Malwares détectés par ZHP Diag

pldta · le 13 avril 2009

Bonjour,

Je viens de faire tourner ZHP sur ZHPdiag. Il me signale à la fin de l'analyse quatre lignes comme étant des malwares

---\\ Recherche d'infection de Base de Registres (O71)

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{43d9e6f0-1776-4897-ae14-ecedecbafec0}]

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{5a074b29-f830-49de-a31b-5bb9d7f6b407}]

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{5a074b21-f830-49de-a31b-5bb9d7f6b407}]

O71 - BDRI:[hkcu\software\microsoft\windows\currentversion\run]:msmsgs

J'ai ensuite fait tourner Antivir. celui-ci m'a trouvé un problème que je n'avais pas eu avant:

C:\WINDOWS\pss\winsched.exeCommon Startup

[DETECTION] Contains recognition pattern of the DR/StartPage.dbm.12 dropper

[NOTE] A backup was created as '4a512687.qua' ( QUARANTINE )

J'ai fait tourner Malwarebytes qui n'a rien trouvé

Quel sont les problèmes trouvés par ZHP. le fichier winsched.exeCommon Startup sert-il à quelque chose ?

Merci pour votre réponse.

Ci-dessous l'analyse de ZHP :

Rapport de ZHPDiag v1.16.6 par Nicolas Coolman

Enregistré le 13/04/2009 12:21:45

Platform : Microsoft Windows XP (5.1.2600) Service Pack 3

MSIE: Internet Explorer v8.0.6001.18702

---\\ Processus lancés

C:\WINDOWS\system32\NeroCheck.exe

C:\WINDOWS\system32\PSDrvCheck.exe

C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\ati2sgag.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\services.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

C:\Program Files\PixVue\bin\Daemon.exe

C:\WINDOWS\System32\lsass.exe

C:\Program Files\Sandboxie\SbieSvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\MsPMSPSv.exe

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: &PixVue - {B28B4479-D9C2-41D1-B74D-74A1827037CD} - C:\Program Files\PixVue\bin\PixVue.dll

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [PSDrvCheck] C:\WINDOWS\system32\PSDrvCheck.exe

O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\SlySoft\CloneCD\ElbyCheck.exe" /L ElbyCDFL

O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide

O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [ATIPtool]

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1"

O4 - Global Startup: Nikon Monitor.lnk - C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe

O4 - Global Startup: WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) -

O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) -

O16 - DPF: teleir_cert (teleir_cert) - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab

O16 - DPF: {0D9392CD-A784-4FCA-9342-0F75F7D7C8CB} (Corporate Language Training Interface) - http://www.cltnet.de/login/dplaunch.cab

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shock...director/sw.cab

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1155398021206

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab

O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.1.cab

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab

---\\ Piratage de domaine (Lop.com) (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{9548D205-C2A3-4969-BEF2-92CBB72FF227}: 192.168.0.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{9548D205-C2A3-4969-BEF2-92CBB72FF227}: 192.168.0.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{9548D205-C2A3-4969-BEF2-92CBB72FF227}: 192.168.0.1

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

---\\ Valeur de registre AppInit_DLLs et sous-clés Winlogon Notify (O20)

O20 - Winlogon Notify: SABWINLOStartup - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: AtiStartupEvent - C:\WINDOWS\System32\Ati2evxx.dll

O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll

O20 - Winlogon Notify: C:\Program Files\PixVue\bin\WinLogon.DLL

O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll

O20 - Winlogon Notify: WRStartup - C:\WINDOWS\System32\WRLogonNTF.dll

---\\ Services NT non Microsoft et non désactivés (O23)

O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: (Ati HotKey Poller) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart (ATI Smart) - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard (AVG Anti-Spyware Guard) - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf

O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

O23 - Service: LVSrvLauncher (LVSrvLauncher) - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: PixVue (PixVue) - C:\Program Files\PixVue\bin\Daemon.exe

O23 - Service: Sandboxie Service (SbieSvc) - C:\Program Files\Sandboxie\SbieSvc.exe

O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe

O23 - Service: Windows Defender (WinDefend) - C:\Program Files\Windows Defender\MsMpEng.exe

O23 - Service: WMDM PMSP Service (WMDM PMSP Service) - C:\WINDOWS\System32\MsPMSPSv.exe

