Virus et rapport ZHPDiag

[nicoferra]

Bonjour Zeb Help Processus

 

m'indique plusieurs problèmes :

 

C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

O23 - Service: XAMPP Service (XAMPP) - C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.reg -->13/07/2009 - 11:24:04

O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.txt -->13/07/2009 - 11:24:04

 

 

Or je n'ai pas de répertoire

C:\Documents and Settings\NF\Bureau\xam

 

 

Ca sent donc le paté

 

Voici mon ZHPDIAG

 

merci

 

 

Rapport de ZHPDiag v1.21 par Nicolas Coolman

Enregistré le 13/07/2009 13:23:57

Platform : Microsoft Windows XP (5.1.2600) Service Pack 3

MSIE: Internet Explorer v7.0.5730.13

MFIE: Mozilla Firefox (3.0.11)

 

---\\ Processus lancés

C:\Program Files\Spamihilator\spamihilator.exe

C:\xampplite\apache\bin\apache.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\ati2sgag.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

C:\Program Files\Winilab\azurCfrService.exe

C:\PVSW\Bin\WGE_SRV.exe

C:\WINDOWS\system32\services.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\mqsvc.exe

C:\WINDOWS\System32\mqtgsvc.exe

c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

C:/xampplite/mysql/bin/mysqld-nt.exe

C:\WINDOWS\system32\lsass.exe

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\System32\tcpsvcs.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\spoolsv.exe

c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

C:\Program Files\Switch Off\swoff.exe

C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

 

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home

 

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll

O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\Ipswitch\WS_FTP Pro\wsbho2k0.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: ALToolBar BHO - {7F1A79F9-78D1-4186-9F60-EE0B63DF042A} - C:\Program Files\ESTsoft\ALToolBar\ALToolBand_114_25.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: ALToolBar - {38FBE93D-4CA1-4414-AF6A-94920C5BD8DA} - C:\Program Files\ESTsoft\ALToolBar\ALToolBand_114_25.dll

 

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe"

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

O4 - HKCU\..\Run: [switch Off] C:\Program Files\Switch Off\swoff.exe

O4 - HKLM\..\policies\Explorer: [NoWelcomeScreen] Data="1"

O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data="1"

O4 - HKLM\..\policies\Explorer: [NoDriveAutoRun] Data="67108863"

O4 - HKLM\..\policies\Explorer: [NoDriveTypeAutoRun] Data="323"

O4 - HKLM\..\policies\Explorer: [NoDrives] Data="0"

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: ALToolBar &Search - res://C:\Program Files\ESTsoft\ALToolBar\ALToolBandRes.dll/23/SEARCH.HTML

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll,101

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/e/4.../OGAControl.cab

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.4.1.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1210939207203

O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/Tran...ransferCtrl.cab

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab

O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll

O20 - Winlogon Notify: WLEventStart - C:\WINDOWS\system32\klogon.dll

O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Apache2.2 (Apache2.2) - C:\xampplite\apache\bin\apache.exe" -k runservice

O23 - Service: (Ati HotKey Poller) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart (ATI Smart) - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Kaspersky Anti-Virus (avp) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe -r

O23 - Service: (azurCfrService) - C:\Program Files\Winilab\azurCfrService.exe

O23 - Service: EBP Pervasive.SQL (EBP Pervasive.SQL) - C:\PVSW\Bin\WGE_SRV.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf

O23 - Service: Message Queuing (MSMQ) - C:\WINDOWS\System32\mqsvc.exe

O23 - Service: Message Queuing Triggers (MSMQTriggers) - C:\WINDOWS\System32\mqtgsvc.exe

O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS

O23 - Service: MySql (MySql) - C:/xampplite/mysql/bin/mysqld-nt.exe

O23 - Service: NMSAccessU (NMSAccessU) - C:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: Services TCP/IP simplifiés (SimpTcp) - C:\WINDOWS\System32\tcpsvcs.exe

O23 - Service: Service SNMP (SNMP) - C:\WINDOWS\System32\snmp.exe

O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe

O23 - Service: SQL Server Browser (SQLBrowser) - c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

O23 - Service: Switch Off (Switch Off) - C:\Program Files\Switch Off\swoff.exe -service

O23 - Service: XAMPP Service (XAMPP) - C:\Documents and Settings\NF\Bureau\xam\xampplite\service.exe

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE

O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE

O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Adobe Shockwave Director 11.0 - {233C1507-6A77-46A4-9443-F871F945D258} - C:\WINDOWS\system32\Adobe\Director\SwDir.dll

O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)

O40 - ASIC: Adobe Shockwave Director 11.0 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll

O40 - ASIC: Browser Customizations - {323D2C37-674F-CF17-11D6-AFBB362DD265} - (not file)

O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)

O40 - ASIC: .NET Framework - {3F7924B9-D148-3141-87B1-68F36043A940} - (not file)

O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)

O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.7 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file)

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: .NET Framework - {72AD53CC-CCC0-3757-8480-9EE176866A7C} - (not file)

O40 - ASIC: Web Folders - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file)

O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

O40 - ASIC: Lecteur Windows Media - {7F800EED-25D4-E3DB-A6F7-CC5360992CAC} - (not file)

O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file)

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)

O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)

O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\FlDbg9f.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys

O41 - Driver: Environnement de prise en charge de réseau AFD (AFD) - C:\WINDOWS\System32\drivers\afd.sys

O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys

O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys

O41 - Driver: (no object) (ati2mtag) - C:\WINDOWS\system32\DRIVERS\ati2mtag.sys

O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\System32\DRIVERS\atmarpc.sys

O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\System32\DRIVERS\audstub.sys

O41 - Driver: Broadcom 440x 10/100 Integrated Controller XP Driver (bcm4sbxp) - C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys

O41 - Driver: (no object) (cswupad20) - C:\WINDOWS\system32\drivers\cswupad2.sys

O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys

O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys

O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys

O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys

O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys

O41 - Driver: USB Serial Converter Driver (FTDIBUS) - C:\WINDOWS\system32\drivers\ftdibus.sys

O41 - Driver: USB Serial Port Driver (FTSER2K) - C:\WINDOWS\system32\drivers\ftser2k.sys

O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\System32\DRIVERS\msgpc.sys

O41 - Driver: Pilote de bus Microsoft UAA pour High Definition Audio (HDAudBus) - C:\WINDOWS\System32\DRIVERS\HDAudBus.sys

O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\System32\DRIVERS\hidusb.sys

O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys

O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\System32\DRIVERS\ipinip.sys

O41 - Driver: Traducteur d'adresses réseau IP (IpNat) - C:\WINDOWS\System32\DRIVERS\ipnat.sys

O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\System32\DRIVERS\ipsec.sys

O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\System32\DRIVERS\irenum.sys

O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys

O41 - Driver: Kl1 (kl1) - C:\WINDOWS\system32\drivers\kl1.sys

O41 - Driver: Kaspersky Lab Boot Guard Driver (klbg) - C:\WINDOWS\system32\drivers\klbg.sys

