Aller au contenu

grigou

Membres
  • Compteur de contenus

    18
  • Inscription

  • Dernière visite

Autres informations

  • Mes langues
    Français

grigou's Achievements

Junior Member

Junior Member (3/12)

0

Réputation sur la communauté

  1. Bonjour, Voilà, d'avance, je vous remercie sincèrement de parcourir ces quelques lignes en espérant que vous pourrez m'aider à résoudre ce problème plus qu'agaçant. Problème pas très original puisqu'il s'agit tout simplement de la lenteur exaspérante de la navigation sur Internet depuis mon pc. Je crains qu'il ne soit infecté ou alors que mon matériel soit obsolète, peut être. Les symptômes sont les suivants : navigation souvent très lente, voire méchamment lente (même impossible par moments) par courte période pendant laquelle l'uc utilisée plafonne à 100, soit au maximum. Cela se passe de manière systématique quand je lis des vidéos sur le web (image se bloque, ça ne charge plus etc.), et de plus en plus souvent quand je navigue sur des sites peut être un peu gourmands en "énergie" même quand il n'y a pas de vidéos. En fait, plusieurs processus se mettent subitement à dévorer la totalité de mon uc disponible (2 iexplore, vsmon, avguard, etc.). Que faire ? Si vous pouvez me conseiller, je vous en serais très reconnaissant. Ma config matériel est la suivante : AMD Sempron Processor 3200 + 1.81 GHz 1.00 Go de RAM Comme il semble être d'usage, voici ci - dessous mon dernier rapport hijackthis... Merci. Cordialement. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:00:01, on 17/01/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\ATKKBService.exe C:\WINDOWS\system32\FsUsbExService.Exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe D:\program files 2\tom tom\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Microsoft Office\Office12\WINWORD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/WebfettiInitialSetup1.0.1.1.cab O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/30.61/uploader2.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://config.zebulon.fr/plugins/MaConfig_4_1_0_2.cab O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TomTomHOMEService - TomTom - D:\program files 2\tom tom\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 7271 bytes
  2. Bonjour, Non décidément, ça ne veut pas fonctionner. Comment savoir si il a été enregistré en ;reg.txt ou en .reg comme il le faudrait. Je fais exactement comme vous me l'avez conseillé, dans la mise en forme du texte, ensuite, je sélectionne bien "tous les fichiers" et j'écris en nom avi.reg. Mais j'ai toujours le même message et impossible de fusionner. Merci bien.
  3. Bonsoir, J'ai toujours le même message d'erreur : imposible de fusionner. j'ai pris soin de modifier le doc comme conseillé : une ligne apès regedit 4 et pas avant. Par contre, comment savoir si il est enregistré en .txt ou .reg ? Je l'ai bien nommé avi.reg mais quand je fais "enregistrer sous", dans "type de fichier", je n'ai le choix qu'entre .txt et "tous les fichiers". Donc, est ce vraiment du .reg ? Merci d'avance. Bonne journée.
  4. Merci. Euh, là, il n'accepte pas la fusion. J'ai le message suivant : "impossible d'importer "nom du fichier.reg". Le fichier spécifié n'est pas un script du registre. Vous pouvez uniquement importer les fichiers du registre binaire à partir de l'éditeur du registre." Alors, là, je ne comprends pas ! Peux-tu éclairer ma lanterne, stp ?
  5. J'ai essayé toutes ces astuces. Cela marche bien mieux maintenant. Je ne rencontre maintenant des difficultés de lenteur sur Internet que ponctuellement sur des vidéos , pas à chaque fois... C'est donc beaucoup mieux mais cela reste bizarre. J'ai l'impression que les vidéos rament quand cela coïncide avec la mise à jour de Antivir. Cela rame que sur une durée courte. Pour le reste de la navigation, cela fonctionne comme auparavant. Donc, je te remercie très sincèrement pour le temps passé... Cool ! Bonne continuation.
  6. J'ai essayé toutes ces astuces. Cela marche bien mieux maintenant. Je ne rencontre maintenant des difficultés de lenteur que ponctuellement sur des vidéos , pas à chaque fois... C'est donc beaucoup mieux. J'ai l'impression que les vidéos rament quand cela coïncide avec la mise à jour de Antivir. Cela rame que sur une durée courte. Pour le reste de la navigation, cela fonctionne comme auparavant? Donc, je te remercie très sincèrement pour le temps passé... Cool ! Bonne continuation.
  7. A tout hasard, serait ce possible que ce soit juste un problème de ram, genre une barrette qui crame ? C'est quand même bizarre, c'est arrivé relativement subitement (en tout cas, j'en ai l'impression...). Voici le résultat du scan... Merci encore. Rapport de ZHPDiag v1.21 par Nicolas Coolman Enregistré le 03/07/2009 18:47:25 Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 MSIE: Internet Explorer v7.0.5730.13 ---\\ Processus lancés RTHDCPL.EXE SkyTel.EXE ALCMTR.EXE nwiz.exe C:\Program Files\Logitech\Video\ISStart.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre6\bin\jusched.exe rundll32.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe D:\program files 2\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\ATKKBService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\services.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\program files 2\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_SC8.tmp" /EF "HKCU" O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1" ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302 O9 - Extra 'Tools' menuitem: Windows Messenger - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Messenger\msmsgs.exe,302 O9 - Extra 'Tools' menuitem: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra 'Tools' menuitem: Recherche - {3015DB92-158E-4b77-9020-85C8E311FBB5} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302 ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/30.61/uploader2.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.0.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe ---\\ Piratage de domaine (Lop.com) (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 O17 - HKLM\System\CCS\Services\Tcpip\..\{77AA0737-A102-48FE-B966-2F79360FE8FE}: 208.67.222.222 208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{77AA0737-A102-48FE-B966-2F79360FE8FE}: 208.67.222.222 208.67.220.220 O17 - HKLM\System\CS3\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - C:\WINDOWS\ATKKBService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NMSAccessU (NMSAccessU) - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe O23 - Service: TrueVector Internet Monitor (vsmon) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file) O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file) O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file) O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file) O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file) O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file) O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file) O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file) O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file) O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file) O40 - ASIC: Dossiers Web - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file) O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install O40 - ASIC: IE7 Uninstall Stub - {897BC793-D194-2B5F-9986-3DD8EB58E280} - (not file) O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file) O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file) O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file) O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file) O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file) O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file) ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys O41 - Driver: NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter (AtcL001) - C:\WINDOWS\system32\DRIVERS\atl01_xp.sys O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avgntflt (avgntflt) - C:\WINDOWS\system32\DRIVERS\avgntflt.sys O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys O41 - Driver: (no object) (dmio) - C:\WINDOWS\System32\drivers\dmio.sys O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys O41 - Driver: EIO (EIO) - C:\WINDOWS\system32\drivers\EIO.sys O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\system32\DRIVERS\HDAudBus.sys O41 - Driver: Pilote de classe HID Microsoft (HidUsb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - C:\WINDOWS\system32\drivers\RtkHDAud.sys O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys O41 - Driver: KLIF (KLIF) - C:\WINDOWS\system32\DRIVERS\klif.sys O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys O41 - Driver: Lbd (Lbd) - C:\WINDOWS\system32\DRIVERS\Lbd.sys O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys O41 - Driver: ATK0110 ACPI UTILITY (MTsensor) - C:\WINDOWS\system32\DRIVERS\ASACPI.sys O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS\ndistapi.sys O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS\ndisuio.sys O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS\ndiswan.sys O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS\nv4_mini.sys O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys O41 - Driver: VSO Software pcouffin (pcouffin) - C:\WINDOWS\System32\Drivers\pcouffin.sys O41 - Driver: Volume Adapter (pepifilter) - C:\WINDOWS\system32\DRIVERS\lv302af.sys O41 - Driver: Labtec WebCam Pro(PID_08A0) (PID_08A0) - C:\WINDOWS\system32\DRIVERS\LV302AV.SYS O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERS\raspptp.sys O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys O41 - Driver: PxHelp20 (PxHelp20) - C:\WINDOWS\System32\Drivers\PxHelp20.sys O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERS\rasl2tp.sys O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERS\raspppoe.sys O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERS\raspti.sys O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys O41 - Driver: Pilote de filtrage Sony USB (SONYPVU1) (SONYPVU1) - C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys O41 - Driver: Pilote de filtre de restauration systèmer (sr) - C:\WINDOWS\System32\DRIVERS\sr.sys O41 - Driver: (no object) (srescan) - C:\WINDOWS\system32\ZoneLabs\srescan.sys O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys O41 - Driver: ADSL Modem USB Service (TaurusUsb) - C:\WINDOWS\system32\DRIVERS\torususb.sys