Aller au contenu

yoyothebest

Membres
  • Compteur de contenus

    666
  • Inscription

  • Dernière visite

  • Jours gagnés

    3

Tout ce qui a été posté par yoyothebest

  1. Perso je ne vois rien de grave Par contre tu peux gagner un poil de temps au démarage en supprimant O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" Au pire vire Adobe reader et préfere lui quelquechose de pmus léger (FoxitRaeder par exemple) et si tu veux avoir une analyse plus pousser utilise malwarebytes qui verra plus de chose que ce pauvre spyboot
  2. Merci Tibonhomme J'ai bien regarder ma clès NoDrive TypeAutoRun et elle avait pour valeur 95. Donc le pb n'était pas là. En creusant sur le net je suis tombé sur cette page http://www.hotline-pc.org/cd-rom-dvd-rom.htm Ce qui a finalement fonctionner pour moi c'est Si quelqu'un à le même soucis ca peut aider Encore merci Tibonhomme
  3. Bonjour, il y a quelques jours, j'ai cru être infecté. On m'a conseillé d'utiliser Usb Fix de C_XX & Chiquitine29. J'ai lancé ce soft pour faire un simple scan et depuis chaque fois que j'installe un DVD-ROM ou autre périférique, mon XP l'ouvre dans l'explorateur. Or avant j'avais la fenêtre me demandant quelle action je souhaite lancer. Que faire pour y revenir ? J'ai vérifier l'autorun dans la base de registre et regarder la configuration de l'autoplay.. tout me semble bon..... on peux m'aider ??? merci
  4. C'est fait " ############################## | UsbFix V6.008 | # User : Administrateur (Administrateurs) # EOMPC-03FBB20F2 # Update on 17/07/09 by Chiquitine29 & C_XX # Start at: 12:56:57 | 17/07/2009 # Website : http://pagesperso-orange.fr/NosTools/index.html # Intel® Core2 CPU 6600 @ 2.40GHz # Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3 # Internet Explorer 8.0.6001.18702 # Windows Firewall Status : Disabled # AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ] # FW : COMODO Firewall Pro[ Enabled ]2.3.035 # C:\ # Disque fixe local # 27,68 Go (16,91 Go free) # NTFS # D:\ # Disque fixe local # 41,75 Go (14,45 Go free) # NTFS # E:\ # Disque fixe local # 48,83 Go (23,61 Go free) # NTFS # F:\ # Disque fixe local # 48,83 Go (28,92 Go free) # NTFS # G:\ # Disque fixe local # 48,83 Go (25,6 Go free) # NTFS # H:\ # Disque fixe local # 16,94 Go (10,56 Go free) # NTFS # I:\ # Disque amovible # J:\ # Disque amovible # K:\ # Disque amovible # L:\ # Disque amovible # M:\ # Disque CD-ROM # N:\ # Disque CD-ROM # O:\ # Disque CD-ROM ############################## | Processus actifs | C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Comodo\Firewall\CPF.exe C:\Program Files\Hercules\Hercules Dualpix Chat and Show\Camservice.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Comodo\Firewall\cmdagent.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\FREEDO~1\fdm.exe C:\WINDOWS\system32\wbem\wmiprvse.exe ################## | Fichiers # Dossiers infectieux | ################## | C:\Documents and Settings\Administrateur\Temporary Internet Files | ################## | All Drives ... | ################## | Registre # Clés Run infectieuses | Présent ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe ################## | Registre # Mountpoints2 | ################## | Etat / Services / Informations | # Affichage des fichiers cachés : OK # Mode sans echec : OK # Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 ) # EapHost -> Start = 3 ( Good = 2 | Bad = 4 ) # Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 ) # SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 ) # wuauserv -> Start = 2 ( Good = 2 | Bad = 4 ) # (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 ) ################## | Cracks / Keygens / Serials | ################## | ! Fin du rapport # UsbFix V6.008 ! | " A première vue rien
  5. Bonjour, j'utilise réguliérement zb help process, et sur les deux dernières versions il m'annonce des infections sur des analyses de ZHPDiag sur : " O44 - LFC:Last File Created 16/07/2009 - 17:16:54 ---A- C:\WINDOWS\System32\tmp.reg O44 - LFC:Last File Created 16/07/2009 - 17:16:54 ---A- C:\WINDOWS\System32\tmp.txt O61 - LFC:Last File Created 17/07/2009 - 09:09:05 ---A- C:\Documents And Settings\Administrateur\Application Data\uTorrent\settings.dat.old O61 - LFC:Last File Created 17/07/2009 - 09:39:05 ---A- C:\Documents And Settings\Administrateur\Application Data\uTorrent\settings.dat " Après une anlyse d'antivir, MBA, Bitdefender et SmitfraudFix je ne trouve rien est ce que vous voyez quelque chose ???? Merci " Rapport de ZHPDiag v1.23.15 par Nicolas Coolman Enregistré le 17/07/2009 10:47:39 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox (3.5.1) ---\\ Processus lancés C:\WINDOWS\system32\sw20.exe C:\WINDOWS\system32\sw24.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Comodo\Firewall\CPF.exe C:\Program Files\Hercules\Hercules Dualpix Chat and Show\Camservice.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Comodo\Firewall\cmdagent.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\services.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [sW20] C:\WINDOWS\system32\sw20.exe O4 - HKLM\..\Run: [sW24] C:\WINDOWS\system32\sw24.exe O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\CPF.exe" /background O4 - HKLM\..\Run: [CamserviceHD] C:\Program Files\Hercules\Hercules Dualpix Chat and Show\Camservice.exe /startup O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data=1 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk - C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll,309 O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll,201 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302 ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14) O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.google.fr ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - file://C:\WINDOWS\Java\classes\xmldso.