---\\ Enumération des composants Active Desktop (O24)

O24 - Desktop Component 0: Ma page d'accueil - file:About:Home

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\desktop.ini

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Scan.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SA.DAT

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\XoftSpy.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE

O40 - ASIC: YInstStarterUpgrade Class - {0291E591-EA41-4c82-8106-3DC6CE7F7664} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll

O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)

O40 - ASIC: Internet Explorer Classes for Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - (not file)

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)

O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} - C:\WINDOWS\system32\Macromed\Director\SwDir.dll

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\MSDXM.OCX

O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\MSDXM.OCX

O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)

O40 - ASIC: Macromedia Shockwave Director 10.1 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll

O40 - ASIC: YInstStarter Class - {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll

O40 - ASIC: YSearchSetting2 Class - {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll

O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)

O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Internet Explorer Classes for Java - {6A02B662-F864-F540-B99F-64E669A0CDED} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)

O40 - ASIC: Web Folders - {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

O40 - ASIC: Browser Customizations - {852C5690-352F-6BBE-463F-F7C582BC28B5} - (not file)

O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

O40 - ASIC: (no name) - {8D0DE800-CFA3-E1D0-7869-6A1471CACD98} - (not file)

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: Internet Explorer Classes for Java - {96DD9866-10DB-276D-3961-CC1743BAFE73} - (not file)

O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)

O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys

O41 - Driver: Environnement de prise en charge de réseau AFD (AFD) - C:\WINDOWS\System32\drivers\afd.sys

O41 - Driver: Pilote de processeur AMD K7 (AmdK7) - C:\WINDOWS\System32\DRIVERS\amdk7.sys

O41 - Driver: Carte Fast Ethernet 10/100 Mbps ADMtek AN983/AN985/ADM951X (AN983) - C:\WINDOWS\System32\DRIVERS\AN983.sys

O41 - Driver: Protocole client ARP 1394 (Arp1394) - C:\WINDOWS\System32\DRIVERS\arp1394.sys

O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\System32\DRIVERS\asyncmac.sys

O41 - Driver: (no object) (ati2mtag) - C:\WINDOWS\system32\DRIVERS\ati2mtag.sys

O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\System32\DRIVERS\atmarpc.sys

O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\System32\DRIVERS\audstub.sys

O41 - Driver: AVG Anti-Rootkit (AVG Anti-Rootkit) - C:\WINDOWS\System32\DRIVERS\anti_rkt.sys

O41 - Driver: AVG Anti-Spyware Driver (AVG Anti-Spyware Driver) - C:\Program Files\AVG Anti-Spyware 7.5\guard.sys

O41 - Driver: AVG Clean Driver (AVG Clean Driver) - C:\WINDOWS\System32\DRIVERS\cleanDrv.sys

O41 - Driver: Avg Anti-Rootkit Clean Driver (AvgArCln) - C:\WINDOWS\System32\DRIVERS\AvgArCln.sys

O41 - Driver: AVG Anti-Spyware Clean Driver (AvgAsCln) - C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys

O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys

O41 - Driver: avgntflt (avgntflt) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys

O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys

O41 - Driver: (no object) (axwhisky) - C:\WINDOWS\system32\DRIVERS\axwhisky.sys

O41 - Driver: (no object) (axwskbus) - C:\WINDOWS\system32\DRIVERS\axwskbus.sys

O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

O41 - Driver: CH Control Manager Driver 1 (chdrvr01) - C:\WINDOWS\system32\DRIVERS\chdrvr01.sys

O41 - Driver: CH Control Manager Driver 2 (chdrvr02) - C:\WINDOWS\system32\DRIVERS\chdrvr02.sys

O41 - Driver: CH Control Manager Driver 3 (chdrvr03) - C:\WINDOWS\system32\DRIVERS\chdrvr03.sys

O41 - Driver: (no object) (d347bus) - C:\WINDOWS\system32\DRIVERS\d347bus.sys

O41 - Driver: (no object) (d347prt) - C:\WINDOWS\System32\Drivers\d347prt.sys

O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys

O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys

O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys

O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys

O41 - Driver: driverhardwarev2 (driverhardwarev2) - C:\Program Files\HardwareDetection\driverhardwarev2.sys

