rapport zhp

[gsjm80]

bonsoir à tous,

je viens d'utiliser zhp 2.33.7 et j'ai utilisé zhpdiag et en ligne 044 il me trouve une bêbêtte que je n'arrive pas à virer.

Zeb Help Process v2.33.7 by Nicolas Coolman - Rapport Général du 17/06/2009 20:40:46

 

Rapport de ZHPDiag v1.16.6 par Nicolas Coolman

Enregistré le 17/06/2009 20:39:37

Platform : Microsoft Windows XP (5.1.2600) Service Pack 3

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox (3.0.10)

 

---\\ Processus lancés

C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe

C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe

C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe

C:\Program Files\Piratrax\piratrax_launch.exe

C:\Program Files\FreeNote\freenote.exe

C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\ati2sgag.exe

C:\WINDOWS\System32\svchost.exe

C:\PROGRA~1\VCOM\Fix-It\mxtask.exe

C:\WINDOWS\system32\services.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\PSIService.exe

C:\Program Files\Spyware Terminator\sp_rsser.exe

C:\Program Files\Fichiers communs\Acronis\Fomatik\TrueImageTryStartService.exe

C:\WINDOWS\System32\TUProgSt.exe

C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

 

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr./

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cooxer.com/

 

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local

 

---\\ Redirection du fichier Hosts (O1)

O1 - Hosts:

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: IEToolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll

 

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [startupDelayer] "C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe"

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"

O4 - HKLM\..\Run: [spywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"

O4 - HKCU\..\Run: [subliminal Master] "C:\Program Files\Subliminal Master\smTray.exe" /s

O4 - HKCU\..\Run: [Piratrax] C:\Program Files\Piratrax\piratrax_launch.exe

O4 - HKCU\..\Run: [FreeNote] C:\Program Files\FreeNote\freenote.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1"

O4 - HKLM\..\policies\Explorer: [LinkResolveIgnoreLinkInfo] Data="0"

O4 - HKLM\..\policies\Explorer: [NoResolveSearch] Data="1"

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} () - http://downloads.ewido.net/ewidoOnlineScan.cab

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} () - http://www.extrafilm.fr/ImageUploader5.cab

O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} () - http://ax.emsisoft.com/asquared.cab

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\msgrapp.14.0.8064.0206.dll

 

---\\ Valeur de registre AppInit_DLLs et sous-clés Winlogon Notify (O20)

O20 - Winlogon Notify: AtiStartupEvent - C:\WINDOWS\System32\Ati2evxx.dll

O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll

O20 - AppInit_DLLs:MsgPlusLoader.dll

 

---\\ Services NT non Microsoft et non désactivés (O23)

O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe

O23 - Service: (Ati HotKey Poller) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart (ATI Smart) - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Boostez votre PC Task Manager (Boostez votre PC Task Manager) - C:\PROGRA~1\VCOM\Fix-It\mxtask.exe -Service

O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe" /service

O23 - Service: ProtexisLicensing (ProtexisLicensing) - C:\WINDOWS\system32\PSIService.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - C:\Program Files\Spyware Terminator\sp_rsser.exe

O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - C:\Program Files\Fichiers communs\Acronis\Fomatik\TrueImageTryStartService.exe

O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - C:\WINDOWS\System32\TUProgSt.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service

O23 - Service: Windows Defender (WinDefend) - C:\Program Files\Windows Defender\MsMpEng.exe

O23 - Service: BitDefender Communicator (XCOMM) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe" /service

 

---\\ Enumération des composants Active Desktop (O24)

O24 - Desktop Component 0: Ma page d'accueil - file:About:Home

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\desktop.ini

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Maintenance en 1 clic.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Scan.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SA.DAT

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SCHEDLGU.TXT

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{F077D6A7-7142-4609-8B64-90C01784B573}.job

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE

O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll

O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)

O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {44C6F74F-F647-C5B2-2B80-0E9B22CA80F1} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)

O40 - ASIC: .NET Framework - {72AD53CC-CCC0-3757-8480-9EE176866A7C} - (not file)

O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: Outlook Express - {A245B25D-9527-E49F-7175-66FFE10C2F72} - (not file)

O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)

O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)

O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

O40 - ASIC: .NET Framework - {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - (not file)

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (no object) (a347bus) - C:\WINDOWS\system32\DRIVERS\a347bus.sys

O41 - Driver: (no object) (a347scsi) - C:\WINDOWS\System32\Drivers\a347scsi.sys

O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys

O41 - Driver: AIDA32Driver (AIDA32Driver) - C:\Program Files\AIDA32 - Personal System Information\aida32.sys