O41 - Driver: Kaspersky Lab Driver (klif) - C:\WINDOWS\system32\DRIVERS\klif.sys

O41 - Driver: Kaspersky Anti-Virus NDIS Filter (klim5) - C:\WINDOWS\system32\DRIVERS\klim5.sys

O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys

O41 - Driver: Machnm32 Driver (Machnm32) - C:\WINDOWS\System32\Machnm32.sys

O41 - Driver: Motorola USB CDC ACM Driver (motmodem) - C:\WINDOWS\system32\DRIVERS\motmodem.sys

O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\System32\DRIVERS\mouhid.sys

O41 - Driver: Message Queuing access control (MQAC) - C:\WINDOWS\System32\drivers\mqac.sys

O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\System32\DRIVERS\mrxdav.sys

O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys

O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys

O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys

O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys

O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\System32\DRIVERS\mssmbios.sys

O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\System32\DRIVERS\ndistapi.sys

O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\System32\DRIVERS\ndisuio.sys

O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\System32\DRIVERS\ndiswan.sys

O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\System32\DRIVERS\netbios.sys

O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\System32\DRIVERS\netbt.sys

O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys

O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys

O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\System32\DRIVERS\raspptp.sys

O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\System32\DRIVERS\processr.sys

O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\System32\DRIVERS\psched.sys

O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\System32\DRIVERS\ptilink.sys

O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys

O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\System32\DRIVERS\rasl2tp.sys

O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\System32\DRIVERS\raspppoe.sys

O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\System32\DRIVERS\raspti.sys

O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\System32\DRIVERS\rdbss.sys

O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\System32\DRIVERS\rdpdr.sys

O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\System32\DRIVERS\redbook.sys

O41 - Driver: Reliable Multicast Protocol driver (RMCAST) - C:\WINDOWS\System32\drivers\RMCast.sys

O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\System32\DRIVERS\secdrv.sys

O41 - Driver: Serenum Filter Driver (Serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys

O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys

O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\System32\DRIVERS\sr.sys

O41 - Driver: Srv (Srv) - C:\WINDOWS\System32\DRIVERS\srv.sys

O41 - Driver: SAMSUNG Mobile USB Device 1.0 driver (WDM) (ss_bus) - C:\WINDOWS\system32\DRIVERS\ss_bus.sys

O41 - Driver: SAMSUNG Mobile USB Modem 1.0 Filter (ss_mdfl) - C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys

O41 - Driver: SAMSUNG Mobile USB Modem 1.0 Drivers (ss_mdm) - C:\WINDOWS\system32\DRIVERS\ss_mdm.sys

O41 - Driver: SigmaTel High Definition Audio CODEC (STHDA) - C:\WINDOWS\system32\drivers\sthda.sys

O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\System32\DRIVERS\swenum.sys

O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys

O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys

O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\System32\DRIVERS\tcpip.sys

O41 - Driver: ULYS USB Acquisition device driver (UPAD) - C:\WINDOWS\System32\Drivers\CSWUPAD.sys

O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\System32\DRIVERS\update.sys

O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\System32\DRIVERS\usbccgp.sys

O41 - Driver: Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft (usbehci) - C:\WINDOWS\System32\DRIVERS\usbehci.sys

O41 - Driver: Pilote de concentrateur standard USB Microsoft (usbhub) - C:\WINDOWS\System32\DRIVERS\usbhub.sys

O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\System32\DRIVERS\usbohci.sys

O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys

O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys

O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS

O41 - Driver: Virtual Machine Monitor (vmm) - C:\WINDOWS\system32\Drivers\vmm.sys

O41 - Driver: Virtual Machine Network Services Driver (VPCNetS2) - C:\WINDOWS\system32\DRIVERS\VMNetSrv.sys

O41 - Driver: Performance Tools Driver 9.0 (VSPerfDrv90) - C:\Program Files\Microsoft Visual Studio 9.0\Team Tools\Performance Tools\VSPerfDrv90.sys

O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\System32\DRIVERS\wanarp.sys

O41 - Driver: Wdf01000 (Wdf01000) - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys

O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) - C:\WINDOWS\System32\drivers\ws2ifsl.sys

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys

O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ALSong

O42 - Logiciel: ALToolbar

O42 - Logiciel: ALTools Update

O42 - Logiciel: ALZip

O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel

O42 - Logiciel: ATI Catalyst Control Center

O42 - Logiciel: ATI Display Driver

O42 - Logiciel: Access to MySQL 4.3 Demo

O42 - Logiciel: Active Ports

O42 - Logiciel: Adobe AIR

O42 - Logiciel: Adobe Anchor Service CS4

O42 - Logiciel: Adobe Bridge CS4

O42 - Logiciel: Adobe CMaps CS4

O42 - Logiciel: Adobe CSI CS4

O42 - Logiciel: Adobe Default Language CS4

O42 - Logiciel: Adobe Device Central CS4

O42 - Logiciel: Adobe Dreamweaver CS4

O42 - Logiciel: Adobe Extension Manager CS4

O42 - Logiciel: Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player Plugin

O42 - Logiciel: Adobe Flex Builder 3

O42 - Logiciel: Adobe Illustrator CS2

O42 - Logiciel: Adobe Output Module

O42 - Logiciel: Adobe Photoshop 7.0

O42 - Logiciel: Adobe Reader 9.1.2 - Français

O42 - Logiciel: Adobe Service Manager Extension

O42 - Logiciel: Adobe Setup

O42 - Logiciel: Adobe Shockwave Player 11

O42 - Logiciel: Adobe Type Support CS4

O42 - Logiciel: Adobe Update Manager CS4

O42 - Logiciel: Adobe XMP Panels CS4

O42 - Logiciel: Athlon 64 Processor Driver

O42 - Logiciel: Avanquest update

O42 - Logiciel: Axialis IconWorkshop 6.0

O42 - Logiciel: Broadcom 440x 10/100 Integrated Controller

O42 - Logiciel: CDBurnerXP

O42 - Logiciel: Chameleon Flash Pro edition 1.20

O42 - Logiciel: Connect

O42 - Logiciel: Diagram Designer

O42 - Logiciel: EBP Btrieve 8.6

O42 - Logiciel: EBP Comptabilité 12.0

O42 - Logiciel: EBP Gestion Commerciale 12.0

O42 - Logiciel: EBP Paye 12.0

O42 - Logiciel: FTDI USB Serial Converter Drivers

O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)

O42 - Logiciel: High Definition Audio Driver Package - KB835221

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

O42 - Logiciel: Hotfix for Office (KB950278)

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5)

O42 - Logiciel: IIS Diagnostics Toolkit January 2006 (x86)

O42 - Logiciel: ISV Settings Manager

O42 - Logiciel: InfoRapid Search & Replace

O42 - Logiciel: Instant PLUS

O42 - Logiciel: Ipswitch WS_FTP Pro

O42 - Logiciel: Java DB 10.3.1.4

O42 - Logiciel: Java 6 Update 11

O42 - Logiciel: Java 6 Update 6

O42 - Logiciel: Java 6 Update 7

O42 - Logiciel: Java SE Development Kit 6 Update 6

O42 - Logiciel: Kaspersky Anti-Virus 2009

O42 - Logiciel: KeyyoFax 1.0

O42 - Logiciel: Lecteur Windows Media 11

O42 - Logiciel: Lunascape5

O42 - Logiciel: MSXML 4.0 SP2 (KB936181)

