Virus Win32:Neredr [Drp]

Greg -
jfkpresident Messages postés 13877 Statut Contributeur sécurité - 2 oct. 2009 à 12:30

Bonjour,
je suis infecté du virus Win32:Neredr [Drp]
Dès que je lance le scan avast voici ce qu'il m'écrit dans les actions:
Il explique qu'une erreur est survenue lors du déplacement vers la zone de quarantaine et que l'opération n'est pas supportée pour ce type d'archive.
Je vous avoue que j'y comprend pas grand chose.
Si une bonne âme pouvait m'aider.
Merci d'avance

Configuration: Windows XP
Firefox 3.0.14

Afficher la suite

24 réponses

Résumé de la discussion

Une infection Win32:Neredr [Drp] est signalée, Avast signalant une erreur lors du déplacement vers la quarantaine pour une archive et la discussion porte sur les explications et les solutions envisageables. Des conseils convergent vers Malwarebytes' Anti-Malware (MBAM) avec une procédure d'installation, mise à jour et analyse complète, puis la suppression des malwares et la sauvegarde d'un rapport. D'autres solutions incluent l'analyse des journaux système et des fichiers récents pour identifier les traces de l'infection et les failles potentielles, afin d'évaluer rapidement les vecteurs d'infection. Certaines entrées détaillent l’emplacement des rapports et des outils dans le profil utilisateur, soulignant l’importance de sauvegarder les données et d’effectuer des analyses hors ligne ou en mode sécurité.

Réponse 1 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Bonsoir ;

1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

https://www.malwarebytes.com/

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

13) Poste le rapport dans ta réponse
1
1. Greg
  
  Salut,
  merci de ta réponse
  J'ai fait deux diag qui donnent deux réponses différentes
  Je comprends pas pourquoi ils sont différents?
  Voici le premier diagnostic datant du 22 sept:
  
  Malwarebytes' Anti-Malware 1.41
  Version de la base de données: 2838
  Windows 5.1.2600 Service Pack 2
  
  22/09/2009 00:09:09
  mbam-log-2009-09-22 (00-09-09).txt
  
  Type de recherche: Examen complet (C:\|F:\|G:\|H:\|I:\|)
  Eléments examinés: 187183
  Temps écoulé: 59 minute(s), 49 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 1
  Clé(s) du Registre infectée(s): 2
  Valeur(s) du Registre infectée(s): 2
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 1
  Fichier(s) infecté(s): 4
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  C:\WINDOWS\system32\reset5c.dll (Trojan.Agent) -> Delete on reboot.
  
  Clé(s) du Registre infectée(s):
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b2c7b2a1-00f3-42bd-f434-00aaba2c8952} (Trojan.Ertfor) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\reset5c (Trojan.Agent) -> Quarantined and deleted successfully.
  
  Valeur(s) du Registre infectée(s):
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\WINID (Malware.Trace) -> Quarantined and deleted successfully.
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  C:\Program Files\Manson (Trojan.Agent) -> Quarantined and deleted successfully.
  
  Fichier(s) infecté(s):
  C:\Documents and Settings\Utilisateur\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
  C:\Documents and Settings\Utilisateur\Application Data\wiaservg.log (Malware.Trace) -> Quarantined and deleted successfully.
  C:\WINDOWS\system32\reset5c.dll (Trojan.Agent) -> Delete on reboot.
  C:\WINDOWS\Temp\wpv171245771011.exe (Trojan.Agent) -> Delete on reboot.
  
  Voici le second du 24 sept:
  Malwarebytes' Anti-Malware 1.41
  Version de la base de données: 2856
  Windows 5.1.2600 Service Pack 2
  
  24/09/2009 22:05:15
  mbam-log-2009-09-24 (22-05-15).txt
  
  Type de recherche: Examen complet (C:\|F:\|G:\|H:\|I:\|)
  Eléments examinés: 187578
  Temps écoulé: 20 minute(s), 39 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 0
  Valeur(s) du Registre infectée(s): 0
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 0
  Fichier(s) infecté(s): 0
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Valeur(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  Fichier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  0
Réponse 2 / 24
vysiak Messages postés 7 Statut Membre 1

quand tu lance ton avaste et que tu cherche le virus il ya ecrit un fichier tu le cherche et tu le suprime mais il se maite souvant dans les fichier importants
0
Réponse 3 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Ouvre ce lien et télécharge ZHPDiag :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Une fois le téléchargement achevé, double clique sur ZHPDiag.exe(clic droit ,"éxécuter en tant qu'administrateur" pour Vista).

Double-clique sur l'icône pour lancer le programme.

Clique sur "options"(icone petit tournevis) puis cocher "tous" (toutes les cases doivent etre cochés).

Clique sur la loupe pour lancer l'analyse.

A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

Ouvre le fichier sauvegardé (ZHPDiag.txt)avec le Bloc-Notes et copie son contenu dans ta réponse.

Postes le en deux fois s'il le faut (le log est assez long).
0
1. Greg
  
  ---\\ Pilotes lancés au démarrage (O41)
  O41 - Driver: ADI UAA Function Driver for High Definition Audio Service (ADIHdAudAddService) - C:\WINDOWS\system32\drivers\ADIHdAud.sys
  O41 - Driver: AE Audio Service (AEAudio) - C:\WINDOWS\system32\drivers\AEAudio.sys
  O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys
  O41 - Driver: AEGIS Protocol (IEEE 802.1x) v3.2.0.3 (AegisP) - C:\WINDOWS\system32\DRIVERS\AegisP.sys
  O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
  O41 - Driver: NETGEAR WPN311 V1H3 Wireless Adapter Service (AR5211) - C:\WINDOWS\system32\DRIVERS\WPN311.sys
  O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys
  O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys
  O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys
  O41 - Driver: (no object) (d347bus) - C:\WINDOWS\system32\DRIVERS\d347bus.sys
  O41 - Driver: (no object) (d347prt) - C:\WINDOWS\System32\Drivers\d347prt.sys
  O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys
  O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys
  O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys
  O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys
  O41 - Driver: Pilote MS IEEE-1284.4 (dot4) - C:\WINDOWS\system32\DRIVERS\Dot4.sys
  O41 - Driver: Dot4 HPH11 (Dot4 HPH11) - C:\WINDOWS\system32\DRIVERS\hphid411.sys
  O41 - Driver: Pilote de classe Imprimante pour IEEE-1284.4 (Dot4Print) - C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
  O41 - Driver: Print Class Driver for IEEE-1284.4 HPH11 (Dot4Print HPH11) - C:\WINDOWS\system32\DRIVERS\hphipr11.sys
  O41 - Driver: Storage Class Driver for IEEE-1284.4 (HPH11) (Dot4Storage HPH11) - C:\WINDOWS\System32\Drivers\hphs2k11.sys
  O41 - Driver: Filtre Dot4USB Dot4USB Filter (dot4usb) - C:\WINDOWS\system32\DRIVERS\dot4usb.sys
  O41 - Driver: Dot4Usb HPH11 (Dot4Usb HPH11) - C:\WINDOWS\System32\drivers\hphius11.sys
  O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys
  O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\DRIVERS\fltMgr.sys
  O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys
  O41 - Driver: Microsoft UAA Bus Driver for High Definition Audio (HDAudBus) - C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
  O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys
  O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
  O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
  O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
  O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys
  O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
  O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys
  O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys
  O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys
  O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys
  O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
  O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys
  O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
  O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys
  O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys
  O41 - Driver: ATK0110 ACPI UTILITY (MTsensor) - C:\WINDOWS\system32\DRIVERS\ASACPI.sys
  O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS\ndistapi.sys
  O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS\ndisuio.sys
  O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS\ndiswan.sys
  O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
  O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS\netbt.sys
  O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
  O41 - Driver: (no object) (nvata) - C:\WINDOWS\system32\DRIVERS\nvata.sys
  O41 - Driver: NVIDIA nForce Networking Controller Driver (NVENETFD) - C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
  O41 - Driver: NVIDIA Network Bus Enumerator (nvnetbus) - C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
  O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
  O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
  O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERS\raspptp.sys
  O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys
  O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys
  O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys
  O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
  O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
  O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERS\raspppoe.sys
  O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERS\raspti.sys
  O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
  O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\system32\DRIVERS\rdpdr.sys
  O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERS\redbook.sys
  O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys
  O41 - Driver: SenFilt Service (SenFiltService) - C:\WINDOWS\system32\drivers\Senfilt.sys
  O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys
  O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys
  O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys
  O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys
  O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys
  O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys
  O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys
  O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
  O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys
  O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys
  O41 - Driver: Concentrateur USB2 (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys
  O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys
  O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys
  O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
  O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys
  O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys
  O41 - Driver: WpdUsb (WpdUsb) - C:\WINDOWS\system32\DRIVERS\wpdusb.sys
  O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys
  O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys
  