O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS O41 - Driver: vsdatant (vsdatant) - C:\WINDOWS\System32\vsdatant.sys O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 3DVIA Player 4.1 O42 - Logiciel: ABBYY FineReader 6.0 Sprint O42 - Logiciel: ASUS Enhanced Display Driver O42 - Logiciel: ASUS nVIDIA Driver O42 - Logiciel: Ad-Aware O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742) O42 - Logiciel: Adobe Bridge 1.0 O42 - Logiciel: Adobe Common File Installer O42 - Logiciel: Adobe Flash Player 10 ActiveX O42 - Logiciel: Adobe Help Center 2.0 O42 - Logiciel: Adobe Premiere Pro 2.0 O42 - Logiciel: Adobe Reader 8.1.2 - Français O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742) O42 - Logiciel: Adobe Stock Photos 1.0 O42 - Logiciel: Apple Software Update O42 - Logiciel: Archiveur WinRAR O42 - Logiciel: Attansic Giga Ethernet Utility O42 - Logiciel: Attansic L1 Gigabit Ethernet Driver O42 - Logiciel: Avira AntiVir Personal - Free Antivirus O42 - Logiciel: Azureus O42 - Logiciel: BeWAN ADSL modem O42 - Logiciel: CCleaner (remove only) O42 - Logiciel: CDBurnerXP O42 - Logiciel: Camera RAW Plug-In for EPSON Creativity Suite O42 - Logiciel: EPSON Attach To Email O42 - Logiciel: EPSON Copy Utility 3 O42 - Logiciel: EPSON Easy Photo Print O42 - Logiciel: EPSON File Manager O42 - Logiciel: EPSON Logiciel imprimante O42 - Logiciel: EPSON Scan O42 - Logiciel: EPSON Scan Assistant O42 - Logiciel: EPSON Stylus CX7300_CX8300_DX7400_DX8400 Manuel O42 - Logiciel: EPSON Web-To-Page O42 - Logiciel: ExtraFilm FotoFacil O42 - Logiciel: High Definition Audio Driver Package - KB888111 O42 - Logiciel: HijackThis 2.0.2 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) O42 - Logiciel: Java 6 Update 13 O42 - Logiciel: Java 6 Update 2 O42 - Logiciel: Java 6 Update 3 O42 - Logiciel: Java 6 Update 5 O42 - Logiciel: Java SE Runtime Environment 6 O42 - Logiciel: K-Lite Codec Pack 3.01 Basic O42 - Logiciel: Labtec WebCam O42 - Logiciel: Lecteur Windows Media 11 O42 - Logiciel: MSXML 4.0 SP2 (KB927978) O42 - Logiciel: MSXML 4.0 SP2 (KB936181) O42 - Logiciel: MSXML 4.0 SP2 (KB954430) O42 - Logiciel: MSXML 6.0 Parser (KB933579) O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 O42 - Logiciel: Microsoft .NET Framework 3.5 O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs O42 - Logiciel: Microsoft National Language Support Downlevel APIs O42 - Logiciel: Microsoft Office Small Business Edition 2003 O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 O42 - Logiciel: NVIDIA Drivers O42 - Logiciel: Navilog1 3.7.7 O42 - Logiciel: OpenOffice.org 3.1 O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) O42 - Logiciel: Picasa 2 O42 - Logiciel: Programme de gestion Camera de Logitech® O42 - Logiciel: QuickTime O42 - Logiciel: Realtek High Definition Audio Driver O42 - Logiciel: SLD Codec Pack O42 - Logiciel: Sina Web TV O42 - Logiciel: SopCast 2.0.4 O42 - Logiciel: TomTom HOME O42 - Logiciel: VC_MergeModuleToMSI O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 O42 - Logiciel: Winamp O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) O42 - Logiciel: Windows Imaging Component O42 - Logiciel: Windows Internet Explorer 7 O42 - Logiciel: Windows Live Messenger O42 - Logiciel: Windows Media Format 11 runtime O42 - Logiciel: Windows Media Player 11 O42 - Logiciel: Windows XP Service Pack 3 O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 O42 - Logiciel: ZoneAlarm O42 - Logiciel: eMule ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe Systems Shared O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Labtec O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\NSV O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System ---\\ Derniers fichiers modifiés ou crées sous System32 (O44) O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\deploytk.dll -->01/07/2009 - 21:30:37 O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\extmgr.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->12/06/2009 - 10:17:06 O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->28/04/2009 - 10:06:49 O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->28/04/2009 - 10:06:24 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakeng.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieaksie.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakui.dll -->25/04/2009 - 06:26:23 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\iedkcs32.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieencode.dll -->29/04/2009 - 05:45:36 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\iernonce.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->28/04/2009 - 10:06:24 O44 - LFC:Last File Created - C:\WINDOWS\System32\inetcpl.cpl -->29/04/2009 - 05:45:39 O44 - LFC:Last File Created - C:\WINDOWS\System32\java.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javacpl.cpl -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javaw.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javaws.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->29/04/2009 - 05:45:39 O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009 - 16:33:02 O44 - LFC:Last File Created - C:\WINDOWS\System32\lsdelete.exe -->07/06/2009 - 12:11:41 O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009 - 17:51:12 O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->29/04/2009 - 05:45:40 O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->29/04/2009 - 05:45:40 O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->29/04/2009 - 05:45:41 O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\msrating.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\mstime.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\nvapps.xml -->03/07/2009 - 15:57:31 O44 - LFC:Last File Created - C:\WINDOWS\System32\occache.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->18/04/2009 - 09:00:51 O44 - LFC:Last File Created - C:\WINDOWS\System32\pngfilt.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\rpcrt4.dll -->15/04/2009 - 15:53:29 O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\vsconfig.xml -->03/07/2009 - 15:57:06 O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009 - 20:50:30 O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->29/04/2009 - 05:45:44 O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->03/07/2009 - 15:57:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\zllictbl.dat -->01/05/2009 - 09:26:25 O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\Lbd.sys -->26/04/2009 - 19:23:05 ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AAWTRAY.EXE-1858AE3F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-0A47CFD1.pf -->01/07/2009 - 22:21:46 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALBUMDB2.EXE-06A212AC.pf -->01/07/2009 - 21:39:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALCMTR.EXE-235F9538.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf -->01/07/2009 - 20:34:19 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf -->01/07/2009 - 22:32:53 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCONFIG.EXE-1ECA67AD.pf -->01/07/2009 - 22:34:17 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-11EBE658.pf -->28/06/2009 - 11:00:15 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-200FEF40.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-32FAE179.pf -->28/06/2009 - 10:59:39 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVSCAN.EXE-07FC469C.pf -->01/07/2009 - 20:59:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf -->03/07/2009 - 17:47:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-347FCF75.pf -->28/06/2009 - 15:33:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->30/06/2009 - 23:04:28 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf -->01/07/2009 - 22:22:26 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf -->02/07/2009 - 16:38:42 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf -->02/07/2009 - 16:52:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf -->02/07/2009 - 16:52:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-205D880D.pf -->01/07/2009 - 16:26:07 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf -->01/07/2009 - 20:30:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf -->01/07/2009 - 20:28:52 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->01/07/2009 - 20:28:47 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\E_FATICEE.EXE-20F8EF8E.pf -->01/07/2009 - 22:21:29 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf -->30/06/2009 - 23:05:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FXSVR2.EXE-1602D64F.pf -->01/07/2009 - 21:39:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GMER.EXE-2BBBF646.pf -->02/07/2009 - 21:02:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf -->01/07/2009 - 20:29:08 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf -->02/07/2009 - 22:37:24 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HH.EXE-2D1A70B3.pf -->01/07/2009 - 20:23:22 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HVIDEOS.EXE-2D7A50F6.pf -->01/07/2009 - 21:39:03 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->03/07/2009 - 16:50:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->02/07/2009 - 23:00:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ISSTART.EXE-05D0DC1F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVACPL.EXE-3A722075.pf -->01/07/2009 - 22:31:12 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-03C5992A.pf -->01/07/2009 - 21:33:53 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-1A4D78E2.pf -->01/07/2009 - 21:33:37 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-2DBD8D04.pf -->01/07/2009 - 21:33:48 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-2DC32ABC.pf -->01/07/2009 - 22:31:16 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-3980DFE5.pf -->01/07/2009 - 21:33:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAWS.EXE-021AC9A9.pf -->01/07/2009 - 21:51:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQS.EXE-1D781F77.pf -->01/07/2009 - 21:33:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JRE-6U13-WINDOWS-I586-P-IFTW_-0967F5A5.pf -->01/07/2009 - 21:27:50 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUCHECK.EXE-19C452BF.pf -->01/07/2009 - 21:03:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUSCHED.EXE-0882265F.pf -->01/07/2009 - 20:58:49 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUSCHED.EXE-25206883.