2009 - 10:38:27
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PV.EXE-06A2AC78.pf -->13/07/2009 - 10:38:56
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\READER_SL.EXE-2B4EA1CB.pf -->07/07/2009 - 07:49:02
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->13/07/2009 - 11:16:48
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSVR32.EXE-0B2C3062.pf -->07/07/2009 - 12:52:09
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RSMSINK.EXE-032F2BAB.pf -->07/07/2009 - 19:00:22
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-12E27DD0.pf -->09/07/2009 - 08:45:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-17B341D7.pf -->06/07/2009 - 16:33:39
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1EE676D0.pf -->13/07/2009 - 10:38:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf -->10/07/2009 - 11:50:42
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2CC11B9D.pf -->06/07/2009 - 16:33:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-399C632A.pf -->06/07/2009 - 13:49:05
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->13/07/2009 - 07:17:00
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->07/07/2009 - 07:57:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4B89C956.pf -->07/07/2009 - 08:48:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf -->13/07/2009 - 10:38:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAR.EXE-26C0F75A.pf -->07/07/2009 - 08:47:28
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAR.EXE-2C288116.pf -->07/07/2009 - 09:41:03
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-181B766C.pf -->07/07/2009 - 12:51:50
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-19E082DA.pf -->13/07/2009 - 07:16:25
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPAMIHILATOR.EXE-2BA8CF4C.pf -->13/07/2009 - 12:23:19
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWOFF.EXE-2BCEBE5C.pf -->13/07/2009 - 12:23:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWREG.EXE-0937BD77.pf -->13/07/2009 - 10:37:58
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINS000.EXE-384BDCB6.pf -->07/07/2009 - 12:50:36
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf -->13/07/2009 - 12:12:13
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->13/07/2009 - 12:23:03
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VIEWP.EXE-0A4ABABA.pf -->07/07/2009 - 14:00:47
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VSSVC.EXE-0F74375A.pf -->07/07/2009 - 19:00:15
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WAMPMANAGER.EXE-31EE2311.pf -->07/07/2009 - 12:20:31
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WGATRAY.EXE-0ED38BED.pf -->13/07/2009 - 08:05:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINPAYE.EXE-1FEE1B7A.pf -->30/06/2009 - 07:47:00
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf -->09/07/2009 - 08:55:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->13/07/2009 - 12:21:02
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA3.pf -->09/07/2009 - 11:06:48
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSFTPGUI.EXE-0804DC63.pf -->08/07/2009 - 09:07:30
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->13/07/2009 - 12:20:52
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf -->13/07/2009 - 12:23:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf -->13/07/2009 - 11:30:10
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0D21E283.pf -->10/07/2009 - 12:58:11
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-267ED701.pf -->10/07/2009 - 13:04:38
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-37C810A1.pf -->10/07/2009 - 13:04:37
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.EXE-04BF2D0C.pf -->13/07/2009 - 11:06:57
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.TMP-25AED22E.pf -->10/07/2009 - 13:07:49
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.TMP-32A92982.pf -->10/07/2009 - 13:07:03
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IS215.EXE-085421C6.pf -->07/07/2009 - 12:51:59
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-382E75D8.pf -->07/07/2009 - 12:50:37