  ---\\ Logiciels installés (O42)
  O42 - Logiciel: Adobe Flash Player 10 ActiveX
  O42 - Logiciel: Adobe Flash Player 10 Plugin
  O42 - Logiciel: Adobe InDesign CS2
  O42 - Logiciel: Adobe Photoshop 7.0
  O42 - Logiciel: Adobe Reader 9.1 - Français
  O42 - Logiciel: Apple Software Update
  O42 - Logiciel: Archiveur WinRAR
  O42 - Logiciel: Assistant de connexion Windows Live
  O42 - Logiciel: AutoCAD 2008 - Français
  O42 - Logiciel: Autodesk 3ds Max 2009 32-bit
  O42 - Logiciel: Autodesk Backburner 2008.1
  O42 - Logiciel: Autodesk DWF Viewer 7
  O42 - Logiciel: Counter-Strike 1.6 Lan
  O42 - Logiciel: DAEMON Tools
  O42 - Logiciel: FBX Plugin 2009.0 for Max 2009
  O42 - Logiciel: Galerie de photos Windows Live
  O42 - Logiciel: Google SketchUp 6
  O42 - Logiciel: Google SketchUp 6 Exporters
  O42 - Logiciel: Google SketchUp LayOut 6
  O42 - Logiciel: Google SketchUp Pro 6
  O42 - Logiciel: Half-Life Lan
  O42 - Logiciel: High Definition Audio Driver Package - KB888111
  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
  O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)
  O42 - Logiciel: Hotfix for Windows XP (KB926239)
  O42 - Logiciel: Hotfix for Windows XP (KB954550-v5)
  O42 - Logiciel: Installation Windows Live
  O42 - Logiciel: InterVideo DeviceService
  O42 - Logiciel: Java(TM) 6 Update 14
  O42 - Logiciel: Junk Mail filter update
  O42 - Logiciel: Lecteur Windows Media 11
  O42 - Logiciel: MSVCRT
  O42 - Logiciel: MSXML 6 Service Pack 2 (KB954459)
  O42 - Logiciel: Malwarebytes' Anti-Malware
  O42 - Logiciel: Microsoft .NET Framework 1.1
  O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366)
  O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2
  O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2
  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
  O42 - Logiciel: Microsoft Choice Guard
  O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP
  O42 - Logiciel: Microsoft Office Access MUI (French) 2007
  O42 - Logiciel: Microsoft Office Enterprise 2007
  O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
  O42 - Logiciel: Microsoft Office Groove MUI (French) 2007
  O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007
  O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007
  O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007
  O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
  O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
  O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
  O42 - Logiciel: Microsoft Office Proof (English) 2007
  O42 - Logiciel: Microsoft Office Proof (French) 2007
  O42 - Logiciel: Microsoft Office Proof (German) 2007
  O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
  O42 - Logiciel: Microsoft Office Proofing (French) 2007
  O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007
  O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
  O42 - Logiciel: Microsoft Office Word MUI (French) 2007
  O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
  O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0
  O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
  O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
  O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
  O42 - Logiciel: Mozilla Firefox (3.0.14)
  O42 - Logiciel: NETGEAR WPN311 Wireless Adapter
  O42 - Logiciel: NVIDIA Drivers
  O42 - Logiciel: NVIDIA ForceWare Network Access Manager
  O42 - Logiciel: Outil de téléchargement Windows Live
  O42 - Logiciel: PDFCreator
  O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
  O42 - Logiciel: Photosmart 130,230,7150,7345,7350,7550 (Supprimer uniquement)
  O42 - Logiciel: Podium
  O42 - Logiciel: PowerQuest PartitionMagic 8.0
  O42 - Logiciel: QuickTime
  O42 - Logiciel: RealPlayer
  O42 - Logiciel: Segoe UI
  O42 - Logiciel: Skype™ 4.0
  O42 - Logiciel: SoundMAX
  O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
  O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb973514)
  O42 - Logiciel: VLC media player 0.9.6
  O42 - Logiciel: Virtual DJ - Atomix Productions
  O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729)
  O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01
  O42 - Logiciel: Vuze
  O42 - Logiciel: Windows Imaging Component
  O42 - Logiciel: Windows Installer 3.1 (KB893803)
  O42 - Logiciel: Windows Live Call
  O42 - Logiciel: Windows Live Communications Platform
  O42 - Logiciel: Windows Live FolderShare
  O42 - Logiciel: Windows Live Mail
  O42 - Logiciel: Windows Live Messenger
  O42 - Logiciel: Windows Media Format 11 runtime
  O42 - Logiciel: Windows Media Player 11
  O42 - Logiciel: Windows Presentation Foundation
  O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0
  O42 - Logiciel: avast! Antivirus
  
  ---\\ Contenu des dossiers Fichiers Communs (O43)
  O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
  O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
  O43 - CFD:Common File Directory ----D- C:\Program Files\Analog Devices
  O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
  O43 - CFD:Common File Directory ----D- C:\Program Files\Artlantis Render 2
  O43 - CFD:Common File Directory ----D- C:\Program Files\Artlantis Studio 2
  O43 - CFD:Common File Directory ----D- C:\Program Files\AutoCAD 2008
  O43 - CFD:Common File Directory ----D- C:\Program Files\Autodesk
  O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
  O43 - CFD:Common File Directory ----D- C:\Program Files\D-Tools
  O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
  O43 - CFD:Common File Directory ----D- C:\Program Files\Google
  O43 - CFD:Common File Directory ----D- C:\Program Files\HP Photosmart 11
  O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
  O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
  O43 - CFD:Common File Directory ----D- C:\Program Files\Java
  O43 - CFD:Common File Directory ----D- C:\Program Files\Lavasoft
  O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
  O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
  O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
  O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
  O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
  O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
  O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
  O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
  O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
  O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
  O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
  O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
  O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
  O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 6.0
  O43 - CFD:Common File Directory ----D- C:\Program Files\My Company Name
  O43 - CFD:Common File Directory ----D- C:\Program Files\NETGEAR
  O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
  O43 - CFD:Common File Directory ----D- C:\Program Files\NVIDIA Corporation
  O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
  O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
  O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator
  O43 - CFD:Common File Directory ----D- C:\Program Files\PowerQuest
  O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
  O43 - CFD:Common File Directory ----D- C:\Program Files\Real
  O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
  O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
  O43 - CFD:Common File Directory R---D- C:\Program Files\Skype
  O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
  O43 - CFD:Common File Directory ----D- C:\Program Files\Valve Lan
  O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
  O43 - CFD:Common File Directory ----D- C:\Program Files\VirtualDJ
  O43 - CFD:Common File Directory ----D- C:\Program Files\Vuze
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Components
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
  O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
  O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
  O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
  O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
  O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe Systems Shared
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Autodesk Shared
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\i4j_jres
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InterVideo
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Real
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Skype
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live
  O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\xing shared
  
  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
  O44 - LFC:Last File Created 10/09/2009 - 13:53:50 ---A- C:\WINDOWS\System32\drivers\mbam.sys
  O44 - LFC:Last File Created 10/09/2009 - 13:54:06 ---A- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
  O44 - LFC:Last File Created 17/09/2009 - 23:00:53 ---A- C:\WINDOWS\System32\wpa.dbl
  O44 - LFC:Last File Created 24/09/2009 - 19:25:10 ---A- C:\WINDOWS\System32\AUTOEXEC.NT
  O44 - LFC:Last File Created 24/09/2009 - 19:25:10 ---A- C:\WINDOWS\System32\CONFIG.NT
  O44 - LFC:Last File Created 24/09/2009 - 19:25:10 RSHA- C:\WINDOWS\winstart.bat
  O44 - LFC:Last File Created 24/09/2009 - 20:06:00 ---A- C:\WINDOWS\SchedLgU.Txt
  O44 - LFC:Last File Created 24/09/2009 - 20:06:53 -S-A- C:\WINDOWS\bootstat.dat
  O44 - LFC:Last File Created 24/09/2009 - 20:06:59 ---A- C:\WINDOWS\wiaservc.log
  O44 - LFC:Last File Created 24/09/2009 - 20:07:01 ---A- C:\WINDOWS\wiadebug.log
  O44 - LFC:Last File Created 24/09/2009 - 20:07:02 ---A- C:\WINDOWS\System32\nmp.log
  O44 - LFC:Last File Created 24/09/2009 - 20:07:49 ---A- C:\WINDOWS\WindowsUpdate.log
  O44 - LFC:Last File Created 24/09/2009 - 20:07:53 ---A- C:\WINDOWS\0.log
  O44 - LFC:Last File Created 26/08/2009 - 01:34:28 ---A- C:\WINDOWS\System32\TZLog.log
  
  ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
  O45 - LFCP:Last File Created Prefetch 15/09/2009 - 14:45:52 ---A- C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
  O45 - LFCP:Last File Created Prefetch 15/09/2009 - 17:32:51 ---A- C:\WINDOWS\Prefetch\USNSVC.EXE-373E4DBC.pf
  O45 - LFCP:Last File Created Prefetch 21/09/2009 - 21:16:09 ---A- C:\WINDOWS\Prefetch\REALPLAY.EXE-1BF219BD.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 12:31:00 ---A- C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 12:31:00 ---A- C:\WINDOWS\Prefetch\JUSCHED.EXE-25206883.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 12:31:00 ---A- C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 15:14:18 ---A- C:\WINDOWS\Prefetch\UNSECAPP.EXE-1A95A33B.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 15:14:30 ---A- C:\WINDOWS\Prefetch\AAWTRAY.EXE-1858AE3F.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 19:08:07 ---A- C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf
  O45 - LFCP:Last File Created Prefetch 23/09/2009 - 19:08:10 ---A- C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 10:55:26 ---A- C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 11:09:12 ---A- C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9D.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:03:39 ---A- C:\WINDOWS\Prefetch\EXCEL.EXE-34CB65E9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:28 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-132B2031.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:47 ---A- C:\WINDOWS\Prefetch\AD-AWAREAE.EXE-20B251E1.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:50 ---A- C:\WINDOWS\Prefetch\AAWWSC.EXE-248CAA52.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:51 ---A- C:\WINDOWS\Prefetch\AAWSERVICE.EXE-3B93EBA3.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:52 ---A- C:\WINDOWS\Prefetch\AAWDRIVERTOOL.EXE-0E1ECFD9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:11:52 ---A- C:\WINDOWS\Prefetch\AD-AWAREADMIN.EXE-102E374C.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:12:02 ---A- C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:14:39 ---A- C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-0A47CFD1.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:14:39 ---A- C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:14:39 ---A- C:\WINDOWS\Prefetch\MSMSGS.EXE-2B6052DE.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:14:39 ---A- C:\WINDOWS\Prefetch\ONENOTEM.EXE-157A39AC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:18:24 ---A- C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:18:24 ---A- C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:20:40 ---A- C:\WINDOWS\Prefetch\WLANCFG5.EXE-10389964.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:21:22 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-209CC8E7.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:21:36 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-18DF1C60.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 13:23:59 ---A- C:\WINDOWS\Prefetch\MBAM-SETUP.TMP-154C9C7A.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 14:08:53 ---A- C:\WINDOWS\Prefetch\Layout.ini
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 14:09:04 ---A- C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 14:09:04 ---A- C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 18:33:48 ---A- C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 18:33:51 ---A- C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 18:38:37 ---A- C:\WINDOWS\Prefetch\SETUP.EXE-38C23DD9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:16:47 ---A- C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:24:38 ---A- C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:24:51 ---A- C:\WINDOWS\Prefetch\IS-CQSC7.TMP-000314A6.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:24:54 ---A- C:\WINDOWS\Prefetch\REANIMATORSTART.EXE-2368ADE9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:33:56 ---A- C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:40:32 ---A- C:\WINDOWS\Prefetch\REANIMATOR.EXE-13C7A8D0.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:40:32 ---A- C:\WINDOWS\Prefetch\UNINS000.EXE-06A09224.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:40:47 ---A- C:\WINDOWS\Prefetch\UNINST.EXE-0A20C808.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:40:51 ---A- C:\WINDOWS\Prefetch\AU_.EXE-09632B1C.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 19:43:16 ---A- C:\WINDOWS\Prefetch\ACRORD32.EXE-3A1F13AE.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:01:57 ---A- C:\WINDOWS\Prefetch\OUTLOOK.EXE-2FC6F8AB.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:05:17 ---A- C:\WINDOWS\Prefetch\UNINS000.EXE-15535578.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:05:24 ---A- C:\WINDOWS\Prefetch\_IU14D2N.TMP-09C4817C.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:05:35 ---A- C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:08:32 ---A- C:\WINDOWS\Prefetch\AVAST.SETUP-032170A8.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:08:32 ---A- C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:00 ---A- C:\WINDOWS\Prefetch\HPHUSG04.EXE-3969FB49.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:09 ---A- C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:10 ---A- C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:36 ---A- C:\WINDOWS\Prefetch\QTTASK.EXE-342507FB.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:36 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:37 ---A- C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:46 ---A- C:\WINDOWS\Prefetch\ASHDISP.EXE-0B874892.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:46 ---A- C:\WINDOWS\Prefetch\GROOVEMONITOR.EXE-2606717A.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:46 ---A- C:\WINDOWS\Prefetch\HPZTSB07.EXE-02862AA0.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:46 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:46 ---A- C:\WINDOWS\Prefetch\SMAX4PNP.EXE-381239AF.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:47 ---A- C:\WINDOWS\Prefetch\HPHMON04.EXE-0917526E.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:47 ---A- C:\WINDOWS\Prefetch\READER_SL.EXE-2B4EA1CB.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:17:47 ---A- C:\WINDOWS\Prefetch\REALSCHED.EXE-04BEC5CC.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:29:23 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-1485668A.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:30:44 ---A- C:\WINDOWS\Prefetch\MSNMSGR.EXE-030AB647.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:30:53 ---A- C:\WINDOWS\Prefetch\WLCOMM.EXE-04AE9009.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:32:11 ---A- C:\WINDOWS\Prefetch\WINWORD.EXE-07381162.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:34:00 ---A- C:\WINDOWS\Prefetch\HPZENG07.EXE-3732AEC1.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:34:00 ---A- C:\WINDOWS\Prefetch\HPZSTC07.EXE-14965F81.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:35:16 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:35:25 ---A- C:\WINDOWS\Prefetch\HPHIPM11.EXE-25D93894.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:39:21 ---A- C:\WINDOWS\Prefetch\MBAM-SETUP.EXE-0D9E420E.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:39:21 ---A- C:\WINDOWS\Prefetch\MBAM-SETUP.TMP-3A22E99B.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:39:51 ---A- C:\WINDOWS\Prefetch\MBAMGUI.EXE-1286D63B.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:39:53 ---A- C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:39:54 ---A- C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 20:54:38 ---A- C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:06:32 ---A- C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:08:08 ---A- C:\WINDOWS\Prefetch\ASHAVAST.EXE-12F63458.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:08:43 ---A- C:\WINDOWS\Prefetch\ASHSIMPL.EXE-14F851AB.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:08:51 ---A- C:\WINDOWS\Prefetch\ASHCHEST.EXE-0FED8209.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:11:07 ---A- C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:13:16 ---A- C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:39:30 ---A- C:\WINDOWS\Prefetch\ZHPDIAG 1.24.15.TMP-33B5FDC7.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:40:48 ---A- C:\WINDOWS\Prefetch\ZHPDIAG 1.24.15.EXE-0FB36BD9.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:40:48 ---A- C:\WINDOWS\Prefetch\ZHPDIAG 1.24.15.TMP-1BAA750D.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 21:40:58 ---A- C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf
  O45 - LFCP:Last File Created Prefetch 24/09/2009 - 23:40:15 ---A- C:\WINDOWS\Prefetch\VLC.EXE-22DF01AA.pf
  
  ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
  O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
  O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
  
  ---\\ Export de clé d'application autorisée (ECAA)(O47)
  O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
  O47 - AAKE:Key Export SP - "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
  O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
  O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
  O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
  O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
  O47 - AAKE:Key Export SP - "C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
  O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
  O47 - AAKE:Key Export SP - "C:\Program Files\Autodesk\Backburner\monitor.exe"="C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor"
  O47 - AAKE:Key Export SP - "C:\Program Files\Autodesk\Backburner\manager.exe"="C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager"
  O47 - AAKE:Key Export SP - "C:\Program Files\Autodesk\Backburner\server.exe"="C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server"
  O47 - AAKE:Key Export SP - "C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe"="C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit"
  O47 - AAKE:Key Export SP - "C:\Program Files\Valve Lan\hl.exe"="C:\Program Files\Valve Lan\hl.exe:*:Enabled:Half-Life Launcher"
  O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
  O47 - AAKE:Key Export SP - "%windir%\system32\lsass.exe"="%windir%\system32\lsass.exe:*:Enabled:Local Security Authority Subsystem Service"
  O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
  O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
  O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
  O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
  O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
  O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
  O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
  O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
  
  ---\\ Déni du service (Local Security Authority) (LSA) (O48)
  O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll
  O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll
  
  ---\\ Contrôle du Safe Boot (CSB) (O49)
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys
  O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys
  
  0
2. Greg
  
  ---\\ Image File Execution Options (IFEO) (O50)
  O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
  
  ---\\ MountPoints2 Shell Key (MPSK) (O51)
  O51 - MPSK:{7979cc5b-b433-11dd-87f2-001e2ab36d1c}\Shell\AutoRun\command - K:\LaunchU3.exe
  O51 - MPSK:{7979cc5c-b433-11dd-87f2-001e2ab36d1c}\Shell\AutoRun\command - L:\cache\tmp983.exe
  O51 - MPSK:{7979cc5c-b433-11dd-87f2-001e2ab36d1c}\Shell\open\command - L:\cache\tmp983.exe
  O51 - MPSK:{c132c0e8-6e4b-11de-8965-001e2ab36d1c}\Shell\AutoRun\command - E:\EmDesk.exe
  O51 - MPSK:{ca49c935-b1e9-11dd-bec0-806d6172696f}\Shell\AutoRun\command - D:\Setup.exe
  O51 - MPSK:{f4bea004-b2a2-11dd-8c0c-806d6172696f}\Shell\AutoRun\command - E:\SETUP.EXE
  
  ---\\ Trojan Driver Search Data (TDSD) (O52)
  O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
  O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.I420"="msh263.drv"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll"
  O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax"
  O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="ir50_32.dll"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm"
  O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
  O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
  O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
  O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"
  O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"
  O52 - TDSD:HKLM\...\drivers.desc\"msaud32.acm"="Windows Media Audio Codec"
  O52 - TDSD:HKLM\...\drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec"
  O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software"
  O52 - TDSD:HKLM\...\drivers.desc\"ir50_32.dll"="Indeo® video 5.10"
  O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"
  O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="ADI UAA Function Driver for High Definition Audio"
  O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"
  
  ---\\ Microsoft Control Security Providers (MCSP) (O54)
  O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
  O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
  
  ---\\ Microsoft Windows Policies System (MWPS) (O55)
  O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
  O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
  O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
  O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
  O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
  
  ---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
  O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1
  
  ---\\ Liste des Drivers Système (SDL) (O58)
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aavmker4.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\acpiec.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ADIHdAud.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aeaudio.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aec.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AegisP.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\afd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk6.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\amdk7.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\AmdK8.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\arp1394.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASACPI.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswFsBlk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswmon.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswmon2.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswRdr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswSP.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\aswTdi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\asyncmac.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atapi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmarpc.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmepvc.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmlane.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\atmuni.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\audstub.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\beep.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\bridge.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cbidf2k.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdaudio.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdfs.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cdrom.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cinemst2.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\classpnp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\cpqdap01.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\crusoe.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\d347bus.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\d347prt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\disk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\diskdump.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmboot.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmio.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dmload.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\DMusic.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Dot4.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Dot4Prt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\Dot4usb.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\drmkaud.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxapi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxg.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\dxgthk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fastfat.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fdc.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fips.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\flpydisk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fltmgr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fsvga.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\fs_rec.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ftdisk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidclass.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidparse.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hidusb.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hphid411.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hphipr11.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hphius11.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\hphs2k11.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\http.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\i8042prt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\imapi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\intelppm.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ip6fw.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipfltdrv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipinip.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipnat.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ipsec.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\irenum.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\isapnp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kbdclass.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\kmixer.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ks.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ksecdd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbam.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mbamswissarmy.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mcd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mf.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mnmdd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\modem.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouclass.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mouhid.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mountmgr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mqac.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxdav.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mrxsmb.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msfs.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\msgpc.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\MSKSSRV.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\MSPQM.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mssmbios.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\mup.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndis.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndistapi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndisuio.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndiswan.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ndproxy.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbios.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\netbt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nic1394.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nikedrv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nmnt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\npfs.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ntfs.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\null.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nv4_mini.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvata.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\NVENETFD.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvnetbus.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvnrm.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvsnpu.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nvtcp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkflt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkfwd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkipx.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnknb.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwlnkspx.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\nwrdr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\oprghdlr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\p3.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parport.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\partmgr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\parvdm.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pci.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciide.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pciidex.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\pcmcia.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\portcls.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\PQNTDRV.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\processr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\psched.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ptilink.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasacd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rasl2tp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspppoe.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspptp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\raspti.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rawwan.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdbss.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpcdd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpdr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rdpwd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\redbook.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rio8drv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\riodrv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rmcast.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rndismp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\rootmdm.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\scsiport.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sdbus.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\secdrv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\senfilt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serenum.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\serial.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffdisk.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sffp_sd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sfloppy.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\smclib.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sonydcam.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\splitter.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sr.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\srv.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\stream.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swenum.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\swmidi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\sysaudio.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tape.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tcpip6.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdi.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdpipe.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tdtcp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\termdd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tosdvd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tsbvcap.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\tunmp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\udfs.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\update.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usb8023.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbcamd2.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbehci.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbhub.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbintel.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbohci.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbport.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\usbscan.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\USBSTOR.SYS
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vdmindvd.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\vga.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\videoprt.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\volsnap.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wanarp.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wdmaud.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\wmilib.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\WPN311.sys
  O58 - SDL:System Drivers List - C:\WINDOWS\system32\drivers\ws2ifsl.sys
  