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->03/07/2009 - 17:28:17 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGITRAY.EXE-33843C37.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf -->03/07/2009 - 17:11:47 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf -->02/07/2009 - 23:21:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVCOMS.EXE-2A6501E9.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf -->02/07/2009 - 19:00:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSI7.TMP-2CD2E578.pf -->01/07/2009 - 21:29:59 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->01/07/2009 - 21:30:40 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIF.TMP-1038EF48.pf -->01/07/2009 - 21:30:03 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->02/07/2009 - 22:50:49 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREUPD.EXE-0C5BC219.pf -->28/06/2009 - 10:59:13 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\QTTASK.EXE-342507FB.pf -->02/07/2009 - 19:21:25 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf -->29/06/2009 - 22:02:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REG.EXE-0D2A95F7.pf -->30/06/2009 - 23:05:34 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->01/07/2009 - 21:39:14 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RSTRUI.EXE-03C49A96.pf -->01/07/2009 - 22:23:27 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf -->01/07/2009 - 21:46:44 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13E68835.pf -->01/07/2009 - 22:22:28 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1864B83E.pf -->01/07/2009 - 20:29:02 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3001C307.pf -->01/07/2009 - 22:31:12 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B381085.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->01/07/2009 - 20:27:36 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->27/06/2009 - 18:17:43 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SKYTEL.EXE-12751D3A.pf -->01/07/2009 - 21:46:52 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf -->03/07/2009 - 16:11:25 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1415D1B8.pf -->01/07/2009 - 16:26:11 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf -->01/07/2009 - 20:19:50 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162[1].EXE-3A2FBD88.pf -->01/07/2009 - 20:00:43 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162[1].TMP-3A145BA7.pf -->01/07/2009 - 20:00:46 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD_INCLUDES.EXE-324F5AE4.pf -->01/07/2009 - 20:09:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf -->01/07/2009 - 22:21:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf -->01/07/2009 - 20:19:51 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINS000.EXE-260D7493.pf -->01/07/2009 - 20:28:06 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNPACK200.EXE-16F2D239.pf -->01/07/2009 - 21:33:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNWISE.EXE-206C428A.pf -->01/07/2009 - 20:28:59 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-2577D203.pf -->02/07/2009 - 21:11:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-264167D5.pf -->28/06/2009 - 10:59:14 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDCLIENT.EXE-215FC96B.pf -->03/07/2009 - 16:19:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->02/07/2009 - 21:01:44 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WGATRAY.EXE-0ED38BED.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINAMP.EXE-10A13524.pf -->02/07/2009 - 22:58:35 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf -->02/07/2009 - 21:01:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf -->02/07/2009 - 21:49:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf -->03/07/2009 - 15:57:56 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->03/07/2009 - 17:24:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-10085C66.pf -->03/07/2009 - 17:47:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-1C7BFEFF.pf -->03/07/2009 - 17:47:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZIPPER.EXE-2C9C69B1.pf -->01/07/2009 - 21:30:42 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZLCLIENT.EXE-37EA2F85.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-076A33A4.pf -->01/07/2009 - 20:28:06 ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA)(O47) O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export - "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" O47 - AAKE:Key Export - "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application" O47 - AAKE:Key Export - "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" O47 - AAKE:Key Export - "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" O47 - AAKE:Key Export - "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" O47 - AAKE:Key Export - "C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer" O47 - AAKE:Key Export - "C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver" O47 - AAKE:Key Export - "C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application" O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (TDSD) (O52) O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv" O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.I420"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="Ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="Ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax" O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="Ir50_32.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="l3codecp.acm" O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.enc"="ITIG726.acm" O52 - TDSD:HKLM\...\Drivers32\"MSVideo"="vfwwdm32.dll" O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll" O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP60"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP61"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP62"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.xvid"="xvidvfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv40"="ir41_32.ax" O52 - TDSD:HKLM\...\Drivers32\"wave3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll" O52 - TDSD:HKLM\...\Drivers32\"wave4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux5"="wdmaud.drv" ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoSaveSettings"=0 O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AmdK8.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASACPI.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASUSHWIO.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atkkbnt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atl01_xp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Bravo_a.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Bravo_n.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ccdecode.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmusic.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\EIO.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fltmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\http.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\intelppm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ip6fw.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klif.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Lbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\lv302af.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LV302AV.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LVUSBSta.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mskssrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspclock.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspqm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mssmbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mstee.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nabtsfec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nv4_mini.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcouffin.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\RtkHDAud.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sdbus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffp_sd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\slip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\SONYPVU1.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stmatm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\streamip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\torususb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbccgp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbprint.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbstor.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wpdusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wstcodec.sys End of the scan: 899 lines Rapport de ZHPDiag v1.21 par Nicolas Coolman Enregistré le 03/07/2009 18:47:25 Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 MSIE: Internet Explorer v7.0.5730.13 ---\\ Processus lancés RTHDCPL.EXE SkyTel.EXE ALCMTR.EXE nwiz.exe C:\Program Files\Logitech\Video\ISStart.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre6\bin\jusched.exe rundll32.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe D:\program files 2\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\ATKKBService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\services.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\program files 2\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_SC8.tmp" /EF "HKCU" O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1" ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302 O9 - Extra 'Tools' menuitem: Windows Messenger - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Messenger\msmsgs.exe,302 O9 - Extra 'Tools' menuitem: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra 'Tools' menuitem: Recherche - {3015DB92-158E-4b77-9020-85C8E311FBB5} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302 ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/30.61/uploader2.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.0.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe ---\\ Piratage de domaine (Lop.com) (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 O17 - HKLM\System\CCS\Services\Tcpip\..\{77AA0737-A102-48FE-B966-2F79360FE8FE}: 208.67.222.222 208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{77AA0737-A102-48FE-B966-2F79360FE8FE}: 208.67.222.222 208.67.220.220 O17 - HKLM\System\CS3\Services\Tcpip\..