O42 - Logiciel: MSXML 4.0 SP2 (KB954430)

O42 - Logiciel: MSXML 6 Service Pack 2 (KB954459)

O42 - Logiciel: Malwarebytes' Anti-Malware

O42 - Logiciel: Micro Application - 3D Architecte Pro 2008

O42 - Logiciel: Microsoft .NET Framework 1.1

O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366)

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft Bootvis

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP

O42 - Logiciel: Microsoft Device Emulator version 3.0 - FRA

O42 - Logiciel: Microsoft Document Explorer 2008

O42 - Logiciel: Microsoft Document Explorer 2008 Language Pack - FRA

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs

O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

O42 - Logiciel: Microsoft National Language Support Downlevel APIs

O42 - Logiciel: Microsoft Office Professional Edition 2003

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007

O42 - Logiciel: Microsoft Office Visual Web Developer 2007

O42 - Logiciel: Microsoft Office Visual Web Developer MUI (French) 2007

O42 - Logiciel: Microsoft SQL Server 2005

O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)

O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition

O42 - Logiciel: Microsoft SQL Server Compact 3.5 for Devices FRA

O42 - Logiciel: Microsoft SQL Server Database Publishing Wizard 1.3

O42 - Logiciel: Microsoft SQL Server Native Client

O42 - Logiciel: Microsoft SQL Server VSS Writer

O42 - Logiciel: Microsoft SQL Server Compact 3.5 SP1 - Français

O42 - Logiciel: Microsoft Silverlight

O42 - Logiciel: Microsoft Silverlight 2 SDK - Français

O42 - Logiciel: Microsoft Silverlight Tools for Visual Studio 2008 SP1 - FRA

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0

O42 - Logiciel: Microsoft Virtual PC 2007 SP1

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime

O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime Language Pack

O42 - Logiciel: Microsoft Visual Studio 2008 Performance Collection Tools - FRA

O42 - Logiciel: Microsoft Visual Studio Team System 2008 Development Edition - Français

O42 - Logiciel: Microsoft Visual Studio Team System 2008 Development Edition - Français Service Pack 1 (KB945140)

O42 - Logiciel: Microsoft Visual Studio Web Authoring Component

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - fra

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SP1 Tools

O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 SP1 Win32 Tools

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra

O42 - Logiciel: Module linguistique Microsoft Document Explorer 2008 - FRA

O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FRA

O42 - Logiciel: Module linguistique Visual Studio Tools pour Office System 3.0 Runtime - FRA Service Pack 1 (KB949258)

O42 - Logiciel: Mozilla Firefox (3.0.11)

O42 - Logiciel: MySQL Connector/ODBC 5.1

O42 - Logiciel: NVIDIA Drivers

O42 - Logiciel: Norton PartitionMagic 8.0

O42 - Logiciel: Notepad++

O42 - Logiciel: Osiris

O42 - Logiciel: Outils de conception SQL Server Compact 3.5 SP1 - Français

O42 - Logiciel: PDFCreator

O42 - Logiciel: PHPEdit 3.0.6

O42 - Logiciel: Package de pilotes Windows - DataApex Ltd. (cswint9) Chromatography (02/15/2007 5.0.3.3)

O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)

O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)

O42 - Logiciel: Photoshop Camera Raw

O42 - Logiciel: Pilotes Canon MP

O42 - Logiciel: PokerStars

O42 - Logiciel: Protection PLUS .NET

O42 - Logiciel: Protection PLUS 4.4 Enterprise Edition

O42 - Logiciel: RC-WinTrans 7 Professional

O42 - Logiciel: SAMSUNG Mobile Composite Device Software

O42 - Logiciel: SAMSUNG Mobile Modem Driver Set

O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software

O42 - Logiciel: SAMSUNG Mobile USB Modem Software

O42 - Logiciel: SWiSH Max2

O42 - Logiciel: SWiSH Studio2

O42 - Logiciel: Samsung Mobile phone USB driver Software

O42 - Logiciel: Samsung PC Studio 3

O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer

O42 - Logiciel: Sauvegarde des Dossiers personnels Microsoft Outlook

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB954326)

O42 - Logiciel: ShopFactory V7 Demo

O42 - Logiciel: SigmaTel Audio

O42 - Logiciel: Spamihilator

O42 - Logiciel: Suite Shared Configuration CS4

O42 - Logiciel: Switch Off

O42 - Logiciel: Trust SpamAssassin Headers 0.3

O42 - Logiciel: Ulys 2

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)

O42 - Logiciel: Update for Microsoft Visual Studio Web Authoring Component (KB945140)

O42 - Logiciel: Utilitaires LanBooster V2.5.3

O42 - Logiciel: Version d'évaluation d'Adobe InDesign 2.0

O42 - Logiciel: VideoLAN VLC media player 0.8.6f

O42 - Logiciel: Visual C++ 2008 IA64 Runtime - (v9.0.30729)

O42 - Logiciel: Visual C++ 2008 IA64 Runtime - v9.0.30729.01

O42 - Logiciel: Visual C++ 2008 x64 Runtime - (v9.0.30729)

O42 - Logiciel: Visual C++ 2008 x64 Runtime - v9.0.30729.01

O42 - Logiciel: Visual C++ CRT 9.0

O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime

O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime

O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)

O42 - Logiciel: WampServer 2.0

O42 - Logiciel: WinISO 5.3

O42 - Logiciel: WinZip

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474)

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130)

O42 - Logiciel: Windows Imaging Component

O42 - Logiciel: Windows Installer Clean Up

O42 - Logiciel: Windows Internet Explorer 7

O42 - Logiciel: Windows Media Format 11 runtime

O42 - Logiciel: Windows Media Player 11

O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Pocket PC

O42 - Logiciel: Windows Mobile 5.0 SDK R2 for Smartphone

O42 - Logiciel: Windows XP Service Pack 3

O42 - Logiciel: Winilab III

O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0

O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0

O42 - Logiciel: ZebHelpProcess 2.33.12

O42 - Logiciel: kuler

 

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe AIR

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe Systems Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Borland Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\CC100Topologic

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\EBP

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\iS3

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Macrovision Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Merge Modules

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Motorola Shared

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\PC SOFT

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\RC-WinTrans

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SWiSHzone.com

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Vbox

O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Wise Installation Wizard

 

---\\ Derniers fichiers modifiés ou crées sous System32 (O44)

O44 - LFC:Last File Created - C:\WINDOWS\System32\access.ctl -->05/06/2009 - 07:46:33

O44 - LFC:Last File Created - C:\WINDOWS\System32\advpack.dll -->29/04/2009 - 05:45:34

O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtmsft.dll -->29/04/2009 - 05:45:34