O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys

O41 - Driver: (no object) (dtscsi) - C:\WINDOWS\System32\Drivers\dtscsi.sys

O41 - Driver: ElbyCDIO Driver (ElbyCDIO) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys

O41 - Driver: (no object) (ElbyVCD) - C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys

O41 - Driver: Creative EMU10K1/EMU10K2 Audio Driver (WDM) (emu10kx) - C:\WINDOWS\system32\drivers\e10kx2k.sys

O41 - Driver: UVC Filter Service (FilterService) - C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys

O41 - Driver: giveio (giveio) - C:\WINDOWS\system32\giveio.sys

O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\System32\DRIVERS\msgpc.sys

O41 - Driver: Pilote de classe HID Microsoft (HidUsb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys

O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys

O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys

O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\System32\DRIVERS\ipinip.sys

O41 - Driver: Traducteur d'adresses réseau IP (IpNat) - C:\WINDOWS\System32\DRIVERS\ipnat.sys

O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\System32\DRIVERS\ipsec.sys

O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\System32\DRIVERS\irenum.sys

O41 - Driver: ITERAID_Service_Install (iteraid) - C:\WINDOWS\system32\DRIVERS\iteraid.sys

O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys

O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys

O41 - Driver: Logitech AEC Driver (LVcKap) - C:\WINDOWS\system32\DRIVERS\LVcKap.sys

O41 - Driver: Logitech Machine Vision Engine Loader (LVMVDrv) - C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys

O41 - Driver: Logitech POP Suppression Filter (lvpopflt) - C:\WINDOWS\system32\DRIVERS\lvpopflt.sys

O41 - Driver: Logitech LVPr2Mon Driver (LVPr2Mon) - C:\WINDOWS\system32\drivers\LVPr2Mon.sys

O41 - Driver: Logitech Selective Suspend Filter (lvselsus) - C:\WINDOWS\system32\DRIVERS\lvselsus.sys

O41 - Driver: Logitech QuickCam Pro 5000(UVC) (LVUVC) - C:\WINDOWS\system32\DRIVERS\lvuvc.sys

O41 - Driver: MEMSWEEP2 (MEMSWEEP2) - C:\WINDOWS\system32\52.tmp

O41 - Driver: DiBcom DIB7700 based TV tuner device (mod7700) - C:\WINDOWS\System32\Drivers\mod7700.sys

O41 - Driver: DiBcom Infrared Receiver (MODRC) - C:\WINDOWS\system32\DRIVERS\modrc.sys

O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\System32\DRIVERS\mouhid.sys

O41 - Driver: Filtre BDA MPE (MPE) - C:\WINDOWS\system32\DRIVERS\MPE.sys

O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\System32\DRIVERS\mrxdav.sys

O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys

O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys

O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys

O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys

O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\System32\DRIVERS\mssmbios.sys

O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys

O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys

O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\System32\DRIVERS\ndistapi.sys

O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\System32\DRIVERS\ndisuio.sys

O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\System32\DRIVERS\ndiswan.sys

O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\System32\DRIVERS\netbios.sys

O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\System32\DRIVERS\netbt.sys

O41 - Driver: Pilote réseau 1394 (NIC1394) - C:\WINDOWS\System32\DRIVERS\nic1394.sys

O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys

O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys

O41 - Driver: Contrôleurs hôte IEEE 1394 compatible OHCI (ohci1394) - C:\WINDOWS\System32\DRIVERS\ohci1394.sys

O41 - Driver: Creative OS Services Driver (ossrv) - C:\WINDOWS\system32\drivers\ctoss2k.sys

O41 - Driver: (no object) (PalmUSBD) - C:\WINDOWS\system32\drivers\PalmUSBD.sys

O41 - Driver: VSO Software pcouffin (pcouffin) - C:\WINDOWS\System32\Drivers\pcouffin.sys

O41 - Driver: Pinnacle Virtual Miniport (PctvVirtualNdis) - C:\WINDOWS\system32\DRIVERS\PctvVirtualNdis.sys

O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\System32\DRIVERS\raspptp.sys

O41 - Driver: (no object) (PrecSim) - C:\WINDOWS\system32\DRIVERS\precsim.sys

O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\System32\DRIVERS\psched.sys

O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\System32\DRIVERS\ptilink.sys