  0
3. Greg
  
  ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
  O61 - LFC:Last File Created 21/09/2009 - 10:56:49 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH127.tmp
  O61 - LFC:Last File Created 21/09/2009 - 11:51:39 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\TTaYZRyJRnTqHikbjUlwHbSGHF4=
  O61 - LFC:Last File Created 21/09/2009 - 11:55:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\Data\reader9rdr-fr_FR.aup.xml
  O61 - LFC:Last File Created 21/09/2009 - 11:55:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\acrobatPI.log
  O61 - LFC:Last File Created 21/09/2009 - 11:55:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\Data\AdobeUpdater.aum
  O61 - LFC:Last File Created 21/09/2009 - 11:55:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\Data\AdobeUpdater_meta.txt
  O61 - LFC:Last File Created 21/09/2009 - 11:55:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\Data\reader9rdr-fr_FR.aum
  O61 - LFC:Last File Created 21/09/2009 - 11:55:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\Data\reader9rdr-fr_FR_meta.txt
  O61 - LFC:Last File Created 21/09/2009 - 11:56:19 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\bobcache.dat
  O61 - LFC:Last File Created 21/09/2009 - 11:56:19 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\bobcache.sig
  O61 - LFC:Last File Created 21/09/2009 - 12:11:08 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\AdobeUpdaterPrefs.dat
  O61 - LFC:Last File Created 21/09/2009 - 12:11:08 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\aum.log
  O61 - LFC:Last File Created 21/09/2009 - 14:15:19 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\cXIG4EgRfsqeCn7QpF7qiTcWY8s=
  O61 - LFC:Last File Created 21/09/2009 - 14:37:31 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\bookmarkbackups\bookmarks-2009-09-21.json
  O61 - LFC:Last File Created 21/09/2009 - 17:27:01 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\rGJ8r1iWO3dljRao4EEYMnMBkX8=
  O61 - LFC:Last File Created 21/09/2009 - 18:19:25 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\WBrhRk5aw7hMwJk84S7R5Kornoo=
  O61 - LFC:Last File Created 21/09/2009 - 18:29:09 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF4494.tmp
  O61 - LFC:Last File Created 21/09/2009 - 19:00:40 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\FindChangeData
  O61 - LFC:Last File Created 21/09/2009 - 19:00:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\FindChangeDataTmp
  O61 - LFC:Last File Created 21/09/2009 - 19:00:45 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\Adobelm_Cleanup.0001
  O61 - LFC:Last File Created 21/09/2009 - 19:00:47 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\InDesign ClipboardScrap
  O61 - LFC:Last File Created 21/09/2009 - 19:00:47 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\InDesign DragDropScrap
  O61 - LFC:Last File Created 21/09/2009 - 19:01:02 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\InDesign Recovery\RecoveryData
  O61 - LFC:Last File Created 21/09/2009 - 19:01:04 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\InDesign Recovery\DBTmp377629072937
  O61 - LFC:Last File Created 21/09/2009 - 19:01:06 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629069718
  O61 - LFC:Last File Created 21/09/2009 - 19:01:07 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\InDesign\Version 4.0\InDesign Recovery\DBTmp377629093234
  O61 - LFC:Last File Created 21/09/2009 - 19:01:10 --HA- C:\Documents And Settings\Utilisateur\Application Data\Adobe\Workflow\editing.xml
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629077328
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629079687
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629080125
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629082453
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629086859
  O61 - LFC:Last File Created 21/09/2009 - 19:01:20 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\DBTmp377629086921
  O61 - LFC:Last File Created 21/09/2009 - 19:13:59 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\msohtmlclip1\01\clip_colorschememapping.xml
  O61 - LFC:Last File Created 21/09/2009 - 19:13:59 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\msohtmlclip1\01\clip_themedata.thmx
  O61 - LFC:Last File Created 21/09/2009 - 19:41:09 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\fNlIATwLy9ENd7XazQRkClzw9gI=
  O61 - LFC:Last File Created 21/09/2009 - 20:26:19 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\dVbgEtJaW06k7HEIB3+ruoDg8e0=
  O61 - LFC:Last File Created 21/09/2009 - 21:24:06 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Msg\Category.dat
  O61 - LFC:Last File Created 21/09/2009 - 21:24:07 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Msg\4155_1253310989\20090920bNewmusic_3links.html
  O61 - LFC:Last File Created 21/09/2009 - 21:24:09 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Historique\History.IE5\MSHist012009092120090922\index.dat
  O61 - LFC:Last File Created 21/09/2009 - 21:46:28 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4
  O61 - LFC:Last File Created 21/09/2009 - 21:46:28 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4
  O61 - LFC:Last File Created 21/09/2009 - 21:54:19 ---A- C:\Documents And Settings\Utilisateur\Mes documents\cc_20090921_225409.reg
  O61 - LFC:Last File Created 21/09/2009 - 21:54:43 ---A- C:\Documents And Settings\Utilisateur\Mes documents\cc_20090921_225437.reg
  O61 - LFC:Last File Created 21/09/2009 - 21:54:59 ---A- C:\Documents And Settings\Utilisateur\Mes documents\cc_20090921_225456.reg
  O61 - LFC:Last File Created 21/09/2009 - 22:00:09 -SHA- C:\Documents And Settings\Utilisateur\Recent\Desktop.ini
  O61 - LFC:Last File Created 22/09/2009 - 01:45:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH3.tmp
  O61 - LFC:Last File Created 22/09/2009 - 11:58:06 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH4.tmp
  O61 - LFC:Last File Created 22/09/2009 - 18:38:33 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Historique\History.IE5\MSHist012009092220090923\index.dat
  O61 - LFC:Last File Created 22/09/2009 - 18:38:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH1.tmp
  O61 - LFC:Last File Created 22/09/2009 - 18:47:56 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\bookmarkbackups\bookmarks-2009-09-22.json
  O61 - LFC:Last File Created 22/09/2009 - 19:35:19 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\cAG2FyAfKIQEzig7zd3AJWjt25bA=
  O61 - LFC:Last File Created 22/09/2009 - 19:39:10 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\unX1DJBx95tXQEr2FBrEF5kmRimw=
  O61 - LFC:Last File Created 22/09/2009 - 21:06:37 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol
  O61 - LFC:Last File Created 22/09/2009 - 21:48:18 ---A- C:\Documents And Settings\Utilisateur\Recent\LaCie (E).lnk
  O61 - LFC:Last File Created 22/09/2009 - 21:48:18 ---A- C:\Documents And Settings\Utilisateur\Recent\subscription-form.lnk
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\++jucJigOYo2I83F1kndMUzkll0=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\++jucJigOYo2I83F1kndMUzkll0=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\0vUr4BnaKGecCroYOU1eWiPPcf0=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\0vUr4BnaKGecCroYOU1eWiPPcf0=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\2Embh2xPyHrVlic2FwzIlQfMavVA=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\2Embh2xPyHrVlic2FwzIlQfMavVA=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\6M06zBio9KT2FYxmcaNxCEYU8tcg=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\6M06zBio9KT2FYxmcaNxCEYU8tcg=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\9dtCc9u3FWvV9RhxpiEeRV+s2t0=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\9dtCc9u3FWvV9RhxpiEeRV+s2t0=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\D2Fs2FP9edNibi2FUnU68QJp2FHDruQ=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\D2Fs2FP9edNibi2FUnU68QJp2FHDruQ=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\DXpmpt9Jq38X274YNCDWReR1uaI=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\DXpmpt9Jq38X274YNCDWReR1uaI=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\FUfTBiQcZLUaElimeDYqLBFw4Ro=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\FUfTBiQcZLUaElimeDYqLBFw4Ro=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\GOVBNDmsqcl4YXVZU4kwwbts9kk=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\GOVBNDmsqcl4YXVZU4kwwbts9kk=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\Ii3mmfcEfSkQmgvqX4EdjEmvbcE=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\Ii3mmfcEfSkQmgvqX4EdjEmvbcE=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\P5HTLASl8yZCeqlqi0CzqtSR3B8=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\P5HTLASl8yZCeqlqi0CzqtSR3B8=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\RV2dB5ha2dZzf0I9Ne2VS2m3tAE=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\RV2dB5ha2dZzf0I9Ne2VS2m3tAE=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\TEH4feoVKy4mAeEcbAfF2FqpZn3w=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\TEH4feoVKy4mAeEcbAfF2FqpZn3w=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\UUsLSPvqbDCMyOSS1i7MHuhvUxo=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\UUsLSPvqbDCMyOSS1i7MHuhvUxo=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\XixB0QFUcm8WNf28fLewac9gJzM=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\XixB0QFUcm8WNf28fLewac9gJzM=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\YBO2F9u0CZzxm7dBxLdz+5yZlazE=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\YBO2F9u0CZzxm7dBxLdz+5yZlazE=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\o2x7Vq5eeo2F0cF6+F0Uq1SrkqpM=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\o2x7Vq5eeo2F0cF6+F0Uq1SrkqpM=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\oZ2FGmVfEIBvTdtb+iySYYn56M0E=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\oZ2FGmVfEIBvTdtb+iySYYn56M0E=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\qbNpBw1sS0AVUKCd5PojaF4qWCI=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\qbNpBw1sS0AVUKCd5PojaF4qWCI=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\vR3bS3eGkh9QcPo0OvCxKXK98YQ=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\vR3bS3eGkh9QcPo0OvCxKXK98YQ=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\xF7meUN9oVUP44Vu78E6txntjuM=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\xF7meUN9oVUP44Vu78E6txntjuM=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\z9uCpAG4f9VyERT1J0ky9Olw4h4=.dt2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:04 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\ObjectStore\Scenes\z9uCpAG4f9VyERT1J0ky9Olw4h4=.id2
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC
  O61 - LFC:Last File Created 22/09/2009 - 23:02:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361
  O61 - LFC:Last File Created 22/09/2009 - 23:09:09 ---A- C:\Documents And Settings\Utilisateur\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2009-09-22 (00-09-09).txt
  