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1242326128125 O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1247428423109 O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab ---\\ Protocole additionnel et piratage de protocole (O18) O18 - cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll O18 - dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll O18 - mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL O18 - mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL O18 - sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\Windows\system32\mshtml.dll O18 - tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O18 - Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll O18 - text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\Windows\system32\SHELL32.dll O18 - text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\System32\WgaLogon.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Comodo Application Agent (CmdAgent) - C:\Program Files\Comodo\Firewall\cmdagent.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe O23 - Service: StarWind iSCSI Service (StarWindService) - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{265FA29B-342E-4316-8F5C-C86B5EAC5ABE}.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file) O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file) O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file) O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file) O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file) O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file) O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file) O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file) O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file) O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file) O40 - ASIC: .NET Framework - {72AD53CC-CCC0-3757-8480-9EE176866A7C} - (not file) O40 - ASIC: Dossiers Web - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file) O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file) O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file) O40 - ASIC: .NET Framework - {9A394342-4A68-4EBA-85A6-55B559F4E700} - (not file) O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file) O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file) O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file) O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file) O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file) O40 - ASIC: RootsUpdate - {EF289A85-8E57-408d-BE47-73B55609861A} - (not file) O40 - ASIC: .NET Framework - {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - (not file) ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys O41 - Driver: (no object) (Ambfilt) - C:\WINDOWS\system32\drivers\Ambfilt.sys O41 - Driver: Protocole client ARP 1394 (Arp1394) - C:\WINDOWS\system32\DRIVERS\arp1394.sys O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avgntflt (avgntflt) - C:\WINDOWS\system32\DRIVERS\avgntflt.sys O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: Hercules Filter Driver (camfilt2) - C:\WINDOWS\System32\Drivers\camfilt2.sys O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys O41 - Driver: cpuz132 (cpuz132) - C:\WINDOWS\system32\drivers\cpuz132_x32.sys O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys O41 - Driver: giveio (giveio) - C:\WINDOWS\system32\giveio.sys O41 - Driver: GMSIPCI (GMSIPCI) - N:\INSTALL\GMSIPCI.SYS O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\system32\DRIVERS\HDAudBus.sys O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - C:\WINDOWS\system32\drivers\RtkHDAud.sys O41 - Driver: Pilote de processeur Intel (intelppm) - C:\WINDOWS\system32\DRIVERS\intelppm.sys O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys O41 - Driver: Logitech SetPoint Keyboard Driver (L8042Kbd) - C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys O41 - Driver: SetPoint PS/2 Mouse Filter Driver (L8042mou) - C:\WINDOWS\system32\DRIVERS\L8042mou.Sys O41 - Driver: LBeepKE (LBeepKE) - C:\WINDOWS\System32\Drivers\LBeepKE.sys O41 - Driver: Logitech SetPoint KMDF HID Filter Driver (LHidFilt) - C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys O41 - Driver: Logitech SetPoint KMDF Mouse Filter Driver (LMouFilt) - C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys O41 - Driver: SetPoint Mouse Filter Driver (LMouKE) - C:\WINDOWS\system32\DRIVERS\LMouKE.Sys O41 - Driver: Logitech SetPoint KMDF USB Filter (LUsbFilt) - C:\WINDOWS\System32\Drivers\LUsbFilt.Sys O41 - Driver: (no object) (Monfilt) - C:\WINDOWS\system32\drivers\Monfilt.sys O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS\ndistapi.sys O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS\ndisuio.sys O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS\ndiswan.sys O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: Pilote réseau 1394 (NIC1394) - C:\WINDOWS\system32\DRIVERS\nic1394.sys O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS\nv4_mini.sys O41 - Driver: (no object) (nvata) - C:\WINDOWS\system32\DRIVERS\nvata.sys O41 - Driver: NVIDIA nForce Networking Controller Driver (NVENETFD) - C:\WINDOWS\system32\DRIVERS\NVENETFD.sys O41 - Driver: NVIDIA Network Bus Enumerator (nvnetbus) - C:\WINDOWS\system32\DRIVERS\nvnetbus.sys O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys O41 - Driver: Contrôleur hôte compatible IEE 1394 VIA OHCI (ohci1394) - C:\WINDOWS\system32\DRIVERS\ohci1394.sys O41 - Driver: VSO Software pcouffin (pcouffin) - C:\WINDOWS\System32\Drivers\pcouffin.sys O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERS\raspptp.sys O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERS\rasl2tp.sys O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERS\raspppoe.sys O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERS\raspti.sys O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\system32\DRIVERS\rdpdr.sys O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys O41 - Driver: (no object) (sptd) - C:\WINDOWS\System32\Drivers\sptd.sys O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys O41 - Driver: Pilote de stockage de masse USB (usbstor) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS O41 - Driver: USB Video Device (WDM) (usbvideo) - C:\WINDOWS\System32\Drivers\usbvideo.sys O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys O41 - Driver: Wdf01000 (Wdf01000) - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys O41 - Driver: WpdUsb (WpdUsb) - C:\WINDOWS\System32\Drivers\wpdusb.sys O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 7-Zip 4.65 O42 - Logiciel: AIMP2 O42 - Logiciel: AVIcodec (remove only) O42 - Logiciel: Adobe Flash Player 10 ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin O42 - Logiciel: Adobe Shockwave Player 11.5 O42 - Logiciel: Ant Movie Catalog O42 - Logiciel: Archiveur WinRAR O42 - Logiciel: Aspell French Dictionary-0.50-3 O42 - Logiciel: Avira AntiVir Personal - Free Antivirus O42 - Logiciel: Bibliothèques GTK+ 2.14.7 rev a (supprimer uniquement) O42 - Logiciel: Bit Che O42 - Logiciel: CCleaner (remove only) O42 - Logiciel: CDBurnerXP O42 - Logiciel: CDDRV_Installer O42 - Logiciel: COMODO Firewall Pro O42 - Logiciel: CPUID HWMonitor 1.14 O42 - Logiciel: CanoScan Toolbox 4.0 O42 - Logiciel: Cobian Backup 9 O42 - Logiciel: DVD Flick 1.3.0.6 O42 - Logiciel: DVDFab Platinum 4.1.2.0 O42 - Logiciel: DivX Web Player O42 - Logiciel: EPSON Logiciel imprimante O42 - Logiciel: Eye On Network (désinstallation) O42 - Logiciel: FileZilla Client 3.2.6.1 O42 - Logiciel: Free Download Manager 3.0 O42 - Logiciel: Glary Utilities 2.13.0.689 O42 - Logiciel: Hercules Dualpix Chat and Show O42 - Logiciel: HijackThis 2.0.2 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) O42 - Logiciel: IE7Pro O42 - Logiciel: Java 6 Update 14 O42 - Logiciel: K-Lite Mega Codec Pack 5.0.0 O42 - Logiciel: KhalInstallWrapper O42 - Logiciel: Kubuntu O42 - Logiciel: Lecteur Windows Media 11 O42 - Logiciel: Logitech SetPoint O42 - Logiciel: Malwarebytes' Anti-Malware O42 - Logiciel: Microsoft .NET Framework 1.1 O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366) O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft Office Professional Edition 2003 O42 - Logiciel: Microsoft Silverlight O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra O42 - Logiciel: Mozilla Firefox (3.5.1) O42 - Logiciel: Mozilla Thunderbird (2.0.0.22) O42 - Logiciel: NVIDIA Drivers O42 - Logiciel: NVIDIA PhysX O42 - Logiciel: Nero 6 Ultra Edition O42 - Logiciel: PDFCreator O42 - Logiciel: PhotoFiltre O42 - Logiciel: Pidgin O42 - Logiciel: Realtek High Definition Audio Driver O42 - Logiciel: Recuva (remove only) O42 - Logiciel: SIW version 2009-05-12 O42 - Logiciel: SSC Service Utility v4.30 O42 - Logiciel: Spybot - Search & Destroy O42 - Logiciel: TeamViewer 4 O42 - Logiciel: TeraCopy 2.0 O42 - Logiciel: TuneUp Utilities 2009 O42 - Logiciel: UltraEdit-32 O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 O42 - Logiciel: VLC media player 1.0.0 O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) O42 - Logiciel: Windows Internet Explorer 8 O42 - Logiciel: Windows Media Format 11 runtime O42 - Logiciel: XnView 1.96.2 O42 - Logiciel: ZebHelpProcess 2.34 O42 - Logiciel: adsl TV O42 - Logiciel: filehippo.com Update Checker ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Borland Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DivX Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\EPSON O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\GTK O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Logishrd O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:Last File Created 01/06/2009 - 14:25:42 ---A- C:\WINDOWS\system.ini O44 - LFC:Last File Created 01/06/2009 - 14:25:42 ---A- C:\WINDOWS\win.ini O44 - LFC:Last File Created 02/06/2009 - 10:17:27 ---A- C:\WINDOWS\System32\WS2Fix.exe O44 - LFC:Last File Created 02/06/2009 - 17:11:16 ---A- C:\WINDOWS\System32\ff_vfw.dll O44 - LFC:Last File Created 03/06/2009 - 20:10:33 ---A- C:\WINDOWS\System32\quartz.dll O44 - LFC:Last File Created 04/06/2009 - 15:39:54 ---A- C:\WINDOWS\System32\NVUNINST.EXE O44 - LFC:Last File Created 07/07/2009 - 16:10:56 ---A- C:\WINDOWS\System32\MRT.exe O44 - LFC:Last File Created 08/06/2009 - 06:28:34 ---A- C:\WINDOWS\System32\PerfStringBackup.INI O44 - LFC:Last File Created 08/06/2009 - 06:28:34 ---A- C:\WINDOWS\System32\perfc009.dat O44 - LFC:Last File Created 08/06/2009 - 06:28:34 ---A- C:\WINDOWS\System32\perfc00C.dat O44 - LFC:Last File Created 08/06/2009 - 06:28:34 ---A- C:\WINDOWS\System32\perfh009.dat O44 - LFC:Last File Created 08/06/2009 - 06:28:34 ---A- C:\WINDOWS\System32\perfh00C.dat O44 - LFC:Last File Created 08/06/2009 - 06:29:05 ---A- C:\WINDOWS\System32\deploytk.dll O44 - LFC:Last File Created 08/06/2009 - 06:29:05 ---A- C:\WINDOWS\System32\java.exe O44 - LFC:Last File Created 08/06/2009 - 06:29:05 ---A- C:\WINDOWS\System32\javacpl.cpl O44 - LFC:Last File Created 08/06/2009 - 06:29:05 ---A- C:\WINDOWS\System32\javaw.exe O44 - LFC:Last File Created 08/06/2009 - 06:29:05 ---A- C:\WINDOWS\System32\javaws.exe O44 - LFC:Last File Created 08/06/2009 - 20:49:32 ---A- C:\WINDOWS\is-E7UUP.exe O44 - LFC:Last File Created 08/06/2009 - 20:49:32 ---A- C:\WINDOWS\is-E7UUP.lst O44 - LFC:Last File Created 08/06/2009 - 20:49:32 ---A- C:\WINDOWS\is-E7UUP.msg O44 - LFC:Last File Created 09/06/2009 - 17:12:07 ---A- C:\WINDOWS\System32\bdod.bin O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\drivers\nv4_mini.sys O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nv4_disp.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvapi.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvcod.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvcodins.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvcuda.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvcuvenc.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvcuvid.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvdata.bin O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvdisp.nvu O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvoglnt.dll O44 - LFC:Last File Created 10/06/2009 - 05:03:00 ---A- C:\WINDOWS\System32\nvudisp.exe O44 - LFC:Last File Created 10/06/2009 - 07:28:48 ---A- C:\WINDOWS\System32\nvmccs.dll O44 - LFC:Last File Created 10/06/2009 - 07:28:50 ---A- C:\WINDOWS\System32\NvwsApps.xml O44 - LFC:Last File Created 10/06/2009 - 07:28:50 ---A- C:\WINDOWS\System32\nvcolor.exe O44 - LFC:Last File Created 10/06/2009 - 07:28:50 ---A- C:\WINDOWS\System32\nvcpl.dll O44 - LFC:Last File Created 10/06/2009 - 07:28:50 ---A- C:\WINDOWS\System32\nvmctray.dll O44 - LFC:Last File Created 10/06/2009 - 07:28:50 ---A- C:\WINDOWS\System32\nvsvc32.exe O44 - LFC:Last File Created 10/06/2009 - 07:28:52 ---A- C:\WINDOWS\System32\nvdisps.dll O44 - LFC:Last File Created 10/06/2009 - 07:28:58 ---A- C:\WINDOWS\System32\nvgames.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:00 ---A- C:\WINDOWS\System32\nvmccss.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:02 ---A- C:\WINDOWS\System32\nvmobls.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:06 ---A- C:\WINDOWS\System32\nvvitvs.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:12 ---A- C:\WINDOWS\System32\nvwss.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:20 ---A- C:\WINDOWS\System32\nvwddi.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:30 ---A- C:\WINDOWS\System32\nvcpl.cpl O44 - LFC:Last File Created 10/06/2009 - 07:29:30 ---A- C:\WINDOWS\System32\nvcplui.exe O44 - LFC:Last File Created 10/06/2009 - 07:29:32 ---A- C:\WINDOWS\System32\nview.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:32 ---A- C:\WINDOWS\System32\nvtuicpl.cpl O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\keystone.exe O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\nvappbar.exe O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\nvshell.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\nvwdmcpl.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\nvwimg.dll O44 - LFC:Last File Created 10/06/2009 - 07:29:34 ---A- C:\WINDOWS\System32\nwiz.exe O44 - LFC:Last File Created 13/07/2009 - 12:36:12 ---A- C:\WINDOWS\System32\drivers\mbam.sys O44 - LFC:Last File Created 13/07/2009 - 12:36:34 ---A- C:\WINDOWS\System32\drivers\mbamswissarmy.sys O44 - LFC:Last File Created 13/07/2009 - 18:54:07 ---A- C:\WINDOWS\System32\drivers\ssmdrv.sys O44 - LFC:Last File Created 15/06/2009 - 14:15:50 ---A- C:\WINDOWS\opuc.dll O44 - LFC:Last File Created 15/07/2009 - 19:05:27 -S-A- C:\WINDOWS\bootstat.dat O44 - LFC:Last File Created 15/07/2009 - 19:05:31 ---A- C:\WINDOWS\System32\NvApps.xml O44 - LFC:Last File Created 15/07/2009 - 20:49:04 ---A- C:\WINDOWS\System32\wpa.dbl O44 - LFC:Last File Created 15/07/2009 - 22:40:46 ---A- C:\WINDOWS\NeroDigital.ini O44 - LFC:Last File Created 16/06/2009 - 15:40:01 ---A- C:\WINDOWS\System32\fontsub.dll O44 - LFC:Last File Created 16/06/2009 - 15:40:01 ---A- C:\WINDOWS\System32\t2embed.dll O44 - LFC:Last File Created 16/07/2009 - 17:16:54 ---A- C:\WINDOWS\System32\tmp.reg O44 - LFC:Last File Created 16/07/2009 - 17:16:54 ---A- C:\WINDOWS\System32\tmp.txt O44 - LFC:Last File Created 17/06/2009 - 15:21:57 ---A- C:\WINDOWS\System32\giveio.sys O44 - LFC:Last File Created 24/05/2009 - 21:14:51 ---A- C:\WINDOWS\WMSysPr9.prx O44 - LFC:Last File Created 24/05/2009 - 21:18:07 ---A- C:\WINDOWS\System32\nscompat.tlb O44 - LFC:Last File Created 24/05/2009 - 21:18:08 ---A- C:\WINDOWS\System32\amcompat.tlb O44 - LFC:Last File Created 24/06/2009 - 17:39:36 ---A- C:\WINDOWS\nsreg.dat O44 - LFC:Last File Created 26/06/2009 - 20:19:24 ---A- C:\WINDOWS\ODBC.INI O44 - LFC:Last File Created 26/06/2009 - 20:41:42 ---A- C:\WINDOWS\System32\FNTCACHE.DAT O44 - LFC:Last File Created 29/05/2009 - 22:31:52 ---A- C:\WINDOWS\System32\xvidcore.dll O44 - LFC:Last File Created 29/05/2009 - 22:37:40 ---A- C:\WINDOWS\System32\xvidvfw.dll ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:Last File Created Prefetch 15/07/2009 - 19:01:02 ---A- C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf O45 - LFCP:Last File Created Prefetch 15/07/2009 - 19:06:37 ---A- C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf O45 - LFCP:Last File Created Prefetch 15/07/2009 - 19:06:37 ---A- C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:Last File Created Prefetch 15/07/2009 - 19:06:37 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-1619A94E.pf O45 - LFCP:Last File Created Prefetch 15/07/2009 - 19:06:37 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-35A483DA.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 16:48:14 ---A- C:\WINDOWS\Prefetch\PIDGIN.EXE-280DB919.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:15:40 ---A- C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:16:46 ---A- C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:16:48 ---A- C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:16:55 ---A- C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:17:17 ---A- C:\WINDOWS\Prefetch\DUMPHIVE.EXE-2B5148FE.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:17:21 ---A- C:\WINDOWS\Prefetch\SWREG.EXE-1EB1B019.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:17:22 ---A- C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:18:43 ---A- C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:36:36 ---A- C:\WINDOWS\Prefetch\FILEZILLA.EXE-1028A4F4.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:58:30 ---A- C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 17:58:30 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 18:49:39 ---A- C:\WINDOWS\Prefetch\UPDATE.EXE-2577D203.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 20:39:31 ---A- C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 20:39:39 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-3D97474F.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 20:39:39 ---A- C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 20:39:41 ---A- C:\WINDOWS\Prefetch\HELPER.EXE-0F70C40E.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 21:15:41 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 21:16:40 ---A- C:\WINDOWS\Prefetch\XNVIEW.EXE-18AD42DD.