\{1D1527DE-A02D-419B-BDEB-C20959EB8D5D}: 208.67.222.222,208.67.220.220 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - C:\WINDOWS\ATKKBService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NMSAccessU (NMSAccessU) - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe O23 - Service: TrueVector Internet Monitor (vsmon) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file) O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file) O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file) O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file) O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file) O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file) O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file) O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file) O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file) O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file) O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file) O40 - ASIC: Dossiers Web - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file) O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install O40 - ASIC: IE7 Uninstall Stub - {897BC793-D194-2B5F-9986-3DD8EB58E280} - (not file) O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file) O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file) O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file) O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file) O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file) O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file) ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys O41 - Driver: NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter (AtcL001) - C:\WINDOWS\system32\DRIVERS\atl01_xp.sys O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avgntflt (avgntflt) - C:\WINDOWS\system32\DRIVERS\avgntflt.sys O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys O41 - Driver: (no object) (dmio) - C:\WINDOWS\System32\drivers\dmio.sys O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys O41 - Driver: EIO (EIO) - C:\WINDOWS\system32\drivers\EIO.sys O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\system32\DRIVERS\HDAudBus.sys O41 - Driver: Pilote de classe HID Microsoft (HidUsb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - C:\WINDOWS\system32\drivers\RtkHDAud.sys O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys O41 - Driver: KLIF (KLIF) - C:\WINDOWS\system32\DRIVERS\klif.sys O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys O41 - Driver: Lbd (Lbd) - C:\WINDOWS\system32\DRIVERS\Lbd.sys O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys O41 - Driver: ATK0110 ACPI UTILITY (MTsensor) - C:\WINDOWS\system32\DRIVERS\ASACPI.sys O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS\ndistapi.sys O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS\ndisuio.sys O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS\ndiswan.sys O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS\nv4_mini.sys O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys O41 - Driver: VSO Software pcouffin (pcouffin) - C:\WINDOWS\System32\Drivers\pcouffin.sys O41 - Driver: Volume Adapter (pepifilter) - C:\WINDOWS\system32\DRIVERS\lv302af.sys O41 - Driver: Labtec WebCam Pro(PID_08A0) (PID_08A0) - C:\WINDOWS\system32\DRIVERS\LV302AV.SYS O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERS\raspptp.sys O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys O41 - Driver: PxHelp20 (PxHelp20) - C:\WINDOWS\System32\Drivers\PxHelp20.sys O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERS\rasl2tp.sys O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERS\raspppoe.sys O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERS\raspti.sys O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys O41 - Driver: Pilote de filtrage Sony USB (SONYPVU1) (SONYPVU1) - C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys O41 - Driver: Pilote de filtre de restauration systèmer (sr) - C:\WINDOWS\System32\DRIVERS\sr.sys O41 - Driver: (no object) (srescan) - C:\WINDOWS\system32\ZoneLabs\srescan.sys O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys O41 - Driver: ADSL Modem USB Service (TaurusUsb) - C:\WINDOWS\system32\DRIVERS\torususb.sys O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS O41 - Driver: vsdatant (vsdatant) - C:\WINDOWS\System32\vsdatant.sys O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 3DVIA Player 4.1 O42 - Logiciel: ABBYY FineReader 6.0 Sprint O42 - Logiciel: ASUS Enhanced Display Driver O42 - Logiciel: ASUS nVIDIA Driver O42 - Logiciel: Ad-Aware O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742) O42 - Logiciel: Adobe Bridge 1.0 O42 - Logiciel: Adobe Common File Installer O42 - Logiciel: Adobe Flash Player 10 ActiveX O42 - Logiciel: Adobe Help Center 2.0 O42 - Logiciel: Adobe Premiere Pro 2.0 O42 - Logiciel: Adobe Reader 8.1.2 - Français O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742) O42 - Logiciel: Adobe Stock Photos 1.0 O42 - Logiciel: Apple Software Update O42 - Logiciel: Archiveur WinRAR O42 - Logiciel: Attansic Giga Ethernet Utility O42 - Logiciel: Attansic L1 Gigabit Ethernet Driver O42 - Logiciel: Avira AntiVir Personal - Free Antivirus O42 - Logiciel: Azureus O42 - Logiciel: BeWAN ADSL modem O42 - Logiciel: CCleaner (remove only) O42 - Logiciel: CDBurnerXP O42 - Logiciel: Camera RAW Plug-In for EPSON Creativity Suite O42 - Logiciel: EPSON Attach To Email O42 - Logiciel: EPSON Copy Utility 3 O42 - Logiciel: EPSON Easy Photo Print O42 - Logiciel: EPSON File Manager O42 - Logiciel: EPSON Logiciel imprimante O42 - Logiciel: EPSON Scan O42 - Logiciel: EPSON Scan Assistant O42 - Logiciel: EPSON Stylus CX7300_CX8300_DX7400_DX8400 Manuel O42 - Logiciel: EPSON Web-To-Page O42 - Logiciel: ExtraFilm FotoFacil O42 - Logiciel: High Definition Audio Driver Package - KB888111 O42 - Logiciel: HijackThis 2.0.2 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) O42 - Logiciel: Java 6 Update 13 O42 - Logiciel: Java 6 Update 2 O42 - Logiciel: Java 6 Update 3 O42 - Logiciel: Java 6 Update 5 O42 - Logiciel: Java SE Runtime Environment 6 O42 - Logiciel: K-Lite Codec Pack 3.01 Basic O42 - Logiciel: Labtec WebCam O42 - Logiciel: Lecteur Windows Media 11 O42 - Logiciel: MSXML 4.0 SP2 (KB927978) O42 - Logiciel: MSXML 4.0 SP2 (KB936181) O42 - Logiciel: MSXML 4.0 SP2 (KB954430) O42 - Logiciel: MSXML 6.0 Parser (KB933579) O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 O42 - Logiciel: Microsoft .NET Framework 3.5 O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs O42 - Logiciel: Microsoft National Language Support Downlevel APIs O42 - Logiciel: Microsoft Office Small Business Edition 2003 O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 O42 - Logiciel: NVIDIA Drivers O42 - Logiciel: Navilog1 3.7.7 O42 - Logiciel: OpenOffice.org 3.1 O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) O42 - Logiciel: Picasa 2 O42 - Logiciel: Programme de gestion Camera de Logitech® O42 - Logiciel: QuickTime O42 - Logiciel: Realtek High Definition Audio Driver O42 - Logiciel: SLD Codec Pack O42 - Logiciel: Sina Web TV O42 - Logiciel: SopCast 2.0.4 O42 - Logiciel: TomTom HOME O42 - Logiciel: VC_MergeModuleToMSI O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 O42 - Logiciel: Winamp O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) O42 - Logiciel: Windows Imaging Component O42 - Logiciel: Windows Internet Explorer 7 O42 - Logiciel: Windows Live Messenger O42 - Logiciel: Windows Media Format 11 runtime O42 - Logiciel: Windows Media Player 11 O42 - Logiciel: Windows XP Service Pack 3 O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 O42 - Logiciel: ZoneAlarm O42 - Logiciel: eMule ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe Systems Shared O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Labtec O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\NSV O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System ---\\ Derniers fichiers modifiés ou crées sous System32 (O44) O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\deploytk.dll -->01/07/2009 - 21:30:37 O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->29/04/2009 - 05:45:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\extmgr.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->12/06/2009 - 10:17:06 O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->28/04/2009 - 10:06:49 O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->28/04/2009 - 10:06:24 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakeng.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieaksie.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakui.dll -->25/04/2009 - 06:26:23 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\iedkcs32.dll -->29/04/2009 - 05:45:35 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieencode.dll -->29/04/2009 - 05:45:36 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\iernonce.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->29/04/2009 - 05:45:38 O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->28/04/2009 - 10:06:24 O44 - LFC:Last File Created - C:\WINDOWS\System32\inetcpl.cpl -->29/04/2009 - 05:45:39 O44 - LFC:Last File Created - C:\WINDOWS\System32\java.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javacpl.cpl -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javaw.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\javaws.exe -->01/07/2009 - 21:30:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->29/04/2009 - 05:45:39 O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009 - 16:33:02 O44 - LFC:Last File Created - C:\WINDOWS\System32\lsdelete.exe -->07/06/2009 - 12:11:41 O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009 - 17:51:12 O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->29/04/2009 - 05:45:40 O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->29/04/2009 - 05:45:40 O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->29/04/2009 - 05:45:41 O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\msrating.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\mstime.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\nvapps.xml -->03/07/2009 - 15:57:31 O44 - LFC:Last File Created - C:\WINDOWS\System32\occache.