O41 - Driver: AMD Processor Driver (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys

O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) - C:\WINDOWS\system32\DRIVERS\AmdPPM.sys

O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys

O41 - Driver: (no object) (ati2mtag) - C:\WINDOWS\system32\DRIVERS\ati2mtag.sys

O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys

O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys

O41 - Driver: BDSelfPr (BDSelfPr) - C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys

O41 - Driver: Pilote de bloc de demande Bluetooth (BthEnum) - C:\WINDOWS\system32\DRIVERS\BthEnum.sys

O41 - Driver: Pilote de communications modem Bluetooth (BTHMODEM) - C:\WINDOWS\system32\DRIVERS\bthmodem.sys

O41 - Driver: Périphérique Bluetooth (réseau personnel) (BthPan) - C:\WINDOWS\system32\DRIVERS\bthpan.sys

O41 - Driver: Pilote de port Bluetooth (BTHPORT) - C:\WINDOWS\System32\Drivers\BTHport.sys

O41 - Driver: Pilote USB radio Bluetooth (BTHUSB) - C:\WINDOWS\System32\Drivers\BTHUSB.sys

O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys

O41 - Driver: (no object) (dmio) - C:\WINDOWS\System32\drivers\dmio.sys

O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys

O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys

O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys

O41 - Driver: VIA Rhine-Family Fast-Ethernet Adapter Driver Service (FET5X86V) - C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys

O41 - Driver: Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet (FETNDIS) - C:\WINDOWS\system32\DRIVERS\fetnd5.sys

O41 - Driver: VIA Rhine Family Fast Ethernet Adapter Driver Service (FETNDISB) - C:\WINDOWS\system32\DRIVERS\fetnd5b.sys

O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys

O41 - Driver: Filtre AGP version 3.0 générique Microsoft pour plates-formes à base de processeur K8 (gagp30kx) - C:\WINDOWS\system32\DRIVERS\gagp30kx.sys

O41 - Driver: GMSIPCI (GMSIPCI) - D:\INSTALL\GMSIPCI.SYS

O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys

O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys

O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (no object) (Imagedrv) - C:\WINDOWS\system32\DRIVERS\imagedrv.sys

O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys

O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys

O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys

O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys

O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys

O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys

O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys

O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys

O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys

O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys

O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys

O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys

O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS\ndistapi.sys

O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS\ndisuio.sys

O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS\ndiswan.sys

O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERS\raspptp.sys

O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys

O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys

O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys

O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERS\raspppoe.sys

O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERS\raspti.sys

O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: Périphérique Bluetooth (TDI protocole RFCOMM) (RFCOMM) - C:\WINDOWS\system32\DRIVERS\rfcomm.sys

O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys

O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys

O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys

O41 - Driver: Acronis Snapshots Manager (Build 380) (snapman380) - C:\WINDOWS\system32\DRIVERS\snman380.sys

O41 - Driver: USB2.0 PC Camera (SNP2STD) (SNP2STD) - C:\WINDOWS\system32\DRIVERS\snp2sxp.sys

O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys

O41 - Driver: (no object) (sptd) - C:\WINDOWS\System32\Drivers\sptd.sys

O41 - Driver: Spyware Terminator Driver 2 (sp_rsdrv2) - C:\WINDOWS\system32\drivers\sp_rsdrv2.sys

O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys

O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys

O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys

O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys

O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys

O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys

O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: Acronis Try&Decide and Restore Points filter (build 147) (tdrpman147) - C:\WINDOWS\system32\DRIVERS\tdrpm147.sys

O41 - Driver: Acronis True Image FS Filter (tifsfilter) - C:\WINDOWS\system32\DRIVERS\tifsfilt.sys

O41 - Driver: Acronis True Image Backup Archive Explorer (timounter) - C:\WINDOWS\system32\DRIVERS\timntr.sys

O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys

O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys

O41 - Driver: Pilote de concentrateur standard USB Microsoft (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys

O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

O41 - Driver: Pilote miniport de contrôleur hôte universel USB Microsoft (usbuhci) - C:\WINDOWS\system32\DRIVERS\usbuhci.sys

O41 - Driver: (no object) (viamraid) - C:\WINDOWS\system32\DRIVERS\viamraid.sys

O41 - Driver: Vinyl AC'97 Audio Controller (WDM) (VIAudio) - C:\WINDOWS\system32\drivers\vinyl97.sys