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 21:42:23 ---A- C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:08:02 ---A- C:\WINDOWS\Prefetch\UPDATECHECKER.EXE-16A4997A.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:12:52 ---A- C:\WINDOWS\Prefetch\BIT_CHE.EXE-0E527FEA.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:12:59 ---A- C:\WINDOWS\Prefetch\GUARDGUI.EXE-00ECD849.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:13:00 ---A- C:\WINDOWS\Prefetch\UPDATE.EXE-03BCD058.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:14:01 ---A- C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:27:50 ---A- C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:28:01 ---A- C:\WINDOWS\Prefetch\FDM.EXE-0654E435.pf O45 - LFCP:Last File Created Prefetch 16/07/2009 - 22:39:03 ---A- C:\WINDOWS\Prefetch\UTORRENT.EXE-3888D1B0.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 01:36:42 ---A- C:\WINDOWS\Prefetch\Layout.ini O45 - LFCP:Last File Created Prefetch 17/07/2009 - 05:14:30 ---A- C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:01:50 ---A- C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:01:53 ---A- C:\WINDOWS\Prefetch\UPDATER.EXE-1AE1C5E0.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:01:57 ---A- C:\WINDOWS\Prefetch\HELPER.EXE-0415776D.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:01:59 ---A- C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:02:30 ---A- C:\WINDOWS\Prefetch\FLASHGOT.EXE-005D7E8D.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:02:33 ---A- C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:06:22 ---A- C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-00101112.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:06:35 ---A- C:\WINDOWS\Prefetch\E_S00MT2.EXE-0DF19D90.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:06:35 ---A- C:\WINDOWS\Prefetch\E_S00RN2.EXE-3821C577.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:18:48 ---A- C:\WINDOWS\Prefetch\THUNDERBIRD.EXE-38CA75D9.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:26:30 ---A- C:\WINDOWS\Prefetch\VLC.EXE-22DF01AA.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:27:06 ---A- C:\WINDOWS\Prefetch\TERACOPY.EXE-0FC60D98.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:28:50 ---A- C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:33:10 ---A- C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:47:31 ---A- C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 09:47:43 ---A- C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf O45 - LFCP:Last File Created Prefetch 17/07/2009 - 23:07:56 ---A- C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA)(O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" O47 - AAKE:Key Export SP - "C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM" O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (TDSD) (O52) O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv" O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.I420"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax" O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv" O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll" O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="ir50_32.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" O52 - TDSD:HKLM\...\Drivers32\"VIDC.wmv3"="wmv9vcm.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.MPG4"="Mpg4c32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.MP42"="Mpg4c32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.MP43"="Mpg4c32.dll" O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"VIDC.DIVX"="divx.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.XVID"="xvidvfw.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YV12"="yv12vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.ac3acm"="ac3acm.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.lameacm"="lameACM.acm" O52 - TDSD:HKLM\...\Drivers32\"VIDC.FFDS"="ff_vfw.dll" O52 - TDSD:HKLM\...\drivers.desc\"vfwwdm32.dll"="Vidéo WDM pour le pilote de capture Windows (Win32)" O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Périphérique audio USB" O52 - TDSD:HKLM\...\drivers.desc\"msaud32.acm"="Windows Media Audio Codec" O52 - TDSD:HKLM\...\drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" O52 - TDSD:HKLM\...\drivers.desc\"ir50_32.dll"="Indeo® video 5.10" O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" O52 - TDSD:HKLM\...\drivers.desc\"wmv9vcm.dll"="Microsoft Windows Media Video 9" O52 - TDSD:HKLM\...\drivers.desc\"MPG4c32.dll"="MS-MPEG-4 MPEG-4 Video Codec" O52 - TDSD:HKLM\...\drivers.desc\"divx.dll"="DivX 6.8.5" O52 - TDSD:HKLM\...\drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2" O52 - TDSD:HKLM\...\drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" O52 - TDSD:HKLM\...\drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" O52 - TDSD:HKLM\...\drivers.desc\"ff_vfw.dll"="ffdshow video encoder" ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoRecentDocsMenu"=1 O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\1394bus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Ambfilt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\camfilt2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ccdecode.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cmdmon.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpuz132_x32.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmusic.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\enum1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\FlashSys.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fltmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hdaudbus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hdaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\http.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\inspect.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\intelppm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ip6fw.