  0
4. Greg
  
  O61 - LFC:Last File Created 22/09/2009 - 23:10:58 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH2.tmp
  O61 - LFC:Last File Created 23/09/2009 - 08:12:18 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH6.tmp
  O61 - LFC:Last File Created 23/09/2009 - 08:12:48 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@bs.serving-sys[2].txt
  O61 - LFC:Last File Created 23/09/2009 - 08:16:24 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\s.ytimg.com\soundData.sol
  O61 - LFC:Last File Created 23/09/2009 - 12:30:14 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH7.tmp
  O61 - LFC:Last File Created 23/09/2009 - 12:39:56 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\broadcast.piximedia.fr\piximedia.sol
  O61 - LFC:Last File Created 23/09/2009 - 12:39:56 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#broadcast.piximedia.fr\settings.sol
  O61 - LFC:Last File Created 23/09/2009 - 14:42:45 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@bluestreak[1].txt
  O61 - LFC:Last File Created 23/09/2009 - 14:45:50 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol
  O61 - LFC:Last File Created 23/09/2009 - 14:45:51 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pl08.load.tubemogul.com\settings.sol
  O61 - LFC:Last File Created 23/09/2009 - 14:45:52 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\pl08.load.tubemogul.com\StreamMinerInfo.sol
  O61 - LFC:Last File Created 23/09/2009 - 14:55:29 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a69.g.akamai.net\settings.sol
  O61 - LFC:Last File Created 23/09/2009 - 14:55:58 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\a69.g.akamai.net\n\69\10688\v1\img5.allocine.fr\acmedia\skin\v6\player\AcV_Gen_fr15.swf\AcV.sol
  O61 - LFC:Last File Created 23/09/2009 - 15:14:00 ---A- C:\Documents And Settings\NetworkService\Cookies\index.dat
  O61 - LFC:Last File Created 23/09/2009 - 15:14:00 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat
  O61 - LFC:Last File Created 23/09/2009 - 17:28:03 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\DIVERS (I).LNK
  O61 - LFC:Last File Created 23/09/2009 - 17:28:03 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\loyer.LNK
  O61 - LFC:Last File Created 23/09/2009 - 17:28:03 ---A- C:\Documents And Settings\Utilisateur\Recent\DIVERS (I).lnk
  O61 - LFC:Last File Created 23/09/2009 - 17:28:03 ---A- C:\Documents And Settings\Utilisateur\Recent\loyer.lnk
  O61 - LFC:Last File Created 23/09/2009 - 17:41:57 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.XML
  O61 - LFC:Last File Created 23/09/2009 - 18:38:38 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@real[1].txt
  O61 - LFC:Last File Created 23/09/2009 - 18:38:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\config.xml
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\blank.spc
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\inst_config\compat.dll
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\inst_config\fftbapi.dll
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\inst_config\gcapi_dll.dll
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\inst_config\gtapi.dll
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\chrome\chr_chrome.jpg
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\chrome\chr_chrome.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\chrome\chr_logo.jpg
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\chrome\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\complete\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\eula\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\firstrun\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb\gtb_logo.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb\gtb_mag.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb\gtb_mag5.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb_us\gtb_logo.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb_us\gtb_mag.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb_us\gtb_mag5.png
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\gtb_us\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\bluebullet.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_accept_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_accept_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_back_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_back_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_cancel_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_cancel_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_change_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_finish.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_next_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_next_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_no_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_nothanks.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_pause_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_pause_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_resume_disabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_resume_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_tryforfree.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\btn_yes_enabled.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\bull_tri.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\bullet.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\bullet_chrome.jpg
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\button_install_now_free.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\button_remind_me_later.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\checkMark.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\grayArrow.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\grayArrow2.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\headerBackground.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\realPlayerDownloadButton.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\shaded.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\images\squareBullet.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\installed\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\options\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\percent_bar.js
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\playrlic.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\progress\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\progress\promo_static.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\realLogo.gif
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\rnlicmoz.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\social\index_ie.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\type.css
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\update\index.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\update\index_rp11.html
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\pages\update\real_logo_bg.jpg
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\button_dn.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\button_ov.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\button_up.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\center.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\close.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\custom_bottom.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\custom_bottom_left.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\custom_bottom_right.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\dialog_bottom.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\dialog_bottom_left.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\dialog_bottom_right.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\icon_alert.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\icon_info.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\left.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\right.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\top.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\top_left.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\skin\top_right.bmp
  O61 - LFC:Last File Created 23/09/2009 - 18:38:42 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Update\setup\RUP\upgrade_pkg_en-eu.rup
  O61 - LFC:Last File Created 23/09/2009 - 22:44:58 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\www.ratp.info\CVecteur_Test.sol
  O61 - LFC:Last File Created 23/09/2009 - 22:44:58 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ratp.info\settings.sol
  O61 - LFC:Last File Created 23/09/2009 - 22:45:45 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Historique\History.IE5\MSHist012009092320090924\index.dat
  O61 - LFC:Last File Created 23/09/2009 - 22:50:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\Backup\new\contacts.edb
  O61 - LFC:Last File Created 23/09/2009 - 22:50:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb0002D.log
  O61 - LFC:Last File Created 23/09/2009 - 22:50:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\contacts.pat
  O61 - LFC:Last File Created 23/09/2009 - 22:50:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\Backup\new\contacts.pat
  O61 - LFC:Last File Created 23/09/2009 - 22:50:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\Backup\new\edb0002D.log
  O61 - LFC:Last File Created 23/09/2009 - 22:50:47 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\Backup\new\contacts.edb
  O61 - LFC:Last File Created 23/09/2009 - 22:50:48 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\Backup\new\contacts.pat
  O61 - LFC:Last File Created 23/09/2009 - 22:50:48 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\Backup\new\edb00006.log
  O61 - LFC:Last File Created 23/09/2009 - 22:50:48 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\LogFiles\edb00006.log
  O61 - LFC:Last File Created 23/09/2009 - 22:50:48 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\contacts.pat
  O61 - LFC:Last File Created 23/09/2009 - 22:52:29 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\blocklist.xml
  O61 - LFC:Last File Created 24/09/2009 - 00:24:27 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  O61 - LFC:Last File Created 24/09/2009 - 00:24:38 ---A- C:\Documents And Settings\Utilisateur\Application Data\dvdcss\CACHEDIR.TAG
  O61 - LFC:Last File Created 24/09/2009 - 00:46:22 ---A- C:\Documents And Settings\Utilisateur\Application Data\vlc\CACHEDIR.TAG
  O61 - LFC:Last File Created 24/09/2009 - 00:46:22 ---A- C:\Documents And Settings\Utilisateur\Application Data\vlc\ml.xspf
  O61 - LFC:Last File Created 24/09/2009 - 00:46:22 ---A- C:\Documents And Settings\Utilisateur\Application Data\vlc\plugins-zxzx04.dat
  O61 - LFC:Last File Created 24/09/2009 - 00:46:22 ---A- C:\Documents And Settings\Utilisateur\Application Data\vlc\vlc-qt-interface.ini
  O61 - LFC:Last File Created 24/09/2009 - 00:46:22 ---A- C:\Documents And Settings\Utilisateur\Application Data\vlc\vlcrc
  O61 - LFC:Last File Created 24/09/2009 - 10:19:18 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH8.tmp
  O61 - LFC:Last File Created 24/09/2009 - 10:19:19 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\Msg\Messages.dat
  O61 - LFC:Last File Created 24/09/2009 - 10:19:32 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\IdentityCRL\Production\MetaConfig.xml
  O61 - LFC:Last File Created 24/09/2009 - 10:19:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\ErrorResponse.xml
  O61 - LFC:Last File Created 24/09/2009 - 10:19:52 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@livefilestore[2].txt
  O61 - LFC:Last File Created 24/09/2009 - 10:19:54 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@profile.live[2].txt
  O61 - LFC:Last File Created 24/09/2009 - 10:19:55 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@msnportal.112.2o7[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 10:20:00 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb0002E.log
  O61 - LFC:Last File Created 24/09/2009 - 10:28:08 ---A- C:\Documents And Settings\Utilisateur\Recent\66982194.lnk
  O61 - LFC:Last File Created 24/09/2009 - 10:28:41 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\include.classistatic.com\include\c3js\classifieds\rel1\FLASH\getMachId.swf\mach_data.sol
  O61 - LFC:Last File Created 24/09/2009 - 10:28:41 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#include.classistatic.com\settings.sol
  O61 - LFC:Last File Created 24/09/2009 - 11:12:43 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Media Player\lastplayed.wpl
  O61 - LFC:Last File Created 24/09/2009 - 11:12:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb
  O61 - LFC:Last File Created 24/09/2009 - 11:12:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Media Player\LocalMLS_0.wmdb
  O61 - LFC:Last File Created 24/09/2009 - 11:12:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Media Player\wmpfolders.wmdb
  O61 - LFC:Last File Created 24/09/2009 - 11:12:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\wmplog00.sqm
  O61 - LFC:Last File Created 24/09/2009 - 11:35:15 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ikea.com\settings.sol
  O61 - LFC:Last File Created 24/09/2009 - 11:38:06 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DFF5CB.tmp
  O61 - LFC:Last File Created 24/09/2009 - 11:40:36 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office\Microsoft Office Excel 2007.lnk
  O61 - LFC:Last File Created 24/09/2009 - 11:57:05 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\www.ikea.com\ms\flash\rooms_ideas\mpa2\MPA2.swf\IKEA_MPA2.sol
  O61 - LFC:Last File Created 24/09/2009 - 12:01:22 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@apmebf[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 12:01:22 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@mediaplex[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 12:01:23 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@rad.msn[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 12:01:28 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb0002F.log
  O61 - LFC:Last File Created 24/09/2009 - 12:01:31 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00030.log
  O61 - LFC:Last File Created 24/09/2009 - 12:05:10 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Apple Computer\QuickTime\QuickTime.qtp
  O61 - LFC:Last File Created 24/09/2009 - 12:05:10 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\00\70f6c66b-dcd653be-f659d3c6-c4d1dd81.qtch
  O61 - LFC:Last File Created 24/09/2009 - 12:30:54 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\bin.clearspring.com\clearspring.sol
  O61 - LFC:Last File Created 24/09/2009 - 12:30:54 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol
  O61 - LFC:Last File Created 24/09/2009 - 12:40:40 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Excel12.pip
  O61 - LFC:Last File Created 24/09/2009 - 12:40:40 ---A- C:\Documents And Settings\Utilisateur\Bureau\emploi du temps.xls
  O61 - LFC:Last File Created 24/09/2009 - 13:04:26 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\Bureau.LNK
  O61 - LFC:Last File Created 24/09/2009 - 13:04:26 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\emploi du temps.LNK
  O61 - LFC:Last File Created 24/09/2009 - 13:04:26 ---A- C:\Documents And Settings\Utilisateur\Recent\emploi du temps.lnk
  O61 - LFC:Last File Created 24/09/2009 - 13:13:53 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPH9.tmp
  O61 - LFC:Last File Created 24/09/2009 - 13:18:24 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log
  O61 - LFC:Last File Created 24/09/2009 - 13:18:24 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp
  O61 - LFC:Last File Created 24/09/2009 - 13:19:24 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DFBDA8.tmp
  O61 - LFC:Last File Created 24/09/2009 - 13:22:59 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF342D.tmp
  O61 - LFC:Last File Created 24/09/2009 - 15:43:20 ---A- C:\Documents And Settings\Utilisateur\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2009-09-24 (16-43-20).txt
  