O44 - LFC:Last File Created - C:\WINDOWS\System32\dxtrans.dll -->29/04/2009 - 05:45:34

O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->11/06/2009 - 08:53:08

O44 - LFC:Last File Created - C:\WINDOWS\System32\html.iec -->28/04/2009 - 10:06:49

O44 - LFC:Last File Created - C:\WINDOWS\System32\icardie.dll -->29/04/2009 - 05:45:35

O44 - LFC:Last File Created - C:\WINDOWS\System32\ie4uinit.exe -->28/04/2009 - 10:06:24

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieapfltr.dll -->29/04/2009 - 05:45:35

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieencode.dll -->29/04/2009 - 05:45:36

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieframe.dll -->29/04/2009 - 05:45:38

O44 - LFC:Last File Created - C:\WINDOWS\System32\iertutil.dll -->29/04/2009 - 05:45:38

O44 - LFC:Last File Created - C:\WINDOWS\System32\ieudinit.exe -->28/04/2009 - 10:06:24

O44 - LFC:Last File Created - C:\WINDOWS\System32\jsproxy.dll -->29/04/2009 - 05:45:39

O44 - LFC:Last File Created - C:\WINDOWS\System32\localspl.dll -->07/05/2009 - 16:33:02

O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->01/06/2009 - 17:51:12

O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeeds.dll -->29/04/2009 - 05:45:40

O44 - LFC:Last File Created - C:\WINDOWS\System32\msfeedsbs.dll -->29/04/2009 - 05:45:40

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->29/04/2009 - 05:45:41

O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtmled.dll -->29/04/2009 - 05:45:42

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->11/06/2009 - 09:05:57

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->11/06/2009 - 09:05:57

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->11/06/2009 - 09:05:57

O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->11/06/2009 - 09:05:57

O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->11/06/2009 - 09:05:57

O44 - LFC:Last File Created - C:\WINDOWS\System32\pngfilt.dll -->29/04/2009 - 05:45:42

O44 - LFC:Last File Created - C:\WINDOWS\System32\rpcrt4.dll -->15/04/2009 - 15:53:29

O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.reg -->13/07/2009 - 11:24:04

O44 - LFC:Last File Created - C:\WINDOWS\System32\tmp.txt -->13/07/2009 - 11:24:04

O44 - LFC:Last File Created - C:\WINDOWS\System32\url.dll -->29/04/2009 - 05:45:43

O44 - LFC:Last File Created - C:\WINDOWS\System32\urlmon.dll -->29/04/2009 - 05:45:43

O44 - LFC:Last File Created - C:\WINDOWS\System32\webcheck.dll -->29/04/2009 - 05:45:43

O44 - LFC:Last File Created - C:\WINDOWS\System32\win32k.sys -->19/04/2009 - 20:50:30

O44 - LFC:Last File Created - C:\WINDOWS\System32\wininet.dll -->29/04/2009 - 05:45:44

O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->13/07/2009 - 12:06:47

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\klick.dat -->20/05/2009 - 15:31:07

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\klin.dat -->20/05/2009 - 15:31:07

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbam.sys -->17/06/2009 - 10:27:44

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->17/06/2009 - 10:27:56

O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\StarOpen.sys -->18/06/2009 - 11:15:11

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSFIX.EXE-32B75403.pf -->07/07/2009 - 09:42:22

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSFIXINSTALLER.EXE-16EE80F8.pf -->07/07/2009 - 08:12:19

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACCESSVIEWER.EXE-297CD185.pf -->07/07/2009 - 09:14:07

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-3A1F13AE.pf -->10/07/2009 - 07:28:08

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf -->13/07/2009 - 08:12:41

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADDALIAS.EXE-397F89DD.pf -->10/07/2009 - 13:07:15

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBELMSVC.EXE-004A961E.pf -->10/07/2009 - 08:55:01

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBELM_CLEANUP.0001-29037A35.pf -->10/07/2009 - 08:55:38

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ADOBE_UPDATER.EXE-32E1E9B7.pf -->10/07/2009 - 07:28:37

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALBNCOLLECTOR.EXE-3496DC3B.pf -->07/07/2009 - 09:11:27

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALUPDATE.EXE-398D663A.pf -->07/07/2009 - 09:11:29

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ALZIP.EXE-328886AF.pf -->07/07/2009 - 09:13:43

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\APPLNCH.EXE-00E4DDF1.pf -->13/07/2009 - 07:16:25

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AR-2.3.11116-DEMO.EXE-00D17F7A.pf -->07/07/2009 - 08:53:56

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AR.EXE-21B6D7BD.pf -->07/07/2009 - 08:54:34

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ARCON.EXE-1BB32FDD.pf -->07/07/2009 - 14:00:15

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ASTDEMARRAGE.EXE-3981E4C2.pf -->07/07/2009 - 14:00:47

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVP.EXE-0C478C0B.pf -->13/07/2009 - 12:23:20

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BACKAPPL.EXE-34EAB192.pf -->02/07/2009 - 16:44:38

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRIDGE.EXE-3000AD98.pf -->02/07/2009 - 15:24:20

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CDBXPP.EXE-090EB7B9.pf -->07/07/2009 - 07:51:17

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CIDAEMON.EXE-27AE97A4.pf -->10/07/2009 - 07:11:32

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->13/07/2009 - 12:18:07

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXECF-27E83661.pf -->13/07/2009 - 10:38:58

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMBOFIX.EXE-0DE2B838.pf -->13/07/2009 - 10:38:57

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\COMPTA.EXE-161CA122.pf -->06/07/2009 - 13:02:11

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CS4SERVICEMANAGER.EXE-09846F10.pf -->07/07/2009 - 07:48:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DCCPROC.EXE-3284D294.pf -->10/07/2009 - 12:46:19

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf -->10/07/2009 - 12:33:49

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf -->10/07/2009 - 12:33:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-1ECB6754.pf -->07/07/2009 - 19:00:16

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DLLHOST.EXE-442AE492.pf -->07/07/2009 - 19:00:16

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-3B8CA5B4.pf -->08/07/2009 - 08:50:56

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf -->13/07/2009 - 07:34:01

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->13/07/2009 - 07:16:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EDIT2D.EXE-1B08188A.pf -->07/07/2009 - 14:00:43

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXCEL.EXE-13B3F319.pf -->10/07/2009 - 11:19:54

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf -->13/07/2009 - 11:06:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf -->13/07/2009 - 11:32:28

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FLASHGOT.EXE-1DBE9A23.pf -->13/07/2009 - 11:32:28

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FNPLICENSINGSERVICE.EXE-057818D9.pf -->08/07/2009 - 08:51:40

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GESTION.EXE-398E1879.pf -->07/07/2009 - 10:46:06

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GRAPH.EXE-20E5C6D1.pf -->03/07/2009 - 10:12:28

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GREP.CFEXE-273BC5E1.pf -->13/07/2009 - 10:38:02

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GRPCONV.EXE-111CD845.pf -->13/07/2009 - 10:38:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GSAR.CFEXE-0E6FCB31.pf -->13/07/2009 - 10:38:54