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\L8042Kbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\L8042mou.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LBeepKE.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LHidFilt.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LMouFilt.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LMouKE.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LUsbFilt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Monfilt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mqac.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mskssrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspclock.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspqm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mssmbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mstee.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nabtsfec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nv4_mini.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvata.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvatabus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\NVENETFD.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvnetbus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvnrm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvsnpu.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvtcp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwrdr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ohci1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcouffin.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\RtkHDAud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sdbus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffp_sd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\slip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sptd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\streamip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbccgp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbprint.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbstor.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbvideo.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wpdusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wstcodec.sys ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\FlashGot_License.txt O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\GPL.txt O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\chrome.manifest O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\components\flashgotService.js O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\defaults\preferences\flashgot.js O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\install.js O61 - LFC:Last File Created 07/07/2009 - 18:15:54 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\install.rdf O61 - LFC:Last File Created 07/07/2009 - 18:49:43 ---A- C:\Documents And Settings\Administrateur\Application Data\Thunderbird\Profiles\o2ugdpix.default\Mail\pop.gmail.com\Inbox O61 - LFC:Last File Created 07/07/2009 - 18:49:43 ---A- C:\Documents And Settings\Administrateur\Application Data\Thunderbird\Profiles\o2ugdpix.default\Mail\pop.gmail.com\Trash O61 - LFC:Last File Created 07/07/2009 - 19:48:59 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Audio\Set Audio mode to DirectX (default).lnk O61 - LFC:Last File Created 07/07/2009 - 19:48:59 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Audio\Set Audio mode to Waveout.lnk O61 - LFC:Last File Created 07/07/2009 - 19:48:59 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Interface\Set Main Interface to Skinnable.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Bureau\VLC media player.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Documentation.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Interface\Set Main Interface to Qt (default).lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Reset VLC media player preferences and cache files.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to Direct3D (no hardware acceleration).lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to Direct3D.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to DirectX (no hardware acceleration).lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to DirectX (no video overlay).lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to DirectX.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Quick Settings\Video\Set Video mode to OpenGL.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\Release Notes.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\VLC media player.lnk O61 - LFC:Last File Created 07/07/2009 - 19:49:00 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multimedia\VideoLAN\VideoLAN Website.lnk O61 - LFC:Last File Created 08/07/2009 - 00:45:36 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\chrome\flashgot.jar O61 - LFC:Last File Created 08/07/2009 - 08:11:29 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\mimeTypes.rdf O61 - LFC:Last File Created 08/07/2009 - 08:55:56 ---A- C:\Documents And Settings\Administrateur\Application Data\IEPro\conf.ini O61 - LFC:Last File Created 08/07/2009 - 08:56:13 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\Content\08E382DC40DC2B571439BB7A5449C239 O61 - LFC:Last File Created 08/07/2009 - 08:56:13 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\08E382DC40DC2B571439BB7A5449C239 O61 - LFC:Last File Created 08/07/2009 - 08:56:43 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\Content\5553AF14BD4C3B1DE599145FD14950E0 O61 - LFC:Last File Created 08/07/2009 - 08:56:43 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\5553AF14BD4C3B1DE599145FD14950E0 O61 - LFC:Last File Created 08/07/2009 - 17:59:45 ---A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\Office\PowerP11.pip O61 - LFC:Last File Created 08/07/2009 - 17:59:49 ---A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\Office\Récent\Temp.lnk O61 - LFC:Last File Created 08/07/2009 - 19:29:55 