  0
5. Greg
  
  O61 - LFC:Last File Created 24/09/2009 - 15:52:00 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00031.log
  O61 - LFC:Last File Created 24/09/2009 - 16:14:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF4AB3.tmp
  O61 - LFC:Last File Created 24/09/2009 - 18:33:20 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\Boulot.LNK
  O61 - LFC:Last File Created 24/09/2009 - 18:33:20 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\LettreMotiveLego3.LNK
  O61 - LFC:Last File Created 24/09/2009 - 18:33:20 ---A- C:\Documents And Settings\Utilisateur\Recent\Boulot.lnk
  O61 - LFC:Last File Created 24/09/2009 - 18:33:20 ---A- C:\Documents And Settings\Utilisateur\Recent\LettreMotiveLego3.lnk
  O61 - LFC:Last File Created 24/09/2009 - 18:33:20 --H-- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Recent\index.dat
  O61 - LFC:Last File Created 24/09/2009 - 18:33:34 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Word12.pip
  O61 - LFC:Last File Created 24/09/2009 - 18:34:44 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\#SharedObjects\WWT5Z7AR\mail.google.com\wakeup.sol
  O61 - LFC:Last File Created 24/09/2009 - 18:34:44 ---A- C:\Documents And Settings\Utilisateur\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com\settings.sol
  O61 - LFC:Last File Created 24/09/2009 - 19:24:56 ---A- C:\Documents And Settings\Utilisateur\Mes documents\RegRun2\Regrun2.rr2
  O61 - LFC:Last File Created 24/09/2009 - 19:24:56 ---A- C:\Documents And Settings\Utilisateur\Mes documents\RegRun2\mydatabase.rdb
  O61 - LFC:Last File Created 24/09/2009 - 19:25:09 ---A- C:\Documents And Settings\Utilisateur\Mes documents\RegRun2\tempdatabase.rdb
  O61 - LFC:Last File Created 24/09/2009 - 19:31:46 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217
  O61 - LFC:Last File Created 24/09/2009 - 19:31:46 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217
  O61 - LFC:Last File Created 24/09/2009 - 19:31:52 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\CE4CF87733651BF1F44DD1E02FC1A8E8
  O61 - LFC:Last File Created 24/09/2009 - 19:31:52 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6
  O61 - LFC:Last File Created 24/09/2009 - 19:31:52 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6
  O61 - LFC:Last File Created 24/09/2009 - 19:32:04 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
  O61 - LFC:Last File Created 24/09/2009 - 19:32:04 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
  O61 - LFC:Last File Created 24/09/2009 - 19:32:04 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
  O61 - LFC:Last File Created 24/09/2009 - 19:32:04 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
  O61 - LFC:Last File Created 24/09/2009 - 19:32:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30
  O61 - LFC:Last File Created 24/09/2009 - 19:32:05 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30
  O61 - LFC:Last File Created 24/09/2009 - 19:32:23 ---A- C:\Documents And Settings\Utilisateur\Mes documents\RegRun2\files.txt
  O61 - LFC:Last File Created 24/09/2009 - 19:41:13 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70
  O61 - LFC:Last File Created 24/09/2009 - 19:41:13 -S-A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70
  O61 - LFC:Last File Created 24/09/2009 - 19:41:27 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00032.log
  O61 - LFC:Last File Created 24/09/2009 - 19:41:35 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00033.log
  O61 - LFC:Last File Created 24/09/2009 - 19:41:37 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF412D.tmp
  O61 - LFC:Last File Created 24/09/2009 - 19:43:16 ---A- C:\Documents And Settings\Utilisateur\Recent\CV Gregoire Longchamp.lnk
  O61 - LFC:Last File Created 24/09/2009 - 19:43:16 ---A- C:\Documents And Settings\Utilisateur\Recent\emploi 2009.lnk
  O61 - LFC:Last File Created 24/09/2009 - 19:43:34 ---A- C:\Documents And Settings\Utilisateur\Application Data\Adobe\Acrobat\9.0\SharedDataEvents
  O61 - LFC:Last File Created 24/09/2009 - 19:43:34 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater\updater.log
  O61 - LFC:Last File Created 24/09/2009 - 19:43:34 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Adobe\Updater6\aumLib.log
  O61 - LFC:Last File Created 24/09/2009 - 19:49:40 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\SJwMeConqXT9YS32d16q6EHWHOI=
  O61 - LFC:Last File Created 24/09/2009 - 19:57:06 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8244.lnk
  O61 - LFC:Last File Created 24/09/2009 - 19:58:18 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8256.lnk
  O61 - LFC:Last File Created 24/09/2009 - 19:58:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00034.log
  O61 - LFC:Last File Created 24/09/2009 - 19:59:13 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8136.lnk
  O61 - LFC:Last File Created 24/09/2009 - 19:59:32 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8078.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:00:20 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8044.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:00:30 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_8042.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:00:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\MSOut12.pip
  O61 - LFC:Last File Created 24/09/2009 - 20:00:55 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7974.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:01:15 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7960.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:01:30 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7945.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:01:44 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7944.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:01:52 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\outlook logging\firstrun.log
  O61 - LFC:Last File Created 24/09/2009 - 20:01:58 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7953.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:01:59 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7934.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:02:12 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7933.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:02:37 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7928.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:03:08 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7867.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:03:18 ---A- C:\Documents And Settings\Utilisateur\Recent\IMG_7841.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:05:16 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF3813.tmp
  O61 - LFC:Last File Created 24/09/2009 - 20:05:36 ---A- C:\Documents And Settings\Utilisateur\Application Data\Real\rnadmin\rnsystem.dat
  O61 - LFC:Last File Created 24/09/2009 - 20:05:58 -SH-- C:\Documents And Settings\Utilisateur\ntuser.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:06:53 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:06:54 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:08:57 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat
  O61 - LFC:Last File Created 24/09/2009 - 20:08:57 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat
  O61 - LFC:Last File Created 24/09/2009 - 20:16:58 -SHA- C:\Documents And Settings\Utilisateur\Local Settings\desktop.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:17:37 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\HPHA.tmp
  O61 - LFC:Last File Created 24/09/2009 - 20:17:42 ---A- C:\Documents And Settings\Utilisateur\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog
  O61 - LFC:Last File Created 24/09/2009 - 20:22:37 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\jusched.log
  O61 - LFC:Last File Created 24/09/2009 - 20:29:23 ---A- C:\Documents And Settings\Utilisateur\Application Data\Microsoft\Office\Groove12.pip
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@atdmt[2].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@bing[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@c.live[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@c.msn[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@live[2].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@msn[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@windowsmarketplace[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@zune[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\dbstore.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:30:44 -SHA- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1659004503-602162358-725345543-1003\Credentials
  O61 - LFC:Last File Created 24/09/2009 - 20:30:46 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Historique\History.IE5\MSHist012009092420090925\index.dat
  O61 - LFC:Last File Created 24/09/2009 - 20:30:47 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\dbstore.ini
  O61 - LFC:Last File Created 24/09/2009 - 20:30:48 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00035.log
  O61 - LFC:Last File Created 24/09/2009 - 20:30:51 ---A- C:\Documents And Settings\Utilisateur\Cookies\utilisateur@serving-sys[1].txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:51 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\ContactsLog.txt
  O61 - LFC:Last File Created 24/09/2009 - 20:30:55 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Messenger\greg_92@hotmail.fr\SocialNews\WNResponse.xml
  O61 - LFC:Last File Created 24/09/2009 - 20:30:56 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00036.log
  O61 - LFC:Last File Created 24/09/2009 - 20:30:59 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{09646e85-f096-4fda-bb04-1c29bb674a87}\DBStore\LogFiles\edb00037.log
  O61 - LFC:Last File Created 24/09/2009 - 20:31:02 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\sessionstore.bak
  O61 - LFC:Last File Created 24/09/2009 - 20:32:05 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office\Microsoft Office Word 2007.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:32:10 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\jmfElVqaJfmWpSpyHIUTn9zBIiQ=
  O61 - LFC:Last File Created 24/09/2009 - 20:32:13 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Microsoft\Windows Live Contacts\{8f9984fa-f3ae-4766-87b4-9dc4f4ac9f85}\DBStore\edb.chk
  O61 - LFC:Last File Created 24/09/2009 - 20:37:22 ---A- C:\Documents And Settings\Utilisateur\Bureau\mbam-setup.exe
  O61 - LFC:Last File Created 24/09/2009 - 20:38:31 ---A- C:\Documents And Settings\Utilisateur\Bureau\mbam-rules.exe
  O61 - LFC:Last File Created 24/09/2009 - 20:38:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\cert8.db
  O61 - LFC:Last File Created 24/09/2009 - 20:38:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\cookies.sqlite
  O61 - LFC:Last File Created 24/09/2009 - 20:38:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\key3.db
  O61 - LFC:Last File Created 24/09/2009 - 20:38:39 ---A- C:\Documents And Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\prefs.js
  O61 - LFC:Last File Created 24/09/2009 - 20:38:39 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\Cache\_CACHE_MAP_
  O61 - LFC:Last File Created 24/09/2009 - 20:39:52 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:39:52 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:39:52 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:39:52 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
  O61 - LFC:Last File Created 24/09/2009 - 20:40:12 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt
  O61 - LFC:Last File Created 24/09/2009 - 20:40:20 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  O61 - LFC:Last File Created 24/09/2009 - 20:42:36 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\~DF1042.tmp
  O61 - LFC:Last File Created 24/09/2009 - 20:42:59 ---A- C:\Documents And Settings\Utilisateur\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2009-09-24 (21-42-59).txt
  O61 - LFC:Last File Created 24/09/2009 - 20:54:29 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\8ahffw2FIAXPsIdQC5uyjinwUOwM=
  O61 - LFC:Last File Created 24/09/2009 - 21:00:27 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\pSZGvE4W5pOFFGnbaZ2fkD2F9tdM=
  O61 - LFC:Last File Created 24/09/2009 - 21:03:49 ---A- C:\Documents And Settings\Utilisateur\Local Settings\Temp\MessengerCache\X4Iq4duE2upptVdHIyCEqQ2FETPU=
  O61 - LFC:Last File Created 24/09/2009 - 21:05:15 ---A- C:\Documents And Settings\Utilisateur\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2009-09-24 (22-05-15).txt
  