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->18/04/2009 - 09:00:52 O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->18/04/2009 - 09:00:51 O44 - LFC:Last File Created - C:\WINDOWS\System32\pngfilt.dll -->29/04/2009 - 05:45:42 O44 - LFC:Last File Created - C:\WINDOWS\System32\rpcrt4.dll -->15/04/2009 - 15:53:29 O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\vsconfig.xml -->03/07/2009 - 15:57:06 O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->29/04/2009 - 05:45:43 O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009 - 20:50:30 O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->29/04/2009 - 05:45:44 O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->03/07/2009 - 15:57:34 O44 - LFC:Last File Created - C:\WINDOWS\System32\zllictbl.dat -->01/05/2009 - 09:26:25 O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\Lbd.sys -->26/04/2009 - 19:23:05 ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AAWTRAY.EXE-1858AE3F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-0A47CFD1.pf -->01/07/2009 - 22:21:46 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALBUMDB2.EXE-06A212AC.pf -->01/07/2009 - 21:39:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALCMTR.EXE-235F9538.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf -->01/07/2009 - 20:34:19 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf -->01/07/2009 - 22:32:53 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCONFIG.EXE-1ECA67AD.pf -->01/07/2009 - 22:34:17 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-11EBE658.pf -->28/06/2009 - 11:00:15 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-200FEF40.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-32FAE179.pf -->28/06/2009 - 10:59:39 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVSCAN.EXE-07FC469C.pf -->01/07/2009 - 20:59:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf -->03/07/2009 - 17:47:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-347FCF75.pf -->28/06/2009 - 15:33:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->30/06/2009 - 23:04:28 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf -->01/07/2009 - 22:22:26 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf -->02/07/2009 - 16:38:42 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf -->02/07/2009 - 16:52:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf -->02/07/2009 - 16:52:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-205D880D.pf -->01/07/2009 - 16:26:07 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf -->01/07/2009 - 20:30:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf -->01/07/2009 - 20:28:52 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->01/07/2009 - 20:28:47 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\E_FATICEE.EXE-20F8EF8E.pf -->01/07/2009 - 22:21:29 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf -->30/06/2009 - 23:05:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FXSVR2.EXE-1602D64F.pf -->01/07/2009 - 21:39:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GMER.EXE-2BBBF646.pf -->02/07/2009 - 21:02:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf -->01/07/2009 - 20:29:08 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf -->02/07/2009 - 22:37:24 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HH.EXE-2D1A70B3.pf -->01/07/2009 - 20:23:22 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HVIDEOS.EXE-2D7A50F6.pf -->01/07/2009 - 21:39:03 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->03/07/2009 - 16:50:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->02/07/2009 - 23:00:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ISSTART.EXE-05D0DC1F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVACPL.EXE-3A722075.pf -->01/07/2009 - 22:31:12 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-03C5992A.pf -->01/07/2009 - 21:33:53 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-1A4D78E2.pf -->01/07/2009 - 21:33:37 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-2DBD8D04.pf -->01/07/2009 - 21:33:48 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-2DC32ABC.pf -->01/07/2009 - 22:31:16 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-3980DFE5.pf -->01/07/2009 - 21:33:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAWS.EXE-021AC9A9.pf -->01/07/2009 - 21:51:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQS.EXE-1D781F77.pf -->01/07/2009 - 21:33:31 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JRE-6U13-WINDOWS-I586-P-IFTW_-0967F5A5.pf -->01/07/2009 - 21:27:50 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUCHECK.EXE-19C452BF.pf -->01/07/2009 - 21:03:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUSCHED.EXE-0882265F.pf -->01/07/2009 - 20:58:49 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUSCHED.EXE-25206883.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->03/07/2009 - 17:28:17 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGITRAY.EXE-33843C37.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf -->03/07/2009 - 17:11:47 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf -->02/07/2009 - 23:21:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVCOMS.EXE-2A6501E9.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf -->02/07/2009 - 19:00:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSI7.TMP-2CD2E578.pf -->01/07/2009 - 21:29:59 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->01/07/2009 - 21:30:40 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIF.TMP-1038EF48.pf -->01/07/2009 - 21:30:03 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->02/07/2009 - 22:50:49 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREUPD.EXE-0C5BC219.pf -->28/06/2009 - 10:59:13 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\QTTASK.EXE-342507FB.pf -->02/07/2009 - 19:21:25 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf -->29/06/2009 - 22:02:09 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REG.EXE-0D2A95F7.pf -->30/06/2009 - 23:05:34 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->01/07/2009 - 21:39:14 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RSTRUI.EXE-03C49A96.pf -->01/07/2009 - 22:23:27 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf -->01/07/2009 - 21:46:44 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13E68835.pf -->01/07/2009 - 22:22:28 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1864B83E.pf -->01/07/2009 - 20:29:02 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3001C307.pf -->01/07/2009 - 22:31:12 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B381085.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->01/07/2009 - 20:27:36 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->27/06/2009 - 18:17:43 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SKYTEL.EXE-12751D3A.pf -->01/07/2009 - 21:46:52 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf -->03/07/2009 - 16:11:25 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1415D1B8.pf -->01/07/2009 - 16:26:11 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf -->01/07/2009 - 20:19:50 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162[1].EXE-3A2FBD88.pf -->01/07/2009 - 20:00:43 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD162[1].TMP-3A145BA7.pf -->01/07/2009 - 20:00:46 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPYBOTSD_INCLUDES.EXE-324F5AE4.pf -->01/07/2009 - 20:09:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf -->01/07/2009 - 22:21:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEATIMER.EXE-1F57E47A.pf -->01/07/2009 - 20:19:51 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINS000.EXE-260D7493.pf -->01/07/2009 - 20:28:06 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNPACK200.EXE-16F2D239.pf -->01/07/2009 - 21:33:10 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNWISE.EXE-206C428A.pf -->01/07/2009 - 20:28:59 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-2577D203.pf -->02/07/2009 - 21:11:54 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-264167D5.pf -->28/06/2009 - 10:59:14 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDCLIENT.EXE-215FC96B.pf -->03/07/2009 - 16:19:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->02/07/2009 - 21:01:44 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WGATRAY.EXE-0ED38BED.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINAMP.EXE-10A13524.pf -->02/07/2009 - 22:58:35 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf -->02/07/2009 - 21:01:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf -->02/07/2009 - 21:49:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf -->03/07/2009 - 15:57:56 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->03/07/2009 - 15:57:55 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->03/07/2009 - 17:24:45 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-10085C66.pf -->03/07/2009 - 17:47:20 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-1C7BFEFF.pf -->03/07/2009 - 17:47:21 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZIPPER.EXE-2C9C69B1.pf -->01/07/2009 - 21:30:42 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZLCLIENT.EXE-37EA2F85.pf -->02/07/2009 - 16:38:41 O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-076A33A4.pf -->01/07/2009 - 20:28:06 ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA)(O47) O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export - "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" O47 - AAKE:Key Export - "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application" O47 - AAKE:Key Export - "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray" O47 - AAKE:Key Export - "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" O47 - AAKE:Key Export - "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" O47 - AAKE:Key Export - "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" O47 - AAKE:Key Export - "C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer" O47 - AAKE:Key Export - "C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver" O47 - AAKE:Key Export - "C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application" O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (TDSD) (O52) O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv" O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.I420"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="Ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="Ir32_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax" O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="Ir50_32.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="l3codecp.acm" O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.enc"="ITIG726.acm" O52 - TDSD:HKLM\...