O41 - Driver: PxHelp20 (PxHelp20) - C:\WINDOWS\System32\Drivers\PxHelp20.sys

O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys

O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\System32\DRIVERS\rasl2tp.sys

O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\System32\DRIVERS\raspppoe.sys

O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\System32\DRIVERS\raspti.sys

O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\System32\DRIVERS\rdbss.sys

O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\System32\DRIVERS\rdpdr.sys

O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\System32\DRIVERS\redbook.sys

O41 - Driver: SASDIFSV (SASDIFSV) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS

O41 - Driver: SASENUM (SASENUM) - C:\Program Files\SUPERAntiSpyware\SASENUM.SYS

O41 - Driver: SASKUTIL (SASKUTIL) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys

O41 - Driver: SbieDrv (SbieDrv) - C:\Program Files\Sandboxie\SbieDrv.sys

O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\System32\DRIVERS\secdrv.sys

O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\System32\DRIVERS\serenum.sys

O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys

O41 - Driver: speedfan (speedfan) - C:\WINDOWS\system32\speedfan.sys

O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys

O41 - Driver: (no object) (sptd) - C:\WINDOWS\System32\Drivers\sptd.sys

O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\System32\DRIVERS\sr.sys

O41 - Driver: Srv (Srv) - C:\WINDOWS\System32\DRIVERS\srv.sys

O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys

O41 - Driver: SVKP (SVKP) - C:\WINDOWS\system32\SVKP.sys

O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\System32\DRIVERS\swenum.sys

O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys

O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys

O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\System32\DRIVERS\tcpip.sys

O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\System32\DRIVERS\update.sys

O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys

O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys

O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys

O41 - Driver: Pilote de concentrateur standard USB Microsoft (usbhub) - C:\WINDOWS\System32\DRIVERS\usbhub.sys

O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys

O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys

O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys

O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

O41 - Driver: Pilote miniport de contrôleur hôte universel USB Microsoft (usbuhci) - C:\WINDOWS\System32\DRIVERS\usbuhci.sys

O41 - Driver: (no object) (VClone) - C:\WINDOWS\system32\DRIVERS\VClone.sys

O41 - Driver: Filtre de bus AGP VIA (viaagp) - C:\WINDOWS\System32\DRIVERS\viaagp.sys

O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\System32\DRIVERS\wanarp.sys

O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys

O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys

O41 - Driver: (no object) (NaiAvFilter1) - C:\WINDOWS\system32\drivers\naiavf5x.sys

O41 - Driver: (no object) (NaiAvTdi1) - C:\WINDOWS\system32\drivers\mvstdi5x.sys

O41 - Driver: Spy Sweeper File System Filer Driver: 0509 (SSFS0509) - C:\WINDOWS\SYSTEM32\Drivers\SSFS0509.SYS

O41 - Driver: Spy Sweeper Hookrack MiniDriver (SSHRMD) - C:\WINDOWS\SYSTEM32\Drivers\SSHRMD.SYS

O41 - Driver: Spy Sweeper Interdiction Driver (SSIDRV) - C:\WINDOWS\SYSTEM32\Drivers\SSIDRV.SYS

---\\ Logiciels installés (O42)

O42 - Logiciel: 4Diskclean Freeware

O42 - Logiciel: Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player Plugin

O42 - Logiciel: Adobe Photoshop CS2

O42 - Logiciel: Adobe Photoshop Elements 5.0

O42 - Logiciel: Advanced IRC

O42 - Logiciel: ATI - Software Uninstall Utility

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus

O42 - Logiciel: ASAPI Update

O42 - Logiciel: ATI Display Driver

O42 - Logiciel: Audacity 1.2.4

O42 - Logiciel: AVG Anti-Rootkit Free

O42 - Logiciel: AVG Anti-Spyware 7.5

O42 - Logiciel: AVI/MPEG/RM/WMV Joiner 4.81

O42 - Logiciel: Avi2Dvd 0.4.5 beta

O42 - Logiciel: AviSynth 2.5

O42 - Logiciel: BackupBuddy for Windows

O42 - Logiciel: CCleaner (remove only)