  0
Réponse 4 / 24
Greg

Rapport de ZHPDiag v1.24.15 par Nicolas Coolman
Run by Utilisateur at 24/09/2009 22:41:26
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Microsoft Windows XP (5.1.2600) Service Pack 2
MSIE: Internet Explorer v6.0.2900.2180
MFIE: Mozilla Firefox (3.0.14)

Boot mode: Normal (Normal boot)
Total RAM: 3,1 Gb (57 % free)
System drive C: 105 Go (82 Go free)

---\\ Processus lancés
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\services.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\spoolsv.exe

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - %SystemRoot%\system32\shdocvw.dll

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data=1
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NETGEAR WPN311 Smart Wizard.lnk - C:\Program Files\NETGEAR\WPN311\wlancfg5.exe
O4 - Global Startup: OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll,103
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe,302

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\Windows\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\Windows\system32\SHELL32.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - %SystemRoot%\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Atheros Configuration Service (ACS) - C:\WINDOWS\system32\acs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service (Autodesk Licensing Service) - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Capture Device Service (Capture Device Service) - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice
O23 - Service: Java Quick Starter (JavaQuickStarterService) - C:\Program Files\Java\jre6\bin\jqs.exe -service -config C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: ForceWare IP service (nSvcIp) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HP Usg Daily.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HP Usg Login.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigIE
O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: DirectAnimation - {0129464F-F733-5560-57A6-C933E2A43019} - (not file)
O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Logiciel de navigation hors connexion - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Aide sur Internet Explorer - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: DirectAnimation - {47C5F0E4-7576-7B6F-D6C4-5C6742FFBED5} - (not file)
O40 - ASIC: Personnalisation du navigateur - {495B23D0-41FA-6461-67B9-53B7C5CF7A4B} - (not file)
O40 - ASIC: Themes Setup - {4BEE6EA6-95B0-EAE3-6181-3501B32E15D5} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: Outils d'installation Internet Explorer - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub
O40 - ASIC: Accès au site MSN - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {70D9CC45-E6B1-D25D-5438-AAA80003DACD} - (not file)
O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)
O40 - ASIC: Web Folders - {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file)
O40 - ASIC: Liaison de données Dynamic HTML - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)
O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)
O40 - ASIC: Polices de base Internet Explorer - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx
O40 - ASIC: Aide HTML - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Personnalisation du navigateur - {E90DF8EC-1950-7226-4134-17D11C8B5324} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)
O40 - ASIC: .NET Framework - {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - (not file)
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Télécharges ComboFix à partir d'un de ces liens :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
https://forospyware.com
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Et important, enregistre le sur le bureau.

Avant d'utiliser ComboFix :

? Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

? Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
la protection en temps réel de ton Antivirus et de tes Antispywares,
qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt,.
est automatiquement sauvegardé et rangé à C:\Combofix.txt)

? Réactive la protection en temps réel de ton Antivirus et de tes Antispywares,
avant de te reconnecter à internet.

? Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
0
1. greg
  
  ComboFix 09-09-25.01 - Utilisateur 26/09/2009 22:21.1.2 - NTFSx86
  Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.2047.1578 [GMT 2:00]
  Lancé depuis: c:\documents and settings\Utilisateur\Bureau\ComboFix.exe
  AV: avast! antivirus 4.8.1282 [VPS 090926-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
  FW: ActiveArmor Firewall *disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  C:\-1810603605
  c:\recycler\S-1-5-21-5049694146-5887729528-724541122-8929
  c:\recycler\S-1-5-21-6456316109-4340553886-665885874-5469
  c:\recycler\S-1-5-21-9187688055-3968565012-512952483-5052
  c:\recycler\S-1-5-21-9636116151-1157904281-266888900-4785
  c:\windows\Installer\166d203.msi
  c:\windows\UA000082.DLL
  
  .
  ((((((((((((((((((((((((((((( Fichiers créés du 2009-08-26 au 2009-09-26 ))))))))))))))))))))))))))))))))))))
  .
  
  2009-09-24 20:40 . 2009-09-24 20:42 -------- d-----w- c:\program files\ZHPDiag
  2009-09-24 19:39 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
  2009-09-24 19:39 . 2009-09-24 19:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
  2009-09-24 19:39 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
  2009-09-24 18:25 . 2009-09-24 18:25 2 --shatr- c:\windows\winstart.bat
  2009-09-21 21:01 . 2009-09-21 21:01 -------- d-----w- C:\GenProc
  2009-09-17 16:27 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
  2009-09-17 16:27 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
  2009-09-17 11:28 . 2009-09-17 11:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Adobe Systems
  2009-09-17 11:27 . 2009-09-17 11:27 -------- d-----w- c:\program files\Fichiers communs\Adobe Systems Shared
  2009-09-16 23:03 . 2009-09-26 15:24 -------- d-----w- c:\documents and settings\Utilisateur\Tracing
  2009-09-16 22:11 . 2009-09-16 22:11 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
  2009-09-16 22:10 . 2009-09-16 22:10 -------- d-----w- c:\program files\Microsoft
  2009-09-16 22:09 . 2009-09-16 22:09 -------- d-----w- c:\program files\Windows Live SkyDrive
  2009-09-16 22:09 . 2009-09-16 22:11 -------- d-----w- c:\program files\Windows Live
  2009-09-16 22:04 . 2009-09-16 22:04 -------- d-----w- c:\program files\Fichiers communs\Windows Live
  2009-09-08 13:47 . 2009-09-08 20:51 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2009-09-25 20:24 . 2008-11-17 16:18 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\dvdcss
  2009-09-24 12:12 . 2009-07-01 14:13 -------- d-----w- c:\program files\Lavasoft
  2009-09-21 20:51 . 2008-12-06 20:09 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Azureus
  2009-09-18 00:31 . 2008-11-14 23:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
  2009-09-17 11:27 . 2008-11-17 11:48 -------- d-----w- c:\program files\Fichiers communs\Adobe
  2009-09-14 10:11 . 2008-11-16 23:08 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\U3
  2009-09-07 19:06 . 2008-12-06 20:07 -------- d-----w- c:\program files\Vuze
  2009-09-07 17:17 . 2008-11-14 23:40 112952 ----a-w- c:\documents and settings\Utilisateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  2009-08-24 17:10 . 2009-08-24 17:07 410984 ----a-w- c:\windows\system32\deploytk.dll
  2009-08-24 17:10 . 2009-08-24 17:10 -------- d-----w- c:\program files\Java
  2009-08-17 21:05 . 2002-08-30 12:00 86074 ----a-w- c:\windows\system32\perfc00C.dat
  2009-08-17 21:05 . 2002-08-30 12:00 513046 ----a-w- c:\windows\system32\perfh00C.dat
  2009-08-05 09:06 . 2004-08-19 14:09 205312 ----a-w- c:\windows\system32\mswebdvd.dll
  2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
  2009-07-17 18:56 . 2004-08-19 14:09 58880 ----a-w- c:\windows\system32\atl.dll
  2009-07-13 21:43 . 2004-08-19 14:09 286208 ----a-w- c:\windows\system32\wmpdxm.dll
  2009-07-10 11:01 . 2009-07-10 11:01 307560 ----a-w- c:\windows\WLXPGSS.SCR
  .
  
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
  "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-08 8523776]
  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-08 81920]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
  "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-12 81000]
  "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-01-04 185872]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
  "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-11-22 188416]
  "HPHmon04"="c:\windows\system32\hphmon04.exe" [2002-11-22 348160]
  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-24 148888]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
  "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
  "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-01-08 1626112]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]
  
  c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
  OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
  
  c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
  Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2009-1-26 110592]
  NETGEAR WPN311 Smart Wizard.lnk - c:\program files\NETGEAR\WPN311\wlancfg5.exe [2006-12-4 1503232]
  
  [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Synchronizer.lnk]
  path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Synchronizer.lnk
  backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
  
  [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Acrobat.lnk]
  path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Acrobat.lnk
  backup=c:\windows\pss\Lancement rapide d'Adobe Acrobat.lnkCommon Startup
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%windir%\\system32\\sessmgr.exe"=
  "c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
  "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
  "c:\\Program Files\\Vuze\\Azureus.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
  "c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
  "c:\\Program Files\\Valve Lan\\hl.exe"=
  "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
  "%windir%\\system32\\lsass.exe"=
  "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
  "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
  "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
  
  R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [17/11/2008 01:20 110160]
  R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17/11/2008 01:20 20560]
  S2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [10/03/2008 01:04 65536]
  .
  Contenu du dossier 'Tâches planifiées'
  
  2009-09-26 c:\windows\Tasks\HP Usg Daily.job
  - c:\program files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 10:50]
  
  2009-09-26 c:\windows\Tasks\HP Usg Login.job
  - c:\program files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 10:50]
  .
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://www.google.fr/
  uInternet Settings,ProxyOverride = *.local
  IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
  FF - ProfilePath - c:\documents and settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\
  FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
  FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
  FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
  
  ---- PARAMETRES FIREFOX ----
  FF - user.js: yahoo.homepage.dontask - true.
  
  **************************************************************************
  
  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2009-09-26 22:23
  Windows 5.1.2600 Service Pack 2 NTFS
  
  Recherche de processus cachés ...
  