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\Content\25DC8EBAAF0977851B37F37B2F6458F4 O61 - LFC:Last File Created 08/07/2009 - 19:29:55 -S-A- C:\Documents And Settings\Administrateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\25DC8EBAAF0977851B37F37B2F6458F4 O61 - LFC:Last File Created 08/07/2009 - 19:36:53 ---A- C:\Documents And Settings\Administrateur\Application Data\Thunderbird\Profiles\o2ugdpix.default\Mail\pop.mail.yahoo.fr\Sent O61 - LFC:Last File Created 09/07/2009 - 18:00:49 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\CORALINE_DVDR-2009070714225800-0000000000\000000014b O61 - LFC:Last File Created 09/07/2009 - 18:00:49 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\CORALINE_DVDR-2009070714225800-0000000000\0000005951 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000000014d O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000000b908 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\0000019746 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e6cb O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e709 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e71f O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e727 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e73d O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e745 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e75c O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e764 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e77a O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e782 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e798 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e7a0 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e7b7 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e7bf O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e7d6 O61 - LFC:Last File Created 09/07/2009 - 18:01:06 ---A- C:\Documents And Settings\Administrateur\Application Data\dvdcss\PORCO_ROSSO-2009063018541100-0000000000\000022e7de O61 - LFC:Last File Created 09/07/2009 - 18:37:06 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Blackmail.torrent O61 - LFC:Last File Created 09/07/2009 - 18:37:45 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Blackmail 2.torrent O61 - LFC:Last File Created 09/07/2009 - 18:38:09 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\boin lecture.torrent O61 - LFC:Last File Created 09/07/2009 - 18:39:41 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Can Can Bunny Extra.torrent O61 - LFC:Last File Created 09/07/2009 - 18:40:19 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Cool Devices.torrent O61 - LFC:Last File Created 09/07/2009 - 18:40:32 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Dark Future.torrent O61 - LFC:Last File Created 15/07/2009 - 21:48:54 ---A- C:\Documents And Settings\Administrateur\Application Data\uTorrent\rss.dat.old O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe O61 - LFC:Last File Created 15/07/2009 - 21:55:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini O61 - LFC:Last File Created 15/07/2009 - 21:55:02 --HA- C:\Documents And Settings\eMule_Secure\NTUSER.DAT O61 - LFC:Last File Created 16/07/2009 - 11:23:58 ---A- C:\Documents And Settings\Administrateur\Application Data\AIMP\Bookmarks.ini O61 - LFC:Last File Created 16/07/2009 - 11:23:58 ---A- C:\Documents And Settings\Administrateur\Application Data\AIMP\EQLib.ini O61 - LFC:Last File Created 16/07/2009 - 11:23:58 ---A- C:\Documents And Settings\Administrateur\Application Data\AIMP\ML\AIMP_ML.INI O61 - LFC:Last File Created 16/07/2009 - 11:23:58 ---A- C:\Documents And Settings\Administrateur\Application Data\AIMP\PLS\1 - Default.plc O61 - LFC:Last File Created 16/07/2009 - 11:23:58 ---A- C:\Documents And Settings\Administrateur\Application Data\AIMP\aimp_lastfm.ini O61 - LFC:Last File Created 16/07/2009 - 11:24:23 ---A- C:\Documents And Settings\Administrateur\Application Data\Thunderbird\Profiles\o2ugdpix.default\downloads.rdf O61 - LFC:Last File Created 16/07/2009 - 12:17:54 ---A- C:\Documents And Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\XPC.mfl O61 - LFC:Last File Created 16/07/2009 - 12:20:30 ----- C:\Documents And Settings\Administrateur\Application Data\uTorrent\Porn.Stars.At.Home.torrent O61 - LFC:Last File Created 16/07/2009 - 14:12:04 ---A- C:\Documents And Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\tyxpxx9i.default\bookmarkbackups\bookmarks-2009-07-16.json End of the scan: 1780 lines "
  6. En creusant je trouve trois fichiers dans C:\windows qui vont ensemble : is-E7UUP.exe is-E7UUP.lst is-E7UUP.msg et quand j'édite le seconde je tombe sur Donc a premiére vue cela vient de Glary Utilities Mais franchement je trouve le procéder assez limite
  7. Bonjour, je me retrouve au démarrage avec le lancement de l'exécutable is-E7UUP.exe Avec pour seul info Nom :InnoSetupRegFile.0000000001 chemin : "C:\WINDOWS\is-E7UUP.exe" /REG Sans aucun éditeur A première vue ce n'est ni un virus, ni un malware.... (Bidefender, avira, MBA ZHP,.. rien à signaler) Impossible de trouver une info sur le net Quelqu'un connaît Merci par avance
  8. Tu as bien fait de ne rien ouvrir car le fichier joint est vérolé
  9. Autant pour moi j'ai [RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Bot.21154.1 [RESULTAT]un virus ou un programme indésirable 'TR/Hijacker.Gen' [trojan] a été détecté. [RESULTAT]un virus ou un programme indésirable 'HEUR/Malware' [heuristic] a été détecté. je sais que c'est des faux (pas vu par Kasperky ou bitdefender) Alors comment faire comprendre à antivir des les ignorer ?
  10. Bonjour, J'aurai une question au Pro d'antivir je viens d'installer cet antivirus sur ma machine XP mais voila il trouve 2/3 choses pas catholique Après avoir passer plusieurs antivirus en ligne sur les fichiers en question, j'ai la conviction qu'il s'agit de faux positifs. Comment faire comprendre à Antivir qu'il s trompe et au pire qu'il arrête de les regarder ? merci
  11. est ce que quelqu'un a déjà essayé Rising Antivirus Free Edition ?