O42 - Logiciel: CH Control Manager

O42 - Logiciel: Clean 5

O42 - Logiciel: CloneCD

O42 - Logiciel: Cobian Backup 9

O42 - Logiciel: dBpoweramp FLAC Codec

O42 - Logiciel: dBpoweramp Monkeys Audio Codec

O42 - Logiciel: dBpoweramp Musepack Codec

O42 - Logiciel: dBpoweramp Ogg Vorbis Codec

O42 - Logiciel: dBpowerAMP Wavpack Codec

O42 - Logiciel: dBpoweramp Windows Media Audio 10 Codec

O42 - Logiciel: dMC Power Pack

O42 - Logiciel: DoublePics v2.3.2(.4)

O42 - Logiciel: DVD Shrink 3.2

O42 - Logiciel: EarMaster Pro 5

O42 - Logiciel: eMule

O42 - Logiciel: EVEREST Ultimate Edition v5.00

O42 - Logiciel: EW : Cossacks

O42 - Logiciel: Exifer

O42 - Logiciel: Microsoft Flight Simulator 2004 Un siècle d'aviation

O42 - Logiciel: Foxit Reader

O42 - Logiciel: GedCom-Vision version 2.0e

O42 - Logiciel: GHCS Software GedStar for PalmOS

O42 - Logiciel: GNU Solfege 3.10.4

O42 - Logiciel: GrabIt 1.7.1 Beta (build 960)

O42 - Logiciel: Greeting Card Creator

O42 - Logiciel: Guitar Pro 4.0

O42 - Logiciel: Harmony Assistant

O42 - Logiciel: Helicon Filter 2.02

O42 - Logiciel: Heredis 9

O42 - Logiciel: HijackThis 2.0.2

O42 - Logiciel: Windows Internet Explorer 7

O42 - Logiciel: Windows Internet Explorer 8

O42 - Logiciel: IFOEdit 0.971 Fr

O42 - Logiciel: IsoBuster 1.9.1

O42 - Logiciel: jv16 PowerTools 1.3

O42 - Logiciel: Kaspersky Online Scanner

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)

O42 - Logiciel: Security Update for CAPICOM (KB931906)

O42 - Logiciel: K-Lite Mega Codec Pack 3.5.0

O42 - Logiciel: Kommute

O42 - Logiciel: Label Editor

O42 - Logiciel: Macromedia Shockwave Player

O42 - Logiciel: Malwarebytes' Anti-Malware

O42 - Logiciel: MaxSplitter v1.53 Free Edition

O42 - Logiciel: Media Player Classic fr

O42 - Logiciel: Microsoft Money

O42 - Logiciel: Morefunc

O42 - Logiciel: Mp3DirectCut

O42 - Logiciel: Neat Image v5 Demo (with plug-in)

O42 - Logiciel: Nero 6 Enterprise Edition

O42 - Logiciel: Nero BurnRights (Ahead Software)

O42 - Logiciel: OMeR

O42 - Logiciel: P2400P Guide de référence

O42 - Logiciel: Panda ActiveScan

O42 - Logiciel: Paradise Update 1.1

O42 - Logiciel: Paradise

O42 - Logiciel: PDFtoMusic

O42 - Logiciel: PeerGuardian 2.0

O42 - Logiciel: PhotoFiltre

O42 - Logiciel: Picasa 3

O42 - Logiciel: Planète Généalogie

O42 - Logiciel: Privacy Eraser Pro 4.20

O42 - Logiciel: Microsoft Office Professional Plus 2007

O42 - Logiciel: Programme de gestion Camera de Logitech®

O42 - Logiciel: QuickPar 0.9

O42 - Logiciel: RadCor 2.04

O42 - Logiciel: Radio Fr Solo 2.1

O42 - Logiciel: Sandboxie 3.34

O42 - Logiciel: SaverWiz

O42 - Logiciel: Simple Sudoku 4.2

O42 - Logiciel: Sophos Anti-Rootkit 1.3

O42 - Logiciel: SpeedFan (remove only)

O42 - Logiciel: Speeditup Free 4.01

O42 - Logiciel: Spybot - Search & Destroy 1.4

O42 - Logiciel: Tous les Noms de Famille de France V.6.5.1

O42 - Logiciel: StationRipper 2.71

O42 - Logiciel: StealthNet 0.8.4.1

O42 - Logiciel: Sudoku 3D Pro

O42 - Logiciel: Sudoku V 3.0

O42 - Logiciel: TeamViewer 4

O42 - Logiciel: Tweak-XP Pro 4

O42 - Logiciel: Universal Extractor 1.6

O42 - Logiciel: Unlocker 1.8.6

O42 - Logiciel: VDMSound

O42 - Logiciel: VobEdit 0.6 Fr

O42 - Logiciel: WaveLab Lite

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474)