O41 - Driver: (no object) (videX32) - C:\WINDOWS\system32\DRIVERS\videX32.sys

O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys

O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys

O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\DRIVERS\fltMgr.sys

O41 - Driver: GMSIPCI (GMSIPCI) - E:\INSTALL\GMSIPCI.SYS

O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

O41 - Driver: MSICPL (MSICPL) - E:\install4\MSICPL.sys

O41 - Driver: NTACCESS (NTACCESS) - E:\NTACCESS.sys

O41 - Driver: SetupNTGLM7X (SetupNTGLM7X) - E:\NTGLM7X.sys

O41 - Driver: Acronis Try&Decide and Restore Points filter (tdrpman) - C:\WINDOWS\system32\DRIVERS\tdrpman.sys

O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys

O41 - Driver: Seagate DiscWizard FS Filter (tifsfilter) - C:\WINDOWS\system32\DRIVERS\tifsfilt.sys

O41 - Driver: Seagate DiscWizard Image Backup Archive Explorer (timounter) - C:\WINDOWS\system32\DRIVERS\timntr.sys

O41 - Driver: Trufos (Trufos) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Adobe AIR

O42 - Logiciel: Adobe Flash Player 10 ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin

O42 - Logiciel: Adobe Photoshop CS3

O42 - Logiciel: Adobe ExtendScript Toolkit 2

O42 - Logiciel: Advanced SystemCare 3

O42 - Logiciel: ATI - Software Uninstall Utility

O42 - Logiciel: ATI Display Driver

O42 - Logiciel: CCleaner (remove only)

O42 - Logiciel: Cessna 185 Skywagon

O42 - Logiciel: Eraser

O42 - Logiciel: FindyKill

O42 - Logiciel: Microsoft Flight Simulator 2004 Un siècle d'aviation

O42 - Logiciel: Fokker-100 Littoral Airlines

O42 - Logiciel: Free Hide Folder

O42 - Logiciel: FreeNote v1.263

O42 - Logiciel: HijackThis 2.0.2

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs

O42 - Logiciel: Windows Internet Explorer 8

O42 - Logiciel: VIA Platform Device Manager

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)

O42 - Logiciel: Les Chevaliers de Baphomet - Le Manuscrit de Voynich

O42 - Logiciel: LFRC 2007

O42 - Logiciel: LMSOFT Web Creator Pro 4

O42 - Logiciel: Malwarebytes' Anti-Malware

O42 - Logiciel: Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft Visual C++ 2008 Express - Français

O42 - Logiciel: Mio Technology SpeedCam Tool

O42 - Logiciel: Mozilla Firefox (3.0.10)

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP

O42 - Logiciel: Supprimer cible dans le clic droit

O42 - Logiciel: Navilog1 3.7.7

O42 - Logiciel: Nero 6

O42 - Logiciel: Microsoft National Language Support Downlevel APIs

O42 - Logiciel: OpenAL

O42 - Logiciel: PhotoFiltre

O42 - Logiciel: PowerISO

O42 - Logiciel: Microsoft PowerPoint Viewer 97

O42 - Logiciel: RealPlayer

O42 - Logiciel: SeaMonkey (1.1.16)

O42 - Logiciel: SpamBayes 1.0.4

O42 - Logiciel: Spyware Terminator

O42 - Logiciel: Startup Delayer v2.5 (build 138)

O42 - Logiciel: Subliminal Master

O42 - Logiciel: Unlocker 1.8.7

O42 - Logiciel: Virtual Magnifying Glass

O42 - Logiciel: VIA Rhine-Family Fast-Ethernet Adapter

O42 - Logiciel: Windows Live OneCare safety scanner

O42 - Logiciel: Windows Media Format 11 runtime

O42 - Logiciel: Lecteur Windows Media 11

O42 - Logiciel: Windows XP Service Pack 3

O42 - Logiciel: Installation Windows Live

O42 - Logiciel: Windows Media Player 11

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0

O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0

O42 - Logiciel: ZebHelpProcess 2.33.7

O42 - Logiciel: Zeb-Utility 1.2

O42 - Logiciel: Adobe Help Viewer CS3

O42 - Logiciel: ATI Catalyst Control Center

O42 - Logiciel: Windows Live Messenger

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32

O42 - Logiciel: Adobe Bridge Start Meeting

O42 - Logiciel: Adobe Color NA Extra Settings CS4

O42 - Logiciel: Safari

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Adobe Color JA Extra Settings CS4