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf -->10/07/2009 - 07:50:31

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HIDEC.EXE-3B166DB3.pf -->13/07/2009 - 10:37:55

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HTTPD.EXE-23B8DFE5.pf -->07/07/2009 - 12:20:35

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->13/07/2009 - 07:19:27

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ILLUSTRATOR.EXE-06A07E3D.pf -->10/07/2009 - 08:54:32

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAGEREADY.EXE-09057436.pf -->07/07/2009 - 08:49:08

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->13/07/2009 - 12:23:13

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INDESIGN.EXE-09E55CCA.pf -->09/07/2009 - 08:53:00

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IS-K907C.TMP-0A290677.pf -->07/07/2009 - 08:47:26

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf -->09/07/2009 - 09:31:39

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCOMP.EXE-227A6609.pf -->07/07/2009 - 09:10:05

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCOMP.EXE-399C85EC.pf -->06/07/2009 - 16:16:34

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JETCU40.EXE-20D91F21.pf -->07/07/2009 - 09:09:22

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf -->13/07/2009 - 11:32:30

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\KEYYOFAX.EXE-03EC4360.pf -->07/07/2009 - 07:49:02

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->10/07/2009 - 12:33:39

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf -->10/07/2009 - 12:28:21

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LUNA.EXE-397A456B.pf -->07/07/2009 - 07:49:06

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LUNAMIG.EXE-0C6E6640.pf -->07/07/2009 - 07:49:17

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MICROAPP.EXE-35EF8A2E.pf -->07/07/2009 - 14:00:17

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MINIREG.EXE-1232A49D.pf -->10/07/2009 - 13:07:09

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSACCESS.EXE-175F0AD1.pf -->07/07/2009 - 12:44:08

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSCONFIG.EXE-35E4DAE9.pf -->08/07/2009 - 07:43:52

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->13/07/2009 - 07:18:33

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MYSQLD.EXE-33995A2C.pf -->07/07/2009 - 12:20:36

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\N.PIF-1B75D06C.pf -->13/07/2009 - 10:37:54

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->13/07/2009 - 12:23:10

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTBACKUP.EXE-012B886C.pf -->07/07/2009 - 19:00:11

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->13/07/2009 - 12:07:49

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\OUTLOOK.EXE-106351DB.pf -->10/07/2009 - 09:55:11

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PDFCREATOR.EXE-09D304A3.pf -->09/07/2009 - 09:14:16

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PDFSPOOLER.EXE-30F28A9A.pf -->09/07/2009 - 09:14:10

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PEV.EXE-2937A365.pf -->13/07/2009 - 10:38:56

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PHOTOSHOP.EXE-0FCBABE3.pf -->07/07/2009 - 08:48:47

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PHP-WIN.EXE-37882195.pf -->07/07/2009 - 12:20:23

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PLANSELECTOR.EXE-14B4A08F.pf -->07/07/2009 - 14:00:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\POKERSTARS.EXE-1798CEA7.pf -->09/07/2009 - 07:45:22

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\POKERSTARSUPDATE.EXE-03EA29B1.pf -->09/07/2009 - 07:45:11

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PV.CFEXE-23E4A9A0.pf -->13/07/2009 - 10:38:27

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PV.EXE-06A2AC78.pf -->13/07/2009 - 10:38:56

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\READER_SL.EXE-2B4EA1CB.pf -->07/07/2009 - 07:49:02

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf -->13/07/2009 - 11:16:48

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSVR32.EXE-0B2C3062.pf -->07/07/2009 - 12:52:09

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RSMSINK.EXE-032F2BAB.pf -->07/07/2009 - 19:00:22

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-12E27DD0.pf -->09/07/2009 - 08:45:25

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-17B341D7.pf -->06/07/2009 - 16:33:39

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1EE676D0.pf -->13/07/2009 - 10:38:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf -->10/07/2009 - 11:50:42

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2CC11B9D.pf -->06/07/2009 - 16:33:49

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-399C632A.pf -->06/07/2009 - 13:49:05

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf -->13/07/2009 - 07:17:00

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->07/07/2009 - 07:57:19

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4B89C956.pf -->07/07/2009 - 08:48:47

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf -->13/07/2009 - 10:38:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAR.EXE-26C0F75A.pf -->07/07/2009 - 08:47:28

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SAR.EXE-2C288116.pf -->07/07/2009 - 09:41:03

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-181B766C.pf -->07/07/2009 - 12:51:50

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-19E082DA.pf -->13/07/2009 - 07:16:25

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SPAMIHILATOR.EXE-2BA8CF4C.pf -->13/07/2009 - 12:23:19

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWOFF.EXE-2BCEBE5C.pf -->13/07/2009 - 12:23:10

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWREG.EXE-0937BD77.pf -->13/07/2009 - 10:37:58

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINS000.EXE-384BDCB6.pf -->07/07/2009 - 12:50:36

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf -->13/07/2009 - 12:12:13

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->13/07/2009 - 12:23:03

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VIEWP.EXE-0A4ABABA.pf -->07/07/2009 - 14:00:47

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VSSVC.EXE-0F74375A.pf -->07/07/2009 - 19:00:15

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WAMPMANAGER.EXE-31EE2311.pf -->07/07/2009 - 12:20:31

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WGATRAY.EXE-0ED38BED.pf -->13/07/2009 - 08:05:10

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINPAYE.EXE-1FEE1B7A.pf -->30/06/2009 - 07:47:00

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf -->09/07/2009 - 08:55:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf -->13/07/2009 - 12:21:02

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA3.pf -->09/07/2009 - 11:06:48

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSFTPGUI.EXE-0804DC63.pf -->08/07/2009 - 09:07:30

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->13/07/2009 - 12:20:52

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf -->13/07/2009 - 12:23:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf -->13/07/2009 - 11:30:10

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0D21E283.pf -->10/07/2009 - 12:58:11

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-267ED701.pf -->10/07/2009 - 13:04:38

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-37C810A1.pf -->10/07/2009 - 13:04:37

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.EXE-04BF2D0C.pf -->13/07/2009 - 11:06:57

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.TMP-25AED22E.pf -->10/07/2009 - 13:07:49

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ZHPL 2.33.12.1.TMP-32A92982.pf -->10/07/2009 - 13:07:03

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IS215.EXE-085421C6.pf -->07/07/2009 - 12:51:59

O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\_IU14D2N.TMP-382E75D8.pf -->07/07/2009 - 12:50:37

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

 

---\\ Export de clé d'application autorisée (ECAA)(O47)

O47 - AAKE:Key Export - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "C:\PVSW\Bin\w3dbsmgr.exe"="C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager"

O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\dccproc.exe"="C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:dccproc"

O47 - AAKE:Key Export - "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Disabled:DNA"

O47 - AAKE:Key Export - "C:\SWKey\PLUS\LFEdit.exe"="C:\SWKey\PLUS\LFEdit.exe:*:Enabled:Protection PLUS"

O47 - AAKE:Key Export - "C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"