O42 - Logiciel: Windows Media Format 11 runtime

O42 - Logiciel: Lecteur Windows Media 11

O42 - Logiciel: Windows XP Service Pack 3

O42 - Logiciel: WinHTTrack Website Copier 3.30

O42 - Logiciel: Archiveur WinRAR

O42 - Logiciel: Wintree Version 3.0 d

O42 - Logiciel: WinZip

O42 - Logiciel: Windows Media Player 11

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0

O42 - Logiciel: ZebHelpProcess 2.33.6

O42 - Logiciel: EPSON Scan

O42 - Logiciel: Lizardtech DjVu Control

O42 - Logiciel: WinWAP for Windows 3.2

O42 - Logiciel: NikonCapture

O42 - Logiciel: Windows Live Sign-in Assistant

O42 - Logiciel: File Uploader

O42 - Logiciel: Skype™ 4.0

O42 - Logiciel: Sibelius 5 Demo

O42 - Logiciel: Adobe Help Center 2.1

O42 - Logiciel: Java 6 Update 11

O42 - Logiciel: Macromedia Flash Player

O42 - Logiciel: ConvertHelper 2.1

O42 - Logiciel: Java 6 Update 7

O42 - Logiciel: MVision

O42 - Logiciel: SmartList To Go

O42 - Logiciel: MSXML 4.0 SP2 (KB927978)

O42 - Logiciel: Sibelius Scorch (Firefox, Opera, Netscape only)

O42 - Logiciel: Microsoft Baseline Security Analyzer 2.1

O42 - Logiciel: SanDisk SD Wi-Fi Card

O42 - Logiciel: EPSON Smart Panel

O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable

O42 - Logiciel: ConvertXtoDVD 3.2.9.94c

O42 - Logiciel: PTLens

O42 - Logiciel: Adobe Stock Photos 1.0

O42 - Logiciel: Logitech QuickCam

O42 - Logiciel: MSXML 4.0 SP2 (KB954430)

O42 - Logiciel: Picture Control Utility

O42 - Logiciel: UMVPLStandalone

O42 - Logiciel: Adobe Common File Installer

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb962871)

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB956358)

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB952142)

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB951338)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB954326)

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB958437)

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB958439)

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB956828)

O42 - Logiciel: Update for Office 2007 (KB946691)

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)

O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB950114)

O42 - Logiciel: Microsoft Office Access MUI (French) 2007

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007

O42 - Logiciel: Microsoft Office Word MUI (French) 2007

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007

O42 - Logiciel: Microsoft Office Proof (German) 2007

O42 - Logiciel: Microsoft Office Proof (English) 2007

O42 - Logiciel: Microsoft Office Proof (French) 2007

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007

O42 - Logiciel: Microsoft Office Proofing (French) 2007

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007

O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1)

O42 - Logiciel: CDRWIN 5

O42 - Logiciel: SplashID

O42 - Logiciel: Windows Defender

O42 - Logiciel: Windows Defender Signatures

O42 - Logiciel: Ulead DVD PictureShow 2 Trial

O42 - Logiciel: MSXML 4.0 SP2 (KB925672)

O42 - Logiciel: Adobe Reader 9.1 - Français

O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1

O42 - Logiciel: EPSON Copy Utility

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe Systems Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Ahead

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Apple

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Bcgsoft

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\BOONTY Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Borland Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Cisco Systems

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\element5 Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\LogiShrd

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Logitech

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\muvee Technologies

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Nikon

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\PACE Anti-Piracy

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Python

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Skype

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Ulead Systems

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Webroot Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Wise Installation Wizard

---\\ Derniers fichiers modifiés ou crées sous System32 (O44)