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

---\\ Export de clé d'application autorisée (ECAA)(O47)
O47 - AAKE:Key Export - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\PVSW\Bin\w3dbsmgr.exe"="C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager"
O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\dccproc.exe"="C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:dccproc"
O47 - AAKE:Key Export - "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Disabled:DNA"
O47 - AAKE:Key Export - "C:\SWKey\PLUS\LFEdit.exe"="C:\SWKey\PLUS\LFEdit.exe:*:Enabled:Protection PLUS"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\Program Files\Maxtor\Maxtor Quick Start\mssManager.exe"="C:\Program Files\Maxtor\Maxtor Quick Start\mssManager.exe:*:Enabled:mssManager"
O47 - AAKE:Key Export - "C:\PVSW\Bin\w3dbsmgr.exe"="C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager"
O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
O47 - AAKE:Key Export - "C:\Program Files\Java\jre1.6.0_06\bin\java.exe"="C:\Program Files\Java\jre1.6.0_06\bin\java.exe:*:Enabled:Java™ Platform SE binary"
O47 - AAKE:Key Export - "C:\Program Files\Java\jdk1.6.0_06\bin\java.exe"="C:\Program Files\Java\jdk1.6.0_06\bin\java.exe:*:Enabled:Java™ Platform SE binary"
O47 - AAKE:Key Export - "C:\Program Files\Java\jdk1.6.0_06\jre\bin\java.exe"="C:\Program Files\Java\jdk1.6.0_06\jre\bin\java.exe:*:Enabled:Java™ Platform SE binary"
O47 - AAKE:Key Export - "C:\Program Files\Ipswitch\WS_FTP Pro\wsftpgui.exe"="C:\Program Files\Ipswitch\WS_FTP Pro\wsftpgui.exe:*:Enabled:WS_FTP Pro Application"
O47 - AAKE:Key Export - "C:\Program Files\Adobe\Flex Builder 3\jre\bin\javaw.exe"="C:\Program Files\Adobe\Flex Builder 3\jre\bin\javaw.exe:*:Enabled:Java™ 2 Platform Standard Edition binary"
O47 - AAKE:Key Export - "C:\xampplite\mysql\bin\mysqld.exe"="C:\xampplite\mysql\bin\mysqld.exe:*:Enabled:mysqld"
O47 - AAKE:Key Export - "C:\SWKey\Instant PLUS\InstantPLUS.exe"="C:\SWKey\Instant PLUS\InstantPLUS.exe:*:Enabled:Instant PLUS"
O47 - AAKE:Key Export - "C:\SWKey\PLUS\LFEdit.exe"="C:\SWKey\PLUS\LFEdit.exe:*:Enabled:Protection PLUS"
O47 - AAKE:Key Export - "C:\SWKey\PLUS.exe"="C:\SWKey\PLUS.exe:*:Enabled:Protection PLUS"
O47 - AAKE:Key Export - "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
O47 - AAKE:Key Export - "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
O47 - AAKE:Key Export - "C:\Program Files\Utilitaires LanBooster\SyslogRd.exe"="C:\Program Files\Utilitaires LanBooster\SyslogRd.exe:*:Enabled:Syslog Monitor"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console"
O47 - AAKE:Key Export - "C:\Program Files\National Instruments\DataSocket\cwdss.exe"="C:\Program Files\National Instruments\DataSocket\cwdss.exe:*:Enabled:National Instruments DataSocket Server"
O47 - AAKE:Key Export - "C:\Documents and Settings\NF\Bureau\pdt-all-in-one-win32-1.0.3\eclipse\eclipse.exe"="C:\Documents and Settings\NF\Bureau\pdt-all-in-one-win32-1.0.3\eclipse\eclipse.exe:*:Enabled:eclipse"
O47 - AAKE:Key Export - "C:\xampplite\apache\bin\apache.exe"="C:\xampplite\apache\bin\apache.exe:*:Enabled:Apache HTTP Server"
O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\cdcc.exe"="C:\Program Files\Spamihilator\cdcc.exe:*:Enabled:Spamihilator DCC Filter Configuration"
O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\dccproc.exe"="C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:Spamihilator DCC Filter"
O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\spamihilator.exe"="C:\Program Files\Spamihilator\spamihilator.exe:*:Enabled:Spamihilator"
O47 - AAKE:Key Export - "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
O47 - AAKE:Key Export - "C:\Program Files\EasyPHP\mysql\bin\mysqld.exe"="C:\Program Files\EasyPHP\mysql\bin\mysqld.exe:*:Enabled:mysqld"
O47 - AAKE:Key Export - "C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
O47 - AAKE:Key Export - "C:\Program Files\WaterProof\PHPEdit\3.0.6\PHPEdit.exe"="C:\Program Files\WaterProof\PHPEdit\3.0.6\PHPEdit.exe:*:Enabled:PHPEdit"
O47 - AAKE:Key Export - "C:\Program Files\Osiris\Osiris.exe"="C:\Program Files\Osiris\Osiris.exe:*:Enabled:Osiris"
O47 - AAKE:Key Export - "C:\Program Files\Maxtor\ManagerApp\MaxUtilities.exe"="C:\Program Files\Maxtor\ManagerApp\MaxUtilities.exe:*:Enabled:Maxtor EasyManage™"
O47 - AAKE:Key Export - "C:\Program Files\Osiris\OsirisFR.exe"="C:\Program Files\Osiris\OsirisFR.exe:*:Enabled:Osiris"

---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ Trojan Driver Search Data (TDSD) (O52)
O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.I420"="msh263.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm"
O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.xvid"="xvidvfw.dll"