  12. Bonjour, J'avais jusqu'à présent Antivrus Shiel de AOL/Kaspersky mais il arrive en fin de vie (dommage) Alors je souhaiterai vos point de vue sur ce qui reste encore sur le marcher. Alors quel est le meilleur du moment . Antivir (j'ai trouvé une version en vf) Avast (bof) Rising Antivirus Free Edition Moon Secure Antivirus Clam (nonlà c'est un joke) Comodo Antivirus (j'aime bien leur parefeu) ..... Alors vos avis ??? merci
  13. En fait je n'avais pas de "symptomes" avant en dehors de ZebHelpProcess qui me disait infecté. Aucun ralentissement, aucune popup pour acheté du viagra en chine certifié 100% faux, pas de disparition d'antivirus de de firewall (qui au passage de m'a pas averti d'une connexion non autorisée). Non rien à signaler ......... Bon Merci pour le cout de main même si je reste assez dubitatif.
  14. J'ai utilisé MSN il y a déjà un certains temps mais j'ai du l'abandonner au bout de 24h pour au final utiliser pidgin. Mais même au sein de ce type d'échange je n'accepte que des images et jamais de binaires.
  15. Bon Ok j'ai suivi la procédure et à première vue tout est maintenant Ok Par contre je ne vois pas trop ce qu'a bien trouver SFIX : Voici sa log : et voici la log de HiJackThis Là ZebHelpProcess 2 ne trouve plus rien Ok je suis rassuré mais j'aimerai bien comprendre ce que j'ai bien pu attraper
  16. Bonjour, Voici mon problème : je suis du genre parano avec mon ordinateur et durant ma derniére analyse Hijack, ZebHelpProcess 2 me signale un malware sur la ligne "O4 - HKCU\..\Run: [Windows Update] C:\WINDOWS\system32\rundll32.exe " Ayant un doute assez sérieux, je me permets de poster mon rapport dans le doute : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:53:23, on 30/06/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AOL\Active Virus Shield\avp.exe C:\Program Files\ScanSoft\OmniPageSE\opware32.exe C:\Program Files\Comodo\Firewall\CPF.exe C:\Program Files\Astase\UltraBackup\4.9\bin\thtrayagent.exe C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\uTorrent\uTorrent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe C:\Program Files\AOL\Active Virus Shield\avp.exe C:\Program Files\Comodo\Firewall\cmdagent.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Acronis\Fomatik\TrueImageTryStartService.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Program Files\Mozilla Thunderbird\thunderbird.exe C:\Downloads\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [AVP] "C:\Program Files\AOL\Active Virus Shield\avp.exe" O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background O4 - HKLM\..\Run: [thnotify] "C:\Program Files\Astase\UltraBackup\4.9\bin\thtrayagent.exe" /start O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKCU\..\Run: [Windows Update] C:\WINDOWS\system32\rundll32.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: e-Carte Bleue LCL.lnk = C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger les tous avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr O15 - Trusted Zone: http://asia.msi.com.tw O15 - Trusted Zone: http://global.msi.com.tw O15 - Trusted Zone: http://www.msi.com.tw O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813 O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1185541946843 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1187121053203 O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O20 - AppInit_DLLs: O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: Active Virus Shield (AVP) - Kaspersky Lab - C:\Program Files\AOL\Active Virus Shield\avp.exe O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Astase ThalliumBackup Storage Service (ThalliumServer) - Astase - C:\Program Files\Astase\UltraBackup\4.9\bin\tbsd.exe O23 - Service: Astase ThalliumBackup Client Background Service (thpassivesvc) - Astase - C:\Program Files\Astase\UltraBackup\4.9\bin\thpassiveclientsvc.exe O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Fichiers communs\Acronis\Fomatik\TrueImageTryStartService.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 9663 bytes Si l'un de vous peut jeter un œil neutre. Après cette alerte ni spyboot, ni avs ni bitdefender non rien trouver
  17. Bonjour, Je suis propriétaire d'un lecteur DVD GDR8164B. Jusqu'à hier pas de pb. Et voila entre deux recopie de DVD (dont la 1ere était normal) je constate : 1 . Une nette diminution du débis de la recopie 2. Un cpu en très forte demande. Après vérification, je constate que mon cotroleur IDE secondaire est passer PIO. Une rapide visite sur internet et je touche la base de registre : "MasterDeviceTimingMode"=dword:00010010 "MasterDeviceTimingModeAllowed"=dword:ffffffff Dans ma clès {4D36E96A-E325-11CE-BFC1-08002BE10318} Suite à cette modification tou semble être rentré dans l'odre coté Cpu Sauf que question débit je me retrouve avec mointier moin qu'avant Voicila partie qui gére mon lecteur IDE : [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0008] "EnumPropPages32"="storprop.dll,IdePropPageProvider" "InfPath"="mshdc.inf" "InfSection"="atapi_Inst_secondary" "ProviderName"="Microsoft" "DriverDateData"=hex:00,80,62,c5,c0,01,c1,01 "DriverDate"="7-1-2001" "DriverVersion"="5.1.2600.2180" "MatchingDeviceId"="secondary_ide_channel" "DriverDesc"="Canal IDE secondaire" "MasterDeviceType"=dword:00000002 "SlaveDeviceType"=dword:00000000 "SlaveDeviceDetectionTimeout"=dword:00000001 "MasterDeviceTimingMode"=dword:00000010 "MasterDeviceTimingModeAllowed"=dword:0000001f "MasterIdDataCheckSum"=dword:00013731 "SlaveDeviceTimingMode"=dword:00000000 "UserMasterDeviceTimingModeAllowed"=dword:ffffffff "UserSlaveDeviceTimingModeAllowed"=dword:ffffffff Quelqu'un a une idée ? merci par avance
×
×
  • Créer...