O44 - LFC:Last File Created - C:\WINDOWS\System32\admparse.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll.mui -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\amcompat.tlb -->11/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-0000000B-00001102-00000004-00401102}.rfx -->13/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-0000000B-00001102-00000004-00401102}.rfx -->13/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\corpol.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ezsidmv.dat -->08/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->15/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakeng.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieaksie.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieakui.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dat -->06/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iedkcs32.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll.mui -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iepeers.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iernonce.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iesetup.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieui.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieuinit.inf -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\imgutil.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\inetcpl.cpl -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\inseng.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\jscript.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\licmgr10.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->25/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedssync.exe -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshta.exe -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.tlb -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmler.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\msls31.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\msrating.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mstime.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\nscompat.tlb -->11/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\occache.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->29/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->29/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->29/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->29/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->29/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pngfilt.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\tdc.ocx -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\vbscript.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->09/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\WinFXDocObj.exe -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->08/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->12/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\fwdrv.err -->30/01/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\lvuvc.hs -->08/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbam.sys -->11/02/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->11/02/2009

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-32E4AFCD.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-1A61B617.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-14139C8F.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE_UPDATER.EXE-07B31C62.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ATI2EVXX.EXE-07A42849.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVCENTER.EXE-05983540.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVGNT.EXE-08C8F6E1.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-1A41E508.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-21D2C1ED.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BACKUPBUDDY.EXE-1C0CA632.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CCLEANER.EXE-09CFC2BC.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CCSETUP218.EXE-14FF3CF2.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CLONECDTRAY.EXE-25FF090B.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CNMSM3Q.EXE-25C2FB69.pf -->05/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COCIMANAGER.EXE-1E454E23.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMMAND.EXE-11140AF9.pf -->29/03/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMMUNICATIONS_HELPER.EXE-081C76F0.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CONTROL.EXE-24FBF8B3.pf -->03/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CSRSS.EXE-22452D1B.pf -->29/03/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CTFMON.EXE-05E57A5E.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DEFRAG.EXE-2858C7E2.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-38C3807C.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DISPLAYRTF.EXE-04F5B507.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ELBYCHECK.EXE-190010DC.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EMULE.EXE-01299854.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXPLORER.EXE-02121B1A.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXPLORER.EXE-25097108.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXTEXPORT.EXE-1EED3F01.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIREFOX.EXE-06188867.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HARMOTAB.EXE-2227BF37.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPER.EXE-0324EC74.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-1C192440.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-0FDAF2E1.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IDEAS.EXE-1C0C3BF4.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IDRIVER.EXE-26D928F4.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IDRIVERT.EXE-3A46FEE3.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-2D97EBE6.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-201490BB.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IRSETUP.EXE-00C3B713.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVA.EXE-32FD225F.pf -->03/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVAW.EXE-392A4E93.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-359F83C5.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JRE-6U13-WINDOWS-I586-P-IFTW.-1FA8BA4C.pf -->03/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUCHECK.EXE-1E35CB2F.pf -->03/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JUSCHED.EXE-04A13915.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\KPF4GUI.EXE-3B74775B.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGITECHUPDATE.EXE-19035BD4.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-24ADF392.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-312BE1BF.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LULNCHR.EXE-1E3FF27E.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVCOMSX.EXE-02D614F6.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LVPRCSRV.EXE-0371ED38.pf -->29/03/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MBAM.EXE-0D37CDF0.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPAS-D.EXE-17905AE2.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPCMDRUN.EXE-177DBF1A.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPC_FR.EXE-3A1386D9.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPSIGSTUB.EXE-1BB6DD6A.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPSIGSTUB.EXE-1E076697.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-330626DC.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIMN.EXE-183B59AF.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSMSGS.EXE-0620E8B3.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNMSGR.EXE-3744B6D8.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NEROCHECK.EXE-30941580.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NKFILEUPLOADER.EXE-22BCF6CA.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NKMC.EXE-13F500A8.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NKMONITOR.EXE-13087D9B.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NO$GBA.EXE-396A4DF7.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-2F2D61E1.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTVDM.EXE-0A81AB7B.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OFFLB.EXE-21E94D32.pf -->05/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PG2.EXE-281B562D.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PIANOBLUES_SF.EXE-091105BD.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PICASAPHOTOVIEWER.EXE-19823186.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PICASAUPDATER.EXE-16104B82.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\POWERPNT.EXE-2F92D967.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREUPD.EXE-16574861.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PSDRVCHECK.EXE-2ABC771E.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\QUICKCAM10.EXE-278834C4.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\READER_SL.EXE-2D713FFC.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSETVALUE.EXE-2E909846.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RSTRUI.EXE-05C31B56.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3C6C3DAD.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4532DDE6.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-453420C4.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-52E82B3E.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5560CAC5.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5C54481E.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F325011.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-67E7CDE4.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\S-VIEWNX-130WF-EURFR.EXE-2496E5C0.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SANDBOXIEDCOMLAUNCH.EXE-33708E74.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SANDBOXIERPCSS.EXE-1BBC8C28.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SBIECTRL.EXE-0C1DFFD8.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-07746417.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-0FCBAD11.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-11045E11.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-28D54BB1.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-295A2E2B.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP1.EXE-367A3761.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SNDVOL32.EXE-0EC6FD20.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPLASHID DESKTOP.EXE-31CF87B7.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ST6UNST.EXE-26CC7DB2.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\START.EXE-0EA2D7A3.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TASKMGR.EXE-06144C13.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TEAMVIEWER.EXE-29DFA4F3.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-380C6CAC.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATER.EXE-08DC3AE3.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USDOWNLOADER.EXE-2245AED0.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USERINIT.EXE-0743FDA9.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USNSVC.EXE-0114DAF6.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VIEWNX INSTALLER.EXE-24A843AD.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VIEWNX.EXE-20BC0F81.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WGATRAY.EXE-350D4455.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINLOGON.EXE-0957F9B2.pf -->29/03/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRAR.EXE-0AA31BB9.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWORD.EXE-15ED065E.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINZIP32.EXE-2F3C90C9.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-1ACCF80B.pf -->12/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSCNTFY.EXE-0B14C27D.pf -->31/03/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WZQKPICK.EXE-0FB748E8.pf -->13/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\W_V19400_BY_LARGO.EXE-0A1561EF.pf -->11/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZATTOO-3.3.3BETA.EXE-29F90CE1.pf -->04/04/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHP2.EXE-26FA4F4E.pf -->13/04/2009