---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoWelcomeScreen"=1
O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDrives"=0

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AmdK8.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ati2mtag.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bcm4sbxp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\CSWUPAD.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cswupad2.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmusic.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdibus.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftser2k.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdhid.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kl1.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klbg.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klif.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klim5.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbam.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbamswissarmy.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\motmodem.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mqac.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mskssrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspclock.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspqm.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwrdr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\PQNTDRV.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\SiLib.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\snapman.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_bus.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_cm.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_cmnt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_mdfl.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_mdm.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_wh.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_whnt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\StarOpen.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sthda.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tifsfilt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\timntr.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbccgp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbprint.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbser.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbstor.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\VMM.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\VMNetSrv.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys
O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys


End of the scan: 1012 lines

Bonjour,


Télécharger sur le bureauOTM by OldTimer .
Double-clic sur OTM.exe pour le lancer.
Sous Vista,Clic droit sur le fichier ->Choisir Exécuter en tant qu' Administrateur
Vérifier que Unregister Dll's and Ocx's soit coché.
* Copiez /Collez les lignes ci dessous):

:Processes
explorer.exe
:Files
c:\documents and settings\nf\bureau\xam\xampplite\service.exe

:Services
XAMPP

:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Revenez dans OTM,
Clic droit sur la fenêtre "Paste Instructions for Items to be Moved" sous la barre jaune et choisir Coller(Paste).
* Click le bouton rouge Moveit!
* Fermez OTM
Votre Pc va redémarrer.
Rendez vous dans le dossier C:\_OTM\MovedFiles ,
ouvrez le dernier fichier .log
Copiez/collez en le contenu dans votre prochaine réponse





Télécharger FindyKill sur le bureau
Veuillez noter que ce logiciel est régulièrement mis à jour et que la version que vous allez charger sera obsolète dans quelques jours.
Si, donc, vous avez une version antérieure, désinstallez la.
Connecter tous les disques amovibles (disque dur externe, clé USB…).
Lancer l'installation avec les Paramètres par défaut
Exécuter en tant qu'administrateur
Fermez ou désactivez tous les programmes Antivirus, Antispyware, Pare-feu actifs car ils pourraient perturber le fonctionnement de cet outil
Si vous utilisez Spybot
Désactiver TeaTimer qui ne set à rien et peut faire échouer une désinfection:!
Afficher d'abord le Mode Avancé dans SpyBot
->Options Avancées :
- >menu Mode, Mode Avancé.
Une colonne de menus apparaît dans la partie gauche :
- >cliquer sur Outils,
- >cliquer sur Résident,
Dans Résident :
- >décocher Résident "TeaTimer" pour le désactiver.
Cela est absolument nécessaire au succès de la procédure.
Bien évidemment, vous les rétablirez ensuite.

Double cliquer sur le raccourci FindyKill sur le bureau
Tapez : F et touche [Entrée] pour avoir le programme en français
Au menu principal,choisir l'option 1 (Recherche)
le rapport C:\FindyKill.txt sera généré.



Ensuite le Nettoyage

Double cliquer sur le raccourci FindyKill sur le bureau
Au menu principal,choisir l'option 2 (Suppression)

il y aura 2 redémarrages du PC
avec Suppression des fichiers découverts et des clés de régistre infectées
Restauration du Mode sans échec et de certaines valeurs du régistre
Réparation de l'affichage des fichiers cachés
Relance des services

Laissez travailler l'outil jusqu'à l'apparition du message "Nettoyage effectué !"
Lisez attentivement le rapport C:\FindyKill.txt qui vous indiquera les logiciels à réparer
Ensuite postez le .
Vaccination des lecteurs amovibles
Pour vous éviter une infection ultérieure:
Lancer l' Option (vaccination)


Prévention:
Désactiver l'autorun sur tous les lecteur (USB, CD, DVD, SATA, Firewire, etc.
Pour cela:
Copier/coller ,dans le bloc notes,ce qui suit ,(en vert)sans ligne blanche au début.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion­\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff
Enregistrez sur le bureau sous regis.reg.
Attention;c'est regis.reg et non regis.txt ou regis.reg.txt
Cliquez droit sur le fichier ->fusionner
Acceptez la modification du Régistre:

Pour Désinstaller
Double clic sur le raccourci UsbFix sur le bureau
Lancer l' [color="#400000"]option 5 ( Désinstaller ) ....