O42 - Logiciel: Adobe Color EU Recommended Settings CS4

O42 - Logiciel: Microsoft Visual C++ 2008 Express Edition - FRA

O42 - Logiciel: AdobeColorCommonSetRGB

O42 - Logiciel: Adobe WinSoft Linguistics Plugin

O42 - Logiciel: Outil de téléchargement Windows Live

O42 - Logiciel: MSVCRT

O42 - Logiciel: Java 6 Update 13

O42 - Logiciel: Lost Via Domus

O42 - Logiciel: Adobe Stock Photos CS3

O42 - Logiciel: J2SE Runtime Environment 5.0 Update 18

O42 - Logiciel: Java 6 Update 7

O42 - Logiciel: J2SE Development Kit 5.0 Update 18

O42 - Logiciel: PDF Settings CS4

O42 - Logiciel: Acronis True Image Home

O42 - Logiciel: Windows Live Communications Platform

O42 - Logiciel: Adobe Color - Photoshop Specific CS4

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Mio Transfer

O42 - Logiciel: Junk Mail filter update

O42 - Logiciel: Adobe Linguistics CS3

O42 - Logiciel: TuneUp Utilities 2009

O42 - Logiciel: Windows Live Mail

O42 - Logiciel: Corel Paint Shop Pro Photo X2

O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)

O42 - Logiciel: OpenOffice.org 3.0

O42 - Logiciel: Windows Presentation Foundation Language Pack (FRA)

O42 - Logiciel: Apple Software Update

O42 - Logiciel: Adobe Asset Services CS3

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Conceptronic Lounge'n'LOOK Series WebCam

O42 - Logiciel: Adobe XMP Panels CS3

O42 - Logiciel: Adobe Type Support CS4

O42 - Logiciel: Windows Live Call

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

O42 - Logiciel: MSXML 4.0 SP2 (KB954430)

O42 - Logiciel: Microsoft Silverlight

O42 - Logiciel: Adobe Device Central CS3

O42 - Logiciel: Choice Guard

O42 - Logiciel: Adobe Anchor Service CS3

O42 - Logiciel: Adobe Setup

O42 - Logiciel: Adobe CMaps CS4

O42 - Logiciel: AGEIA PhysX v7.11.13

O42 - Logiciel: IZArc 3.81

O42 - Logiciel: SeaTools for Windows

O42 - Logiciel: Adobe Bridge CS3

O42 - Logiciel: Windows Defender

O42 - Logiciel: Segoe UI

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework

O42 - Logiciel: Adobe Reader 8.1.5 - Français

O42 - Logiciel: Adobe Camera Raw 4.0

O42 - Logiciel: Windows Presentation Foundation

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2

O42 - Logiciel: Adobe Default Language CS4

O42 - Logiciel: BitDefender Antivirus 2008

O42 - Logiciel: PC Inspector smart recovery

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

O42 - Logiciel: Adobe Version Cue CS3 Client

O42 - Logiciel: Assistant de connexion Windows Live

O42 - Logiciel: ISO Recorder

O42 - Logiciel: MioMap v3 Updater for Mio C320 C520

O42 - Logiciel: Microsoft .NET Framework 3.0 French Language Pack

O42 - Logiciel: Adobe Update Manager CS3

O42 - Logiciel:

O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729)

O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01

O42 - Logiciel: EasyCleaner

O42 - Logiciel: Jasc Paint Shop Pro 9

O42 - Logiciel: Adobe PDF Library Files CS4

O42 - Logiciel: Catalyst Control Center - Branding

O42 - Logiciel: Adobe Fonts All

O42 - Logiciel: MSXML 6.0 Parser (KB925673)

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

 

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Acronis

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe AIR

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Ahead

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\BitDefender

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Borland Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Corel

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Fichiers communs

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Jasc Software Inc

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Macrovision Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Merge Modules

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Oberon Media

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\snp2std

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\WindowsLiveInstaller

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Wise Installation Wizard

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\xing shared

 

---\\ Derniers fichiers modifiés ou crées sous System32 (O44)

O44 - LFC:Last File Created - C:\WINDOWS\System32\810429tv4-test.jun -->30/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\alleg42.dll -->18/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\amcompat.tlb -->30/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ativvaxx.cap -->17/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\bcdadac7_x.xml -->25/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\bdod.bin -->17/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\Clean1st.log -->30/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\clrviddc.dll -->09/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\deploytk.dll -->06/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\edacded0_x.dat -->25/04/2009 ------------------------c mon problème