O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

O47 - AAKE:Key Export - "C:\Program Files\Maxtor\Maxtor Quick Start\mssManager.exe"="C:\Program Files\Maxtor\Maxtor Quick Start\mssManager.exe:*:Enabled:mssManager"

O47 - AAKE:Key Export - "C:\PVSW\Bin\w3dbsmgr.exe"="C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager"

O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"

O47 - AAKE:Key Export - "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

O47 - AAKE:Key Export - "C:\Program Files\Java\jre1.6.0_06\bin\java.exe"="C:\Program Files\Java\jre1.6.0_06\bin\java.exe:*:Enabled:Java Platform SE binary"

O47 - AAKE:Key Export - "C:\Program Files\Java\jdk1.6.0_06\bin\java.exe"="C:\Program Files\Java\jdk1.6.0_06\bin\java.exe:*:Enabled:Java Platform SE binary"

O47 - AAKE:Key Export - "C:\Program Files\Java\jdk1.6.0_06\jre\bin\java.exe"="C:\Program Files\Java\jdk1.6.0_06\jre\bin\java.exe:*:Enabled:Java Platform SE binary"

O47 - AAKE:Key Export - "C:\Program Files\Ipswitch\WS_FTP Pro\wsftpgui.exe"="C:\Program Files\Ipswitch\WS_FTP Pro\wsftpgui.exe:*:Enabled:WS_FTP Pro Application"

O47 - AAKE:Key Export - "C:\Program Files\Adobe\Flex Builder 3\jre\bin\javaw.exe"="C:\Program Files\Adobe\Flex Builder 3\jre\bin\javaw.exe:*:Enabled:Java 2 Platform Standard Edition binary"

O47 - AAKE:Key Export - "C:\xampplite\mysql\bin\mysqld.exe"="C:\xampplite\mysql\bin\mysqld.exe:*:Enabled:mysqld"

O47 - AAKE:Key Export - "C:\SWKey\Instant PLUS\InstantPLUS.exe"="C:\SWKey\Instant PLUS\InstantPLUS.exe:*:Enabled:Instant PLUS"

O47 - AAKE:Key Export - "C:\SWKey\PLUS\LFEdit.exe"="C:\SWKey\PLUS\LFEdit.exe:*:Enabled:Protection PLUS"

O47 - AAKE:Key Export - "C:\SWKey\PLUS.exe"="C:\SWKey\PLUS.exe:*:Enabled:Protection PLUS"

O47 - AAKE:Key Export - "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"

O47 - AAKE:Key Export - "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

O47 - AAKE:Key Export - "C:\Program Files\Utilitaires LanBooster\SyslogRd.exe"="C:\Program Files\Utilitaires LanBooster\SyslogRd.exe:*:Enabled:Syslog Monitor"

O47 - AAKE:Key Export - "C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console"

O47 - AAKE:Key Export - "C:\Program Files\National Instruments\DataSocket\cwdss.exe"="C:\Program Files\National Instruments\DataSocket\cwdss.exe:*:Enabled:National Instruments DataSocket Server"

O47 - AAKE:Key Export - "C:\Documents and Settings\NF\Bureau\pdt-all-in-one-win32-1.0.3\eclipse\eclipse.exe"="C:\Documents and Settings\NF\Bureau\pdt-all-in-one-win32-1.0.3\eclipse\eclipse.exe:*:Enabled:eclipse"

O47 - AAKE:Key Export - "C:\xampplite\apache\bin\apache.exe"="C:\xampplite\apache\bin\apache.exe:*:Enabled:Apache HTTP Server"

O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\cdcc.exe"="C:\Program Files\Spamihilator\cdcc.exe:*:Enabled:Spamihilator DCC Filter Configuration"

O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\dccproc.exe"="C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:Spamihilator DCC Filter"

O47 - AAKE:Key Export - "C:\Program Files\Spamihilator\spamihilator.exe"="C:\Program Files\Spamihilator\spamihilator.exe:*:Enabled:Spamihilator"

O47 - AAKE:Key Export - "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"

O47 - AAKE:Key Export - "C:\Program Files\EasyPHP\mysql\bin\mysqld.exe"="C:\Program Files\EasyPHP\mysql\bin\mysqld.exe:*:Enabled:mysqld"

O47 - AAKE:Key Export - "C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"

O47 - AAKE:Key Export - "C:\Program Files\WaterProof\PHPEdit\3.0.6\PHPEdit.exe"="C:\Program Files\WaterProof\PHPEdit\3.0.6\PHPEdit.exe:*:Enabled:PHPEdit"

O47 - AAKE:Key Export - "C:\Program Files\Osiris\Osiris.exe"="C:\Program Files\Osiris\Osiris.exe:*:Enabled:Osiris"

O47 - AAKE:Key Export - "C:\Program Files\Maxtor\ManagerApp\MaxUtilities.exe"="C:\Program Files\Maxtor\ManagerApp\MaxUtilities.exe:*:Enabled:Maxtor EasyManage™"

O47 - AAKE:Key Export - "C:\Program Files\Osiris\OsirisFR.exe"="C:\Program Files\Osiris\OsirisFR.exe:*:Enabled:Osiris"

 

---\\ Déni du service (Local Security Authority) (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

---\\ Trojan Driver Search Data (TDSD) (O52)

O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"

O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm"

O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.I420"="msh263.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm"

O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm"

O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.xvid"="xvidvfw.dll"

 

---\\ Microsoft Control Security Providers (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

 

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

 

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoWelcomeScreen"=1

O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDrives"=0

 

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AmdK8.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ati2mtag.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bcm4sbxp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\CSWUPAD.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cswupad2.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmusic.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdibus.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftser2k.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdhid.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kl1.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klbg.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klif.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\klim5.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbam.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbamswissarmy.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\motmodem.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mqac.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mskssrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspclock.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mspqm.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwrdr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\PQNTDRV.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\SiLib.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\snapman.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_bus.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_cm.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_cmnt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_mdfl.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_mdm.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_wh.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ss_whnt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\StarOpen.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sthda.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tifsfilt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\timntr.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbccgp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbprint.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbser.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbstor.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\VMM.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\VMNetSrv.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys

O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys

 

 

End of the scan: 1012 lines

[pear]

Bonjour,

 

Télécharger sur le bureauOTM by OldTimer .

Double-clic sur OTM.exe pour le lancer.

Sous Vista,Clic droit sur le fichier ->Choisir Exécuter en tant qu' Administrateur

Vérifier que Unregister Dll's and Ocx's soit coché.

* Copiez /Collez les lignes ci dessous):

 

:Processes

explorer.exe

:Files

c:\documents and settings\nf\bureau\xam\xampplite\service.exe

 

:Services

XAMPP

 

:Reg

:Commands

[purity]

[emptytemp]

[start explorer]

[Reboot]

 

Revenez dans OTM,

Clic droit sur la fenêtre "Paste Instructions for Items to be Moved" sous la barre jaune et choisir Coller(Paste).

* Click le bouton rouge Moveit!

* Fermez OTM

Votre Pc va redémarrer.