---\\ ShellExecuteHooks, Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

O46 - SEH:ShellExecuteHooks - CShellExecuteHookImpl Object - {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Program Files\AVG Anti-Spyware 7.5\shellexecutehook.dll

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export - "C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"

O47 - AAKE:Key Export - "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Disabled:eMule"

O47 - AAKE:Key Export - "C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe:*:Enabled:Sunbelt Kerio Firewall GUI"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"

O47 - AAKE:Key Export - "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

O47 - AAKE:Key Export - "C:\Program Files\Piolet\Piolet.exe"="C:\Program Files\Piolet\Piolet.exe:*:Enabled:Piolet"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

O47 - AAKE:Key Export - "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"

O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

---\\ Déni du service Local Security Authority (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys

---\\ Image File Execution Options (IEFO) (O50)

O50 - IEFO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ Recherche d'infection de Base de Registres (O71)

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{43d9e6f0-1776-4897-ae14-ecedecbafec0}]

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{5a074b29-f830-49de-a31b-5bb9d7f6b407}]

O71 - BDRI:[hklm\software\microsoft\internet explorer\extension compatibility\{5a074b21-f830-49de-a31b-5bb9d7f6b407}]

O71 - BDRI:[hkcu\software\microsoft\windows\currentversion\run]:msmsgs

O71 - BDRI:[hkcu\software\microsoft\windows\currentversion\run]:ctfmon.exe - C:\WINDOWS\system32\ctfmon.exe

Falkra · le 13 avril 2009

Bonsoir,

poste un rapport HijackThis dans ta prochaine réponse stp.

Clique sur ce lien pour télécharger HijackThis 2.0.2 :

http://www.trendsecure.com/portal/en-US/_d.../HiJackThis.exe

Cette version est sans installateur ou Zip à décompresser, choisis de l'enregistrer sur le bureau.

Double-clique sur l'icône HijackThis :

HijackThis démarre, c'est le premier bouton qui nous intéresse "Do a system scan and save a logfile" (le fichier "log" est le rapport).

Clique dessus.

Copie-colle le contenu du rapport qui va s'afficher dans le Bloc-notes dans ta prochaine réponse.

pldta · le 14 avril 2009

Le voila :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:48:16, on 14/04/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

C:\Program Files\PixVue\bin\Daemon.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe

C:\Program Files\Sandboxie\SbieSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\MsPMSPSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe

C:\Program Files\WinZip\WZQKPICK.EXE

C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Pascal Admin\Bureau\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)