O44 - LFC:Last File Created - C:\WINDOWS\System32\F63F190564.sys -->24/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->11/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iedkcs32.dll -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\inetcpl.cpl -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\java.exe -->06/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\javacpl.cpl -->06/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\javaw.exe -->06/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\javaws.exe -->06/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\jupdate-1.5.0_18-b02.log -->09/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\kernel32.dll -->21/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\KGyGaAvL.sys -->23/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\libgsl.dll -->18/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\libgslcblas.dll -->18/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mlfcache.dat -->17/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->13/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\nscompat.tlb -->30/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\OpenAL32.dll -->11/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->16/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc040.dat -->16/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->16/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh040.dat -->16/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->09/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.TMP -->16/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pgdfgsvc.exe -->30/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pncrt.dll -->28/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pndx5016.dll -->28/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pndx5032.dll -->28/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\pthreadGC2.dll -->18/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\rmoc3260.dll -->28/03/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\rpcrt4.dll -->15/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\TuneUpDefragService.exe -->10/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\TUProgSt.exe -->10/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->30/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\uxtuneup.dll -->27/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->13/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wnaspi32.dll -->09/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->17/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\wrap_oal.dll -->11/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\aspi32.sys -->09/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\hitmanpro35.sys -->14/06/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbam.sys -->26/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->26/05/2009

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\sp_rsdrv2.sys -->14/06/2009

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-356875A2.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-24548733.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AU_.EXE-27209E07.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-205D880D.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JEAN-MARC.EXE-00652D5E.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MPCMDRUN.EXE-1F9D1CA1.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNMSGR.EXE-030AB647.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ONECLICKSTARTER.EXE-31B195B2.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PACKMAN.EXE-07397B64.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REG.EXE-0D2A95F7.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-478066E2.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAFARI.EXE-238FF382.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAFARISETUP.EXE-0FCACB73.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SB_TRAY.EXE-13D12631.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SECCENTER.EXE-154C5B5D.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUPADMIN.EXE-0C2D924C.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SMFM.MXE-07CBF571.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1415D1B8.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SUBLMSTR.EXE-2DE452A2.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UISCAN.EXE-374FAC9C.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPGREPL.EXE-24BD643C.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WLCOMM.EXE-04AE9009.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WLMAIL.EXE-16F261CF.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WORDPAD.EXE-02314C89.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf -->17/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL_2.33.12.1.EXE-035CC084.pf -->16/06/2009

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-315EB50B.pf -->16/06/2009

 

---\\ ShellExecuteHooks, Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

O46 - SEH:ShellExecuteHooks - Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\PROGRA~1\Windows Defender\MpShHook.dll

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

O47 - AAKE:Key Export - "D:\eMule\emule.exe"="D:\eMule\emule.exe:*:Enabled:eMule"

O47 - AAKE:Key Export - "C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe"="C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe:*:Enabled:Microsoft Flight Simulator"

O47 - AAKE:Key Export - "C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"

O47 - AAKE:Key Export - "C:\Program Files\IVAO\IvAp\ivapnetint.exe"="C:\Program Files\IVAO\IvAp\ivapnetint.exe:*:Enabled:ivapnetint"

O47 - AAKE:Key Export - "C:\Program Files\Ubisoft\Lost Via Domus\Yeti_Final_Win32.exe"="C:\Program Files\Ubisoft\Lost Via Domus\Yeti_Final_Win32.exe:*:Enabled:Lost Via Domus Game"

O47 - AAKE:Key Export - "C:\Program Files\Ubisoft\Lost Via Domus\gu.exe"="C:\Program Files\Ubisoft\Lost Via Domus\gu.exe:*:Enabled:Lost Via Domus Updater"

O47 - AAKE:Key Export - "C:\Program Files\Ubisoft\Lost Via Domus\detection\Launcher.exe"="C:\Program Files\Ubisoft\Lost Via Domus\detection\Launcher.exe:*:Enabled:Lost Via Domus Requirements Tool"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

O47 - AAKE:Key Export - "C:\Documents and Settings\jean-marc\Bureau\utorrent23.exe"="C:\Documents and Settings\jean-marc\Bureau\utorrent23.exe:*:Enabled:µTorrent"

O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

O47 - AAKE:Key Export - "C:\Program Files\SpamBayes\bin\sb_tray.exe"="C:\Program Files\SpamBayes\bin\sb_tray.exe:*:Enabled:sb_tray"

O47 - AAKE:Key Export - "C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

 

---\\ Déni du service Local Security Authority (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\hitmanpro35.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\hitmanpro35.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys

 

---\\ Image File Execution Options (IEFO) (O50)

O50 - IEFO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

---\\ Recherche d'infection de Base de Registres (O71)

O71 - BDRI:[hkcu\software\microsoft\windows\currentversion\run]:ctfmon.exe - C:\WINDOWS\system32\ctfmon.exe

 

 

Lignes traitées 462/503