Rendez vous dans le dossier C:\_OTM\MovedFiles ,

ouvrez le dernier fichier .log

Copiez/collez en le contenu dans votre prochaine réponse

 

 

 

Télécharger FindyKill sur le bureau

Veuillez noter que ce logiciel est régulièrement mis à jour et que la version que vous allez charger sera obsolète dans quelques jours.

Si, donc, vous avez une version antérieure, désinstallez la.

Connecter tous les disques amovibles (disque dur externe, clé USB…).

Lancer l'installation avec les Paramètres par défaut

Exécuter en tant qu'administrateur

Fermez ou désactivez tous les programmes Antivirus, Antispyware, Pare-feu actifs car ils pourraient perturber le fonctionnement de cet outil

Si vous utilisez Spybot

Désactiver TeaTimer qui ne set à rien et peut faire échouer une désinfection:!

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Cela est absolument nécessaire au succès de la procédure.

Bien évidemment, vous les rétablirez ensuite.

 

Double cliquer sur le raccourci FindyKill sur le bureau

Tapez : F et touche [Entrée] pour avoir le programme en français

Au menu principal,choisir l'option 1 (Recherche)

le rapport C:\FindyKill.txt sera généré.

 

Ensuite le Nettoyage

 

Double cliquer sur le raccourci FindyKill sur le bureau

Au menu principal,choisir l'option 2 (Suppression)

 

il y aura 2 redémarrages du PC

avec Suppression des fichiers découverts et des clés de régistre infectées

Restauration du Mode sans échec et de certaines valeurs du régistre

Réparation de l'affichage des fichiers cachés

Relance des services

 

Laissez travailler l'outil jusqu'à l'apparition du message "Nettoyage effectué !"

Lisez attentivement le rapport C:\FindyKill.txt qui vous indiquera les logiciels à réparer

Ensuite postez le .

Vaccination des lecteurs amovibles

Pour vous éviter une infection ultérieure:

Lancer l' Option (vaccination)

 

Prévention:

Désactiver l'autorun sur tous les lecteur (USB, CD, DVD, SATA, Firewire, etc.

Pour cela:

Copier/coller ,dans le bloc notes,ce qui suit ,(en vert)sans ligne blanche au début.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion­\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:000000ff

Enregistrez sur le bureau sous regis.reg.

Attention;c'est regis.reg et non regis.txt ou regis.reg.txt

Cliquez droit sur le fichier ->fusionner

Acceptez la modification du Régistre:

Pour Désinstaller

Double clic sur le raccourci UsbFix sur le bureau

Lancer l' option 5 ( Désinstaller ) ....

[nicoferra]

Voici les différents rapports :

 

All processes killed

========== PROCESSES ==========

No active process named explorer.exe was found!

========== FILES ==========

File/Folder c:\documents and settings\nf\bureau\xam\xampplite\service.exe not found.

========== SERVICES/DRIVERS ==========

 

Service\Driver XAMPP deleted successfully.

========== REGISTRY ==========

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: Administrateur

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->FireFox cache emptied: 11799220 bytes

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

 

User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

 

User: NF

->Temp folder emptied: 1264505 bytes

->Temporary Internet Files folder emptied: 6465482 bytes

->Java cache emptied: 12255440 bytes

->FireFox cache emptied: 75711815 bytes

->Google Chrome cache emptied: 6855190 bytes

 

User: NF.SARDOU

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->FireFox cache emptied: 4785261 bytes

 

User: NF.SARDOU.000

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

C:\NV20802168.TMP folder deleted successfully.

C:\NV2188928.TMP folder deleted successfully.

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 1139202 bytes

%systemroot%\System32 .tmp files removed: 2949170 bytes

Windows Temp folder emptied: 1794032099 bytes

RecycleBin emptied: 0 bytes

 

Total Files Cleaned = 1828,50 mb

 

 

OTM by OldTimer - Version 3.0.0.5 log created on 07152009_075652

 

Files moved on Reboot...

 

Registry entries deleted on Reboot...

 

 

 

 

 

 

 

 

 

 

 

############################## | FindyKill V6.006 |

 

# User : NF (Administrateurs) # SARDOU

# Update on 14/07/09 by Chiquitine29 & C_XX

# Start at: 08:08:33 | 15/07/2009

# Website : http://pagesperso-orange.fr/NosTools/index.html

 

# AMD Athlon 64 X2 Dual Core Processor 4400+

# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3

# Internet Explorer 7.0.5730.13

# Windows Firewall Status : Enabled

# AV : Kaspersky Anti-Virus 8.0.0.454 [ (!) Disabled | Updated ]

 

# C:\ # Disque fixe local # 99,64 Go (52,18 Go free) # NTFS

# D:\ # Disque fixe local # 58,59 Go (53,93 Go free) [EURADIF] # NTFS

# E:\ # Disque fixe local # 58,59 Go (32,62 Go free) [DATALYS] # NTFS

# F:\ # Disque fixe local # 81,26 Go (13,63 Go free) [sAUVEGARDE] # NTFS

# G:\ # Connexion réseau # 149 Go (27,27 Go free) [COMMUN] # NTFS

# H:\ # Connexion réseau # 149 Go (51,27 Go free) [COMMDEV] # NTFS

# Z:\ # Disque CD-ROM

 

############################## | Processus actifs |

 

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Winilab\azurCfrService.exe

C:\PVSW\Bin\WGE_SRV.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\msdtc.exe

c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

C:\PVSW\BIN\W3dbsmgr.EXE

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\System32\tcpsvcs.exe

C:\WINDOWS\System32\snmp.exe

c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\mqsvc.exe

C:\WINDOWS\System32\mqtgsvc.exe

C:\WINDOWS\System32\inetsrv\inetinfo.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

 

################## | Registre Startup |

 

R1 - HKCU\..\Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"

R1 - HKCU\..\Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

R1 - HKCU\..\Main: "Start Page"="http://www.google.fr/"

F2 - HKLM\..\logon:"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

F2 - HKLM\..\logon:"DefaultUserName"="NF"

F2 - HKLM\..\logon:"AltDefaultUserName"="NF"

F2 - HKLM\..\logon:"LegalNoticeCaption"=""

F2 - HKLM\..\logon:"LegalNoticeText"=""

04 - HKLM\..\Run: Spamihilator="C:\Program Files\Spamihilator\spamihilator.exe"

04 - HKLM\..\Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

04 - HKLM\..\Run: Ad-Watch=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

04 - HKLM\..\Run: SpybotSnD="C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"

04 - HKLM\..\Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=

04 - HKCU\..\Run: Switch Off#C:\Program Files\Switch Off\swoff.exe#

 

################## | Fichiers # Dossiers infectieux |

 

 

################## | C:\Documents and Settings\NF\Temporary Internet Files |

 

 

################## | All Drives ... |

 

 

################## | Registre # Clés Run infectieuses |

 

 

################## | Registre # Mountpoints2 |

 

 

################## | Etat / Services / Informations |

 

# Affichage des fichiers cachés : OK

# Mode sans echec : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )

# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )

# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )

# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )

# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )

# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

 

 

################## | Cracks / Keygens / Serials |

 