Voici les différents rapports :

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder c:\documents and settings\nf\bureau\xam\xampplite\service.exe not found.
========== SERVICES/DRIVERS ==========

Service\Driver XAMPP deleted successfully.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 11799220 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NF
->Temp folder emptied: 1264505 bytes
->Temporary Internet Files folder emptied: 6465482 bytes
->Java cache emptied: 12255440 bytes
->FireFox cache emptied: 75711815 bytes
->Google Chrome cache emptied: 6855190 bytes

User: NF.SARDOU
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 4785261 bytes

User: NF.SARDOU.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

C:\NV20802168.TMP folder deleted successfully.
C:\NV2188928.TMP folder deleted successfully.
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1139202 bytes
%systemroot%\System32 .tmp files removed: 2949170 bytes
Windows Temp folder emptied: 1794032099 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1828,50 mb


OTM by OldTimer - Version 3.0.0.5 log created on 07152009_075652

Files moved on Reboot...

Registry entries deleted on Reboot...











############################## | FindyKill V6.006 |

# User : NF (Administrateurs) # SARDOU
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 08:08:33 | 15/07/2009
# Website : http://pagesperso-or...ools/index.html

# AMD Athlon™ 64 X2 Dual Core Processor 4400+
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 8.0.0.454 [ (!) Disabled | Updated ]

# C:\ # Disque fixe local # 99,64 Go (52,18 Go free) # NTFS
# D:\ # Disque fixe local # 58,59 Go (53,93 Go free) [EURADIF] # NTFS
# E:\ # Disque fixe local # 58,59 Go (32,62 Go free) [DATALYS] # NTFS
# F:\ # Disque fixe local # 81,26 Go (13,63 Go free) [SAUVEGARDE] # NTFS
# G:\ # Connexion réseau # 149 Go (27,27 Go free) [COMMUN] # NTFS
# H:\ # Connexion réseau # 149 Go (51,27 Go free) [COMMDEV] # NTFS
# Z:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Winilab\azurCfrService.exe
C:\PVSW\Bin\WGE_SRV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\msdtc.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\PVSW\BIN\W3dbsmgr.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Registre Startup |

R1 - HKCU\..\Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
R1 - HKCU\..\Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
R1 - HKCU\..\Main: "Start Page"="http://www.google.fr/"
F2 - HKLM\..\logon:"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
F2 - HKLM\..\logon:"DefaultUserName"="NF"
F2 - HKLM\..\logon:"AltDefaultUserName"="NF"
F2 - HKLM\..\logon:"LegalNoticeCaption"=""
F2 - HKLM\..\logon:"LegalNoticeText"=""
04 - HKLM\..\Run: Spamihilator="C:\Program Files\Spamihilator\spamihilator.exe"
04 - HKLM\..\Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
04 - HKLM\..\Run: Ad-Watch=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
04 - HKLM\..\Run: SpybotSnD="C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
04 - HKLM\..\Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
04 - HKCU\..\Run: Switch Off#C:\Program Files\Switch Off\swoff.exe#

################## | Fichiers # Dossiers infectieux |


################## | C:\Documents and Settings\NF\Temporary Internet Files |


################## | All Drives ... |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |


################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V6.006 ! |



















############################## | FindyKill V6.006 |

# User : NF (Administrateurs) # SARDOU
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 08:15:37 | 15/07/2009
# Website : http://pagesperso-or...ools/index.html

# AMD Athlon™ 64 X2 Dual Core Processor 4400+
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : Kaspersky Anti-Virus 8.0.0.454 [ (!) Disabled | Updated ]

# C:\ # Disque fixe local # 99,64 Go (52,11 Go free) # NTFS
# D:\ # Disque fixe local # 58,59 Go (53,93 Go free) [EURADIF] # NTFS
# E:\ # Disque fixe local # 58,59 Go (32,62 Go free) [DATALYS] # NTFS
# F:\ # Disque fixe local # 81,26 Go (13,63 Go free) [SAUVEGARDE] # NTFS
# G:\ # Connexion réseau # 149 Go (27,27 Go free) [COMMUN] # NTFS
# H:\ # Connexion réseau # 149 Go (51,27 Go free) [COMMDEV] # NTFS
# Z:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Winilab\azurCfrService.exe
C:\PVSW\Bin\WGE_SRV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\msdtc.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\PVSW\BIN\W3dbsmgr.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Switch Off\swoff.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\wbem\unsecapp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