\Drivers32\"MSVideo"="vfwwdm32.dll" O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll" O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux2"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP60"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP61"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.VP62"="vp6vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.xvid"="xvidvfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iv40"="ir41_32.ax" O52 - TDSD:HKLM\...\Drivers32\"wave3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux3"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll" O52 - TDSD:HKLM\...\Drivers32\"wave4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux4"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"wave5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer5"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux5"="wdmaud.drv" ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoSaveSettings"=0 O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AmdK8.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASACPI.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASUSHWIO.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atkkbnt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atl01_xp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Bravo_a.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Bravo_n.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ccdecode.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmusic.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\EIO.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fltmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\http.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\intelppm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ip6fw.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klif.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Lbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\lv302af.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LV302AV.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\LVUSBSta.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mskssrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspclock.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspqm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mssmbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mstee.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nabtsfec.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nv4_mini.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcouffin.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\RtkHDAud.Sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sdbus.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffdisk.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffp_sd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\slip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\SONYPVU1.SYS O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stmatm.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\streamip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\torususb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbaudio.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbccgp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbprint.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbstor.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wpdusb.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wstcodec.sys End of the scan: 899 lines
  8. Bonjour, bon, j'imagine que si il n'y a pas de lignes rouges, c'est qu'il n'y a pas de problèmes ? Je copie tout de même le résultat du scan. Pas de méchantes bébêtes ? Merci. GMER 1.0.15.14972 - http://www.gmer.net Rootkit scan 2009-07-02 23:50:13 Windows 5.1.2600 Service Pack 3 ---- System - GMER 1.0.15 ---- SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwConnectPort [0xF38DA040] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreateFile [0xF38D6930] SSDT F7B561B6 ZwCreateKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreatePort [0xF38DA510] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreateProcess [0xF38E0870] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreateProcessEx [0xF38E0AA0] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreateSection [0xF38E3FD0] SSDT F7B561AC ZwCreateThread SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwCreateWaitablePort [0xF38DA600] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwDeleteFile [0xF38D6F20] SSDT F7B561BB ZwDeleteKey SSDT F7B561C5 ZwDeleteValueKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwDuplicateObject [0xF38E0580] SSDT F7B561CA ZwLoadKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwOpenFile [0xF38D6D70] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwOpenProcess [0xF38E0350] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwOpenThread [0xF38E0150] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwRenameKey [0xF38E3250] SSDT F7B561D4 ZwReplaceKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwRequestWaitReplyPort [0xF38D9C00] SSDT F7B561CF ZwRestoreKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwSecureConnectPort [0xF38DA220] SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwSetInformationFile [0xF38D7120] SSDT F7B561C0 ZwSetValueKey SSDT \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ZwTerminateProcess [0xF38E0CD0] ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!ZwCallbackReturn + 241C 80501C54 12 Bytes [10, A5, 8D, F3, 70, 08, 8E, ...] ? srescan.sys Le fichier spécifié est introuvable. ! ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!DialogBoxParamW 7E3A47AB 5 Bytes JMP 4437F341 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!DialogBoxIndirectParamW 7E3B2072 5 Bytes JMP 4451178F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!MessageBoxIndirectA 7E3BA082 5 Bytes JMP 44511710 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!DialogBoxParamA 7E3BB144 5 Bytes JMP 44511754 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!MessageBoxExW 7E3D0838 5 Bytes JMP 4451169C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!MessageBoxExA 7E3D085C 5 Bytes JMP 445116D6 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!DialogBoxIndirectParamA 7E3D6D7D 5 Bytes JMP 445117CA C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) .text C:\Program Files\Internet Explorer\iexplore.exe[3696] USER32.dll!MessageBoxIndirectW 7E3E64D5 5 Bytes JMP 443A16B6 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation) ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] [F38DECA0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter] [F38DF1C0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter] [F38DF320] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] [F38DEE10] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] [F38DEE10] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] [F38DECA0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter] [F38DF1C0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter] [F38DF320] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] [F38DECA0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] [F38DEE10] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter] [F38DF320] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter] [F38DF1C0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter] [F38DF320] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter] [F38DF1C0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] [F38DECA0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] [F38DECA0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] [F38DEE10] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter] [F38DF320] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter] [F38DF1C0] \SystemRoot\System32\vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) ---- Devices - GMER 1.0.15 ---- Device \Driver\Tcpip \Device\Ip vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) Device \Driver\Tcpip \Device\Tcp vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) AttachedDevice \Driver\Tcpip \Device\Tcp Lbd.sys (Boot Driver/Lavasoft AB) Device \Driver\Tcpip \Device\Udp vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) Device \Driver\Tcpip \Device\RawIp vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) Device \Driver\Tcpip \Device\IPMULTICAST vsdatant.sys (TrueVector Device Driver/Zone Labs, LLC) AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) ---- Registry - GMER 1.0.15 ---- Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.%20Rodè­®pdf\OpenWithProgids@%20Rodè\xad\xaepdf_auto_file ---- EOF - GMER 1.0.15 ----
  9. Bonjour, Oui, j'avais dévacciné avant de désinstaller spybot... Concernant ma restauation du système impossible, j'ai essayé ce que vous m'avez conseillé de faire : rstrui ne marche pas. Fichier Hptpro.sys introuvable en mode sans échec... Commande "rundll32.exe advpack.dll,LaunchINFSection %systemroot%\Inf\sr.inf" pas acceptée... J'ai enregistré et fusionné restau.reg et accepté la modif du registre. Et enfin, accès refusé à system volum information. Je ne peux toujours pas faire de restauration système. Mon ordi se bloque toujours et je navigue à 2 à l'heure, les vidéos sont saccadées, voire se bloquent, l'iexplore.exe et explore.exe mangeant toujours autant de ressources. J'ai remarqué que mon ordi mettait également un temps important pour démarrer. Antivir met du temps à se charger et occupe beaucoup de ressourecs au démarrage pendant quelques minutes.... Je suis désespéré ! Avez-vous d'autres pistes ? Merci encore pour tout cela.
  10. Dernière petite chose, je me demande si cela n'aurait pas un lien avec spybot que j'ai installé quelques jours auparavant et je me demande si cela ne coincide pas avec l'apparition de ces problèmes (pas sûr). J'ai fait des scans avec et des vaccinations. Depuis, dans le doute, je l'ai viré... Merci. Bonne journée.
  11. Par ailleurs, et je ne sais pas si cela peut avoir un lien avec ces problèmes, j'ai essayé de restaurer mon système à des dates antérieures. Mais cela ne fonctionne pas. Aucun changement effectué, impossible de restaurer à cette date antérieure. Merci.
  12. Bonjour, oui, c'est vrai. Malheureusement, mon ordinateur continue de ramer, voire se bloquer, il plante de temps en temps. Cela fait souvent suite à une lecture vidéo sur le net (dailymotion, agoravox tv...). Les images sont sacadées. Et iexplore.exe et explore.exe consomment toujours autant d'uc (de 60 à 85). Bizarre bizarre... Qu'en pensez-vous ? Merci. Cordialement.