 

################## | ! Fin du rapport # FindyKill V6.006 ! |

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

############################## | FindyKill V6.006 |

 

# User : NF (Administrateurs) # SARDOU

# Update on 14/07/09 by Chiquitine29 & C_XX

# Start at: 08:15:37 | 15/07/2009

# Website : http://pagesperso-orange.fr/NosTools/index.html

 

# AMD Athlon 64 X2 Dual Core Processor 4400+

# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3

# Internet Explorer 7.0.5730.13

# Windows Firewall Status : Enabled

# AV : Kaspersky Anti-Virus 8.0.0.454 [ (!) Disabled | Updated ]

 

# C:\ # Disque fixe local # 99,64 Go (52,11 Go free) # NTFS

# D:\ # Disque fixe local # 58,59 Go (53,93 Go free) [EURADIF] # NTFS

# E:\ # Disque fixe local # 58,59 Go (32,62 Go free) [DATALYS] # NTFS

# F:\ # Disque fixe local # 81,26 Go (13,63 Go free) [sAUVEGARDE] # NTFS

# G:\ # Connexion réseau # 149 Go (27,27 Go free) [COMMUN] # NTFS

# H:\ # Connexion réseau # 149 Go (51,27 Go free) [COMMDEV] # NTFS

# Z:\ # Disque CD-ROM

 

############################## | Processus actifs |

 

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

C:\Program Files\Winilab\azurCfrService.exe

C:\PVSW\Bin\WGE_SRV.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\msdtc.exe

c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

C:\PVSW\BIN\W3dbsmgr.EXE

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\System32\tcpsvcs.exe

C:\WINDOWS\System32\snmp.exe

c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Switch Off\swoff.exe

C:\WINDOWS\System32\mqsvc.exe

C:\WINDOWS\System32\mqtgsvc.exe

C:\WINDOWS\System32\inetsrv\inetinfo.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\wbem\unsecapp.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\userinit.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

 

################## | Fichiers # Dossiers infectieux |

 

 

################## | C:\Documents and Settings\NF\Temporary Internet Files |

 

 

################## | All Drives ... |

 

################## | Autres ... |

 

 

################## | Registre # Clés Run infectieuses |

 

 

################## | Registre # Mountpoints2 |

 

 

################## | Listing des fichiers présent |

 

[15/07/2009 08:14|--a------|1340] - C:\aaw7boot.log

[21/01/2009 16:25|--a------|381247916] - C:\ADBEDRWVCS4_LS4.7z

[21/01/2009 15:49|--a------|1228304] - C:\ADBEDRWVCS4_LS4.exe

[16/05/2008 12:30|--a------|0] - C:\AUTOEXEC.BAT

[07/07/2009 08:50|--a------|224] - C:\Boot.bak

[13/07/2009 16:59|-rahs----|294] - C:\boot.ini

[24/04/2003 21:00|-rahs----|4952] - C:\Bootfont.bin

[03/08/2004 23:00|--a------|263488] - C:\cmldr

[18/06/2009 11:31|--a------|74] - C:\CMLoader.log

[13/07/2009 12:01|--a------|16190] - C:\ComboFix.txt

[16/05/2008 12:30|--a------|0] - C:\CONFIG.SYS

[07/11/2007 08:00|--a------|17734] - C:\eula.1028.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.1031.txt

[07/11/2007 08:00|--a------|10134] - C:\eula.1033.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.1036.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.1040.txt

[07/11/2007 08:00|--a------|118] - C:\eula.1041.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.1042.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.2052.txt

[07/11/2007 08:00|--a------|17734] - C:\eula.3082.txt

[15/07/2009 12:33|--a------|3845] - C:\FindyKill.txt

[07/11/2007 08:00|--a------|1110] - C:\globdata.ini

[07/11/2007 08:00|--a------|843] - C:\install.ini

[07/11/2007 08:03|--a------|76304] - C:\install.res.1028.dll

[07/11/2007 08:03|--a------|96272] - C:\install.res.1031.dll

[07/11/2007 08:03|--a------|91152] - C:\install.res.1033.dll

[07/11/2007 08:03|--a------|97296] - C:\install.res.1036.dll

[07/11/2007 08:03|--a------|95248] - C:\install.res.1040.dll

[07/11/2007 08:03|--a------|81424] - C:\install.res.1041.dll

[07/11/2007 08:03|--a------|79888] - C:\install.res.1042.dll

[07/11/2007 08:03|--a------|75792] - C:\install.res.2052.dll

[07/11/2007 08:03|--a------|96272] - C:\install.res.3082.dll

[16/05/2008 12:30|-rahs----|0] - C:\IO.SYS

[16/05/2008 12:30|-rahs----|0] - C:\MSDOS.SYS

[16/05/2008 13:48|-rahs----|47564] - C:\NTDETECT.COM

[26/01/2009 14:47|-rahs----|252240] - C:\ntldr

[?|?|?] - C:\pagefile.sys

[13/07/2009 17:35|--a------|13030] - C:\PDOXUSRS.NET

[13/07/2009 12:25|--a------|2433] - C:\rapport.txt

[13/07/2009 12:36|--a------|1529241] - C:\SDFix.exe

[02/12/2008 15:38|--ahs----|3072] - C:\Thumbs.db

[28/09/2001 18:00|---------|164864] - C:\UNWISE.EXE

[07/11/2007 08:00|--a------|5686] - C:\vcredist.bmp

[07/11/2007 08:09|--a------|1442522] - C:\VC_RED.cab

[07/11/2007 08:12|--a------|232960] - C:\VC_RED.MSI

[03/07/2008 16:13|--a------|3566162432] - C:\XPProperWiniF Hard Disk.vhd

[04/07/2008 17:14|--a------|3073211392] - C:\XPPropre Hard Disk.vhd

[03/11/2008 12:25|--a------|12894] - C:\XPPropre.vmc

[25/09/2008 10:12|--a------|12968] - C:\XPPropreWiniFR.vmc

[04/07/2008 11:26|--a------|3073211392] - C:\XPWinilab46 Hard Disk.vhd

[04/07/2008 11:26|--a------|13478] - C:\XPWinilab46.vmc

[19/07/2007 10:15|---------|77] - D:\Desktop.ini

[25/09/2006 09:35|---------|26238] - D:\Euradif-RIB.pdf

[14/03/2008 14:27|---------|3777] - D:\menudyn1.js

[22/05/2007 15:38|---------|502] - E:\ActivationFile.htm

[19/07/2007 10:15|---------|77] - E:\Desktop.ini

[23/08/2007 15:55|---------|129] - G:\Raccourci vers Lecteur CD.lnk

 

################## | Vaccination |

 

# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

# D:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

# F:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

# H:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

 

################## | Etat / Services / Informations |

 

# Mode sans echec : OK

 

 

# Affichage des fichiers cachés : OK

 

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )

# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )

# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )

# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )

# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )

# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

 

################## | PEH ... |

 

 

################## | Cracks / Keygens / Serials |

 

 

################## | ! Fin du rapport # FindyKill V6.006 ! |