################## | Fichiers # Dossiers infectieux |


################## | C:\Documents and Settings\NF\Temporary Internet Files |


################## | All Drives ... |

################## | Autres ... |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[15/07/2009 08:14|--a------|1340] - C:\aaw7boot.log
[21/01/2009 16:25|--a------|381247916] - C:\ADBEDRWVCS4_LS4.7z
[21/01/2009 15:49|--a------|1228304] - C:\ADBEDRWVCS4_LS4.exe
[16/05/2008 12:30|--a------|0] - C:\AUTOEXEC.BAT
[07/07/2009 08:50|--a------|224] - C:\Boot.bak
[13/07/2009 16:59|-rahs----|294] - C:\boot.ini
[24/04/2003 21:00|-rahs----|4952] - C:\Bootfont.bin
[03/08/2004 23:00|--a------|263488] - C:\cmldr
[18/06/2009 11:31|--a------|74] - C:\CMLoader.log
[13/07/2009 12:01|--a------|16190] - C:\ComboFix.txt
[16/05/2008 12:30|--a------|0] - C:\CONFIG.SYS
[07/11/2007 08:00|--a------|17734] - C:\eula.1028.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1031.txt
[07/11/2007 08:00|--a------|10134] - C:\eula.1033.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1036.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1040.txt
[07/11/2007 08:00|--a------|118] - C:\eula.1041.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1042.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.2052.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.3082.txt
[15/07/2009 12:33|--a------|3845] - C:\FindyKill.txt
[07/11/2007 08:00|--a------|1110] - C:\globdata.ini
[07/11/2007 08:00|--a------|843] - C:\install.ini
[07/11/2007 08:03|--a------|76304] - C:\install.res.1028.dll
[07/11/2007 08:03|--a------|96272] - C:\install.res.1031.dll
[07/11/2007 08:03|--a------|91152] - C:\install.res.1033.dll
[07/11/2007 08:03|--a------|97296] - C:\install.res.1036.dll
[07/11/2007 08:03|--a------|95248] - C:\install.res.1040.dll
[07/11/2007 08:03|--a------|81424] - C:\install.res.1041.dll
[07/11/2007 08:03|--a------|79888] - C:\install.res.1042.dll
[07/11/2007 08:03|--a------|75792] - C:\install.res.2052.dll
[07/11/2007 08:03|--a------|96272] - C:\install.res.3082.dll
[16/05/2008 12:30|-rahs----|0] - C:\IO.SYS
[16/05/2008 12:30|-rahs----|0] - C:\MSDOS.SYS
[16/05/2008 13:48|-rahs----|47564] - C:\NTDETECT.COM
[26/01/2009 14:47|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[13/07/2009 17:35|--a------|13030] - C:\PDOXUSRS.NET
[13/07/2009 12:25|--a------|2433] - C:\rapport.txt
[13/07/2009 12:36|--a------|1529241] - C:\SDFix.exe
[02/12/2008 15:38|--ahs----|3072] - C:\Thumbs.db
[28/09/2001 18:00|---------|164864] - C:\UNWISE.EXE
[07/11/2007 08:00|--a------|5686] - C:\vcredist.bmp
[07/11/2007 08:09|--a------|1442522] - C:\VC_RED.cab
[07/11/2007 08:12|--a------|232960] - C:\VC_RED.MSI
[03/07/2008 16:13|--a------|3566162432] - C:\XPProperWiniF Hard Disk.vhd
[04/07/2008 17:14|--a------|3073211392] - C:\XPPropre Hard Disk.vhd
[03/11/2008 12:25|--a------|12894] - C:\XPPropre.vmc
[25/09/2008 10:12|--a------|12968] - C:\XPPropreWiniFR.vmc
[04/07/2008 11:26|--a------|3073211392] - C:\XPWinilab46 Hard Disk.vhd
[04/07/2008 11:26|--a------|13478] - C:\XPWinilab46.vmc
[19/07/2007 10:15|---------|77] - D:\Desktop.ini
[25/09/2006 09:35|---------|26238] - D:\Euradif-RIB.pdf
[14/03/2008 14:27|---------|3777] - D:\menudyn1.js
[22/05/2007 15:38|---------|502] - E:\ActivationFile.htm
[19/07/2007 10:15|---------|77] - E:\Desktop.ini
[23/08/2007 15:55|---------|129] - G:\Raccourci vers Lecteur CD.lnk

################## | Vaccination |

# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# D:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# F:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# H:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH ... |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V6.006 ! |