  13. Et enfin, option 2 suppression, voici le log : Qu'en pensez-vous ? Y avait - il un problème ? Merci beaucoup. --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3200+ ) BIOS : BIOS Date: 12/04/06 15:45:54 Ver: 08.00.12 USER : Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : AntiVir Desktop 9.0.1.26 (Activated) Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated) C:\ (Local Disk) - NTFS - Total:58 Go (Free:42 Go) D:\ (Local Disk) - NTFS - Total:169 Go (Free:56 Go) E:\ (CD or DVD) G:\ (Local Disk) - FAT32 - Total:298 Go (Free:116 Go) H:\ (USB) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 30/06/2009|23:54 ) \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\BitDownload\Data Supprime! - C:\Program Files\BitDownload\BitDownload.TRC Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\Bitdownload Supprime! - C:\Program Files\BitDownload - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans APPLIC~1 [15/07/2008|20:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [29/03/2009|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} [07/04/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [07/04/2008|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems [16/01/2008|10:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [16/01/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [22/05/2008|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7 [30/06/2009|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira [31/08/2008|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON [16/07/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft [01/05/2009|10:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier [03/03/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [28/01/2009|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA [28/06/2009|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [01/05/2008|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom [31/08/2008|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [15/05/2007|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [28/10/2007|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [11/05/2007|14:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [22/05/2008|21:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [22/05/2008|21:26] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [07/04/2008|11:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe [05/05/2008|13:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer [29/06/2009|23:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\Azureus [21/09/2008|09:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\EFF [22/09/2008|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\EPSON [11/11/2007|19:31] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help [11/05/2007|14:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities [31/08/2008|17:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield [01/06/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft [15/05/2007|22:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia [16/07/2008|10:38] C:\DOCUME~1\PROPRI~1\APPLIC~1\MailFrontier [18/02/2009|15:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft [01/05/2008|21:18] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla [16/05/2007|11:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller [07/06/2009|21:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org2 [07/04/2008|11:31] C:\DOCUME~1\PROPRI~1\APPLIC~1\Opera [04/01/2009|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real [24/07/2007|19:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun [01/05/2008|21:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\TomTom [11/06/2007|21:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\Vso --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [28/06/2009 14:34][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [30/06/2009 22:27][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{21CC0F67-D75E-4AC7-9500-EAF8D5F0C117}.job [24/06/2009 17:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [30/06/2009 23:14][--ah-----] C:\WINDOWS\tasks\SA.DAT [02/03/2006 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [31/08/2008|17:43] C:\Program Files\ABBYY FineReader 6.0 Sprint [23/07/2008|10:37] C:\Program Files\Adobe [30/06/2009|22:47] C:\Program Files\Ahead [16/01/2008|10:32] C:\Program Files\Apple Software Update [11/05/2007|14:34] C:\Program Files\ASUSTeK [11/05/2007|14:31] C:\Program Files\Attansic [30/06/2009|22:47] C:\Program Files\Avira [04/01/2009|21:28] C:\Program Files\Azureus [21/08/2007|18:37] C:\Program Files\BeWAN ADSL V1.9.0.10 [15/05/2007|19:25] C:\Program Files\BeWAN ADSL V1.9.0.3 [30/06/2009|22:47] C:\Program Files\CCleaner [17/12/2007|20:05] C:\Program Files\CDBurnerXP [11/05/2007|14:19] C:\Program Files\ComPlus Applications [17/05/2007|14:21] C:\Program Files\Compression [11/05/2007|14:31] C:\Program Files\DIFX [24/06/2009|16:14] C:\Program Files\eMule [31/08/2008|17:43] C:\Program Files\epson [21/09/2008|09:46] C:\Program Files\ExtraFilm FotoFacil [04/01/2009|21:30] C:\Program Files\Fichiers communs [05/05/2008|13:27] C:\Program Files\Google [31/08/2008|17:46] C:\Program Files\InstallShield Installation Information [12/06/2009|00:26] C:\Program Files\Internet Explorer [11/03/2008|20:24] C:\Program Files\Java [29/03/2009|14:02] C:\Program Files\Lavasoft [16/05/2007|21:27] C:\Program Files\Logitech [11/10/2008|15:11] C:\Program Files\Messenger [11/05/2007|14:22] C:\Program Files\microsoft frontpage [23/08/2007|19:25] C:\Program Files\Microsoft Office [11/10/2008|14:00] C:\Program Files\Movie Maker [17/12/2007|20:02] C:\Program Files\MSBuild [16/05/2007|11:41] C:\Program Files\MSN [11/05/2007|14:18] C:\Program Files\MSN Gaming Zone [13/10/2008|17:24] C:\Program Files\MSN Messenger [16/05/2007|23:41] C:\Program Files\MSXML 4.0 [17/12/2007|19:57] C:\Program Files\MSXML 6.0 [08/06/2009|22:12] C:\Program Files\Navilog1 [11/10/2008|13:58] C:\Program Files\NetMeeting [30/06/2009|22:47] C:\Program Files\Nouveau dossier [11/05/2007|14:19] C:\Program Files\Online Services [24/07/2007|19:14] C:\Program Files\open office [07/06/2009|22:25] C:\Program Files\OpenOffice 3.1 [07/06/2009|21:45] C:\Program Files\OpenOffice.org 2.2 [07/06/2009|22:27] C:\Program Files\OpenOffice.org 3 [11/10/2008|13:58] C:\Program Files\Outlook Express [07/01/2008|23:14] C:\Program Files\Photo filtre [05/05/2008|14:02] C:\Program Files\Picasa2 [16/01/2008|10:33] C:\Program Files\QuickTime [23/08/2007|18:57] C:\Program Files\Real [11/05/2007|14:29] C:\Program Files\Realtek [17/12/2007|20:01] C:\Program Files\Reference Assemblies [11/05/2007|14:20] C:\Program Files\Services en ligne [25/11/2008|21:48] C:\Program Files\sina [24/11/2007|20:30] C:\Program Files\SLD Codec Pack [29/10/2008|14:03] C:\Program Files\SopCast [28/06/2009|16:18] C:\Program Files\Spybot - Search & Destroy [07/06/2009|22:40] C:\Program Files\Trend Micro [11/05/2007|14:26] C:\Program Files\Uninstall Information [04/09/2008|20:27] C:\Program Files\Virtools [05/05/2008|12:55] C:\Program Files\virtualdub [15/05/2007|22:02] C:\Program Files\Winamp [11/11/2007|19:31] C:\Program Files\Windows Media Connect 2 [11/10/2008|13:58] C:\Program Files\Windows Media Player [11/10/2008|13:58] C:\Program Files\Windows NT [11/05/2007|14:20] C:\Program Files\WindowsUpdate [01/09/2008|12:34] C:\Program Files\WinRAR [11/05/2007|14:22] C:\Program Files\xerox [01/05/2009|10:17] C:\Program Files\zone alarm [15/05/2007|21:06] C:\Program Files\Zone Labs [02/05/2009|15:21] C:\Program Files\Zylom Games --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [07/04/2008|11:24] C:\Program Files\Fichiers communs\Adobe [07/04/2008|11:22] C:\Program Files\Fichiers communs\Adobe Systems Shared [11/11/2007|19:30] C:\Program Files\Fichiers communs\DESIGNER [31/08/2008|17:45] C:\Program Files\Fichiers communs\InstallShield [24/07/2007|19:21] C:\Program Files\Fichiers communs\Java [16/05/2007|21:26] C:\Program Files\Fichiers communs\Labtec [30/06/2009|22:47] C:\Program Files\Fichiers communs\Microsoft Shared [11/05/2007|14:20] C:\Program Files\Fichiers communs\MSSoap [20/12/2007|16:38] C:\Program Files\Fichiers communs\NSV [11/05/2007|16:12] C:\Program Files\Fichiers communs\ODBC [04/01/2009|21:30] C:\Program Files\Fichiers communs\Real [11/05/2007|14:20] C:\Program Files\Fichiers communs\Services [11/05/2007|16:12] C:\Program Files\Fichiers communs\SpeechEngines [11/10/2008|13:58] C:\Program Files\Fichiers communs\System --------------------\\ Process ( 41 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-01 00:04:48 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [F:332][D:11]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp [F:72][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies [F:1210][D:9]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 30/06/2009|23:50 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 01/07/2009| 0:05 - Option : [2] --------------------\\ Fin du rapport a 0:05:57
  14. Bonjour et vraiment merci de votre aide. Ci-dessous le log après le scan de lop S&D : --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Sempron Processor 3200+ ) BIOS : BIOS Date: 12/04/06 15:45:54 Ver: 08.00.12 USER : Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : AntiVir Desktop 9.0.1.26 (Activated) Firewall : ZoneAlarm Firewall 7.0.483.000 (Activated) C:\ (Local Disk) - NTFS - Total:58 Go (Free:42 Go) D:\ (Local Disk) - NTFS - Total:169 Go (Free:56 Go) E:\ (CD or DVD) G:\ (Local Disk) - FAT32 - Total:298 Go (Free:116 Go) H:\ (USB) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 30/06/2009|23:39 ) --------------------\\ Listing des dossiers dans APPLIC~1 [15/07/2008|20:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [29/03/2009|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} [07/04/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [07/04/2008|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems [16/01/2008|10:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [16/01/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [22/05/2008|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7 [30/06/2009|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira [31/08/2008|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON [16/07/2008|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft [01/05/2009|10:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier [03/03/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [28/01/2009|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA [28/06/2009|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [01/05/2008|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom [31/08/2008|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [15/05/2007|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [28/10/2007|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [11/05/2007|14:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [22/05/2008|21:26] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [22/05/2008|21:26] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [07/04/2008|11:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe [05/05/2008|13:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer [29/06/2009|23:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\Azureus [14/10/2007|18:47] C:\DOCUME~1\PROPRI~1\APPLIC~1\BitDownload [21/09/2008|09:46] C:\DOCUME~1\PROPRI~1\APPLIC~1\EFF [22/09/2008|21:54] C:\DOCUME~1\PROPRI~1\APPLIC~1\EPSON [11/11/2007|19:31] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help [11/05/2007|14:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities [31/08/2008|17:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield [01/06/2007|23:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft [15/05/2007|22:53] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia [16/07/2008|10:38] C:\DOCUME~1\PROPRI~1\APPLIC~1\MailFrontier [18/02/2009|15:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft [01/05/2008|21:18] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla [16/05/2007|11:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSNInstaller [07/06/2009|21:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org2 [07/04/2008|11:31] C:\DOCUME~1\PROPRI~1\APPLIC~1\Opera [04/01/2009|21:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real [24/07/2007|19:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun [01/05/2008|21:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\TomTom [11/06/2007|21:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\Vso --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [28/06/2009 14:34][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [30/06/2009 22:27][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{21CC0F67-D75E-4AC7-9500-EAF8D5F0C117}.job [24/06/2009 17:26][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [30/06/2009 23:14][--ah-----] C:\WINDOWS\tasks\SA.DAT [02/03/2006 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [31/08/2008|17:43] C:\Program Files\ABBYY FineReader 6.0 Sprint [23/07/2008|10:37] C:\Program Files\Adobe [30/06/2009|22:47] C:\Program Files\Ahead [16/01/2008|10:32] C:\Program Files\Apple Software Update [11/05/2007|14:34] C:\Program Files\ASUSTeK [11/05/2007|14:31] C:\Program Files\Attansic [30/06/2009|22:47] C:\Program Files\Avira [04/01/2009|21:28] C:\Program Files\Azureus [21/08/2007|18:37] C:\Program Files\BeWAN ADSL V1.9.0.10 [15/05/2007|19:25] C:\Program Files\BeWAN ADSL V1.9.0.3 [11/11/2007|19:32] C:\Program Files\BitDownload [30/06/2009|22:47] C:\Program Files\CCleaner [17/12/2007|20:05] C:\Program Files\CDBurnerXP [11/05/2007|14:19] C:\Program Files\ComPlus Applications [17/05/2007|14:21] C:\Program Files\Compression [11/05/2007|14:31] C:\Program Files\DIFX [24/06/2009|16:14] C:\Program Files\eMule [31/08/2008|17:43] C:\Program Files\epson [21/09/2008|09:46] C:\Program Files\ExtraFilm FotoFacil [04/01/2009|21:30] C:\Program Files\Fichiers communs [05/05/2008|13:27] C:\Program Files\Google [31/08/2008|17:46] C:\Program Files\InstallShield Installation Information [12/06/2009|00:26] C:\Program Files\Internet Explorer [11/03/2008|20:24] C:\Program Files\Java [29/03/2009|14:02] C:\Program Files\Lavasoft [16/05/2007|21:27] C:\Program Files\Logitech [11/10/2008|15:11] C:\Program Files\Messenger [11/05/2007|14:22] C:\Program Files\microsoft frontpage [23/08/2007|19:25] C:\Program Files\Microsoft Office [11/10/2008|14:00] C:\Program Files\Movie Maker [17/12/2007|20:02] C:\Program Files\MSBuild [16/05/2007|11:41] C:\Program Files\MSN [11/05/2007|14:18] C:\Program Files\MSN Gaming Zone [13/10/2008|17:24] C:\Program Files\MSN Messenger [16/05/2007|23:41] C:\Program Files\MSXML 4.0 [17/12/2007|19:57] C:\Program Files\MSXML 6.0 [08/06/2009|22:12] C:\Program Files\Navilog1 [11/10/2008|13:58] C:\Program Files\NetMeeting [30/06/2009|22:47] C:\Program Files\Nouveau dossier [11/05/2007|14:19] C:\Program Files\Online Services [24/07/2007|19:14] C:\Program Files\open office [07/06/2009|22:25] C:\Program Files\OpenOffice 3.1 [07/06/2009|21:45] C:\Program Files\OpenOffice.org 2.2 [07/06/2009|22:27] C:\Program Files\OpenOffice.org 3 [11/10/2008|13:58] C:\Program Files\Outlook Express [07/01/2008|23:14] C:\Program Files\Photo filtre [05/05/2008|14:02] C:\Program Files\Picasa2 [16/01/2008|10:33] C:\Program Files\QuickTime [23/08/2007|18:57] C:\Program Files\Real [11/05/2007|14:29] C:\Program Files\Realtek [17/12/2007|20:01] C:\Program Files\Reference Assemblies [11/05/2007|14:20] C:\Program Files\Services en ligne [25/11/2008|21:48] C:\Program Files\sina [24/11/2007|20:30] C:\Program Files\SLD Codec Pack [29/10/2008|14:03] C:\Program Files\SopCast [28/06/2009|16:18] C:\Program Files\Spybot - Search & Destroy [07/06/2009|22:40] C:\Program Files\Trend Micro [11/05/2007|14:26] C:\Program Files\Uninstall Information [04/09/2008|20:27] C:\Program Files\Virtools [05/05/2008|12:55] C:\Program Files\virtualdub [15/05/2007|22:02] C:\Program Files\Winamp [11/11/2007|19:31] C:\Program Files\Windows Media Connect 2 [11/10/2008|13:58] C:\Program Files\Windows Media Player [11/10/2008|13:58] C:\Program Files\Windows NT [11/05/2007|14:20] C:\Program Files\WindowsUpdate [01/09/2008|12:34] C:\Program Files\WinRAR [11/05/2007|14:22] C:\Program Files\xerox [01/05/2009|10:17] C:\Program Files\zone alarm [15/05/2007|21:06] C:\Program Files\Zone Labs [02/05/2009|15:21] C:\Program Files\Zylom Games --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [07/04/2008|11:24] C:\Program Files\Fichiers communs\Adobe [07/04/2008|11:22] C:\Program Files\Fichiers communs\Adobe Systems Shared [11/11/2007|19:30] C:\Program Files\Fichiers communs\DESIGNER [31/08/2008|17:45] C:\Program Files\Fichiers communs\InstallShield [24/07/2007|19:21] C:\Program Files\Fichiers communs\Java [16/05/2007|21:26] C:\Program Files\Fichiers communs\Labtec [30/06/2009|22:47] C:\Program Files\Fichiers communs\Microsoft Shared [11/05/2007|14:20] C:\Program Files\Fichiers communs\MSSoap [20/12/2007|16:38] C:\Program Files\Fichiers communs\NSV [11/05/2007|16:12] C:\Program Files\Fichiers communs\ODBC [04/01/2009|21:30] C:\Program Files\Fichiers communs\Real [11/05/2007|14:20] C:\Program Files\Fichiers communs\Services [11/05/2007|16:12] C:\Program Files\Fichiers communs\SpeechEngines [11/10/2008|13:58] C:\Program Files\Fichiers communs\System --------------------\\ Process ( 40 Processes ) iexplore.exe ~ [PID:2804] --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop C:\DOCUME~1\PROPRI~1\APPLIC~1\Bitdownload C:\DOCUME~1\PROPRI~1\APPLIC~1\BitDownload C:\DOCUME~1\PROPRI~1\APPLIC~1\BitDownload\Data C:\Program Files\BitDownload C:\Program Files\BitDownload\BitDownload.TRC --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-30 23:48:39 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [F:332][D:11]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp [F:72][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies [F:1192][D:9]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 30/06/2009|23:50 - Option : [1] --------------------\\ Fin du rapport a 23:50:01
  15. Bonjour, depuis 15 jours, subitement, mon ordi se met à ramer énormément. Des pages web qui ne se chargent pas, impossible de lire les vidéos car elles sont saccadées, iexplore qui bouffe toute ma mémoire vive (cequi n'était pas le cas avant...), bref, c'est la galère... Quelqu'un peut-il me conseiller sur la démarche à suivre ? D'avance, merci... Ci-dessous, mon analyse hijachthis (un truc que j'aimerais ien savoir décripter...) : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:18:13, on 29/06/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\ATKKBService.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe D:\program files 2\Winamp\winampa.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe D:\program files 2\ZoneAlarm\zlclient.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\ctfmon.exe D:\program files 2\tom tom\TomTom HOME 2\HOMERunner.exe C:\WINDOWS\system32\LVComS.exe C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [WinampAgent] "D:\program files 2\Winamp\winampa.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\program files 2\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TomTomHOME.exe] "D:\program files 2\tom tom\TomTom HOME 2\HOMERunner.exe" O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_SC8.tmp" /EF "HKCU" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/30.61/uploader2.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.wistiti.fr/ImageUploader4.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.0.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{77AA0737-A102-48FE-B966-2F79360FE8FE}: NameServer = 208.67.222.222 208.67.220.220 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 8038 bytes
×
×
  • Créer...