  Recherche d'éléments en démarrage automatique cachés ...
  
  Recherche de fichiers cachés ...
  
  c:\docume~1\UTILIS~1\LOCALS~1\Temp\RGI2A5.tmp 7136 bytes
  
  Scan terminé avec succès
  Fichiers cachés: 1
  
  **************************************************************************
  .
  Heure de fin: 2009-09-26 22:24
  ComboFix-quarantined-files.txt 2009-09-26 20:24
  
  Avant-CF: 88 349 573 120 octets libres
  Après-CF: 88 737 705 984 octets libres
  
  WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
  [boot loader]
  timeout=2
  default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
  [operating systems]
  c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
  multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect /usepmtimer
  
  153 --- E O F --- 2009-09-18 00:31
  
  0
Réponse 6 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

> Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)
- Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie/colle dedans les lignes suivantes :

File::
c:\windows\winstart.bat

- Enregistre ce fichier sous le nom CFScript
- Fait un glisser/déposer de ce fichier CFScrïpt sur le fichier ComboFix.exe comme sur cette image. (Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris.) Combofix va démarrer.
- Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
- Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
- Ne touche à rien tant que le scan n'est pas terminé sinon le PC peut planter !
- Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Note : Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

===============
Ensuite :

Télécharge ATF Cleaner par Atribune:
http://www.atribune.org/ccount/click.php?id=1
Double-clique ATF-Cleaner.exe afin de lancer le programme.
Sous l'onglet Main, choisis : Select All
Clique sur le bouton Empty Selected
Si tu utilises le navigateur Firefox :
Clique Firefox au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
Si tu utilises le navigateur Opera :
Clique Opera au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
Clique Exit, du menu prinicipal, afin de fermer le programme.
Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.
0
1. greg
  
  Salut,
  merci encore pour ton aide.
  Cependant je ne trouve pas de fichier au nom de c:\windows\winstart.bat
  Peux tu m'aider à nouveau?
  
  0
Réponse 7 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
```
Cependant je ne trouve pas de fichier au nom de c:\windows\winstart.bat
Peux tu m'aider à nouveau?
```
Je ne te demande pas de le trouver mais d'éxécuter ce qui est écrit post#19 .
0
1. greg
  
  ComboFix 09-09-25.01 - Utilisateur 27/09/2009 22:32.2.2 - NTFSx86
  Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.2047.1562 [GMT 2:00]
  Lancé depuis: c:\documents and settings\Utilisateur\Bureau\ComboFix.exe
  Commutateurs utilisés :: c:\documents and settings\Utilisateur\Bureau\CFScript.txt
  AV: avast! antivirus 4.8.1282 [VPS 090927-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
  FW: ActiveArmor Firewall *disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
  
  FILE ::
  "c:\windows\winstart.bat"
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  c:\windows\winstart.bat
  
  .
  ((((((((((((((((((((((((((((( Fichiers créés du 2009-08-27 au 2009-09-27 ))))))))))))))))))))))))))))))))))))
  .
  
  2009-09-24 20:40 . 2009-09-24 20:42 -------- d-----w- c:\program files\ZHPDiag
  2009-09-24 19:39 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
  2009-09-24 19:39 . 2009-09-24 19:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
  2009-09-24 19:39 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
  2009-09-21 21:01 . 2009-09-21 21:01 -------- d-----w- C:\GenProc
  2009-09-17 16:27 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
  2009-09-17 16:27 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
  2009-09-17 11:28 . 2009-09-17 11:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Adobe Systems
  2009-09-17 11:27 . 2009-09-17 11:27 -------- d-----w- c:\program files\Fichiers communs\Adobe Systems Shared
  2009-09-16 23:03 . 2009-09-27 16:00 -------- d-----w- c:\documents and settings\Utilisateur\Tracing
  2009-09-16 22:11 . 2009-09-16 22:11 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
  2009-09-16 22:10 . 2009-09-16 22:10 -------- d-----w- c:\program files\Microsoft
  2009-09-16 22:09 . 2009-09-16 22:09 -------- d-----w- c:\program files\Windows Live SkyDrive
  2009-09-16 22:09 . 2009-09-16 22:11 -------- d-----w- c:\program files\Windows Live
  2009-09-16 22:04 . 2009-09-16 22:04 -------- d-----w- c:\program files\Fichiers communs\Windows Live
  2009-09-08 13:47 . 2009-09-08 20:51 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2009-09-26 21:43 . 2008-11-17 16:18 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\dvdcss
  2009-09-24 12:12 . 2009-07-01 14:13 -------- d-----w- c:\program files\Lavasoft
  2009-09-21 20:51 . 2008-12-06 20:09 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Azureus
  2009-09-18 00:31 . 2008-11-14 23:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
  2009-09-17 11:27 . 2008-11-17 11:48 -------- d-----w- c:\program files\Fichiers communs\Adobe
  2009-09-14 10:11 . 2008-11-16 23:08 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\U3
  2009-09-07 19:06 . 2008-12-06 20:07 -------- d-----w- c:\program files\Vuze
  2009-09-07 17:17 . 2008-11-14 23:40 112952 ----a-w- c:\documents and settings\Utilisateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  2009-08-24 17:10 . 2009-08-24 17:07 410984 ----a-w- c:\windows\system32\deploytk.dll
  2009-08-24 17:10 . 2009-08-24 17:10 -------- d-----w- c:\program files\Java
  2009-08-17 21:05 . 2002-08-30 12:00 86074 ----a-w- c:\windows\system32\perfc00C.dat
  2009-08-17 21:05 . 2002-08-30 12:00 513046 ----a-w- c:\windows\system32\perfh00C.dat
  2009-08-05 09:06 . 2004-08-19 14:09 205312 ----a-w- c:\windows\system32\mswebdvd.dll
  2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
  2009-07-17 18:56 . 2004-08-19 14:09 58880 ----a-w- c:\windows\system32\atl.dll
  2009-07-13 21:43 . 2004-08-19 14:09 286208 ----a-w- c:\windows\system32\wmpdxm.dll
  2009-07-10 11:01 . 2009-07-10 11:01 307560 ----a-w- c:\windows\WLXPGSS.SCR
  .
  
  ((((((((((((((((((((((((((((( SnapShot@2009-09-26_20.24.03 )))))))))))))))))))))))))))))))))))))))))
  .
  + 2009-09-27 16:00 . 2009-09-27 16:00 16384 c:\windows\Temp\Perflib_Perfdata_50c.dat
  .
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
  "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-08 8523776]
  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-08 81920]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
  "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-12 81000]
  "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-01-04 185872]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
  "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-11-22 188416]
  "HPHmon04"="c:\windows\system32\hphmon04.exe" [2002-11-22 348160]
  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-24 148888]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
  "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
  "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-01-08 1626112]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]
  
  c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
  OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
  
  c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
  Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2009-1-26 110592]
  NETGEAR WPN311 Smart Wizard.lnk - c:\program files\NETGEAR\WPN311\wlancfg5.exe [2006-12-4 1503232]
  
  [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Synchronizer.lnk]
  path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Synchronizer.lnk
  backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
  
  [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Acrobat.lnk]
  path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Acrobat.lnk
  backup=c:\windows\pss\Lancement rapide d'Adobe Acrobat.lnkCommon Startup
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%windir%\\system32\\sessmgr.exe"=
  "c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
  "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
  "c:\\Program Files\\Vuze\\Azureus.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
  "c:\\Program Files\\Autodesk\\Backburner\\server.exe"=
  "c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
  "c:\\Program Files\\Valve Lan\\hl.exe"=
  "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
  "%windir%\\system32\\lsass.exe"=
  "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
  "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
  "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
  
  R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [17/11/2008 01:20 110160]
  R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17/11/2008 01:20 20560]
  S2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [10/03/2008 01:04 65536]
  .
  Contenu du dossier 'Tâches planifiées'
  
  2009-09-27 c:\windows\Tasks\HP Usg Daily.job
  - c:\program files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 10:50]
  
  2009-09-27 c:\windows\Tasks\HP Usg Login.job
  - c:\program files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 10:50]
  .
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://www.google.fr/
  uInternet Settings,ProxyOverride = *.local
  IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
  FF - ProfilePath - c:\documents and settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\6k8foekn.default\
  FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
  FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
  FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
  
  ---- PARAMETRES FIREFOX ----
  FF - user.js: yahoo.homepage.dontask - true.
  
  **************************************************************************
  
  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2009-09-27 22:34
  Windows 5.1.2600 Service Pack 2 NTFS
  
  Recherche de processus cachés ...
  
  Recherche d'éléments en démarrage automatique cachés ...
  
  Recherche de fichiers cachés ...
  
  Scan terminé avec succès
  Fichiers cachés: 0
  
  **************************************************************************
  .
  Heure de fin: 2009-09-27 22:35
  ComboFix-quarantined-files.txt 2009-09-27 20:35
  ComboFix2.txt 2009-09-26 20:24
  
  Avant-CF: 88 734 990 336 octets libres
  Après-CF: 88 709 484 544 octets libres
  
  146 --- E O F --- 2009-09-18 00:31
  
  0
Réponse 8 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Comment va le pc ?
0
1. greg
  
  Salut JFK,
  malheureusement le problème persiste.
  J'ai lancé mon avast et il détecte toujours le meme virus.
  Si tu as encore des idées...
  Merci d'avance pour ton aide.
  
  0
Réponse 9 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
```
malheureusement le problème persiste.
J'ai lancé mon avast et il détecte toujours le meme virus. 
```
Il se peut que Avast détecte un "faux-positif" ,cela ne m'étonnerait pas de sa part :)

Peut tu me donner le chemin d'acces complet du fichier détecté ?
0
1. greg
  
  Voici le nom du fichier détecté:
  C:\wlvuy.exe\install.exe
  
  0
Réponse 10 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
```
Voici le nom du fichier détecté:
C:\wlvuy.exe\install.exe
```
Ok ,tu va faire ceci afin de déterminer si ce fichier est bien un malware :

Il va falloir analyser un ou des fichier(s) suspect(s) !

Il se peut qu'il se trouvent dans les " dossiers cachés " du systeme.
Il faut donc les rendre visibles pour le scan.

Pour afficher les dossiers et fichiers cachés:

Panneau de configuration > Options des dossiers > onglet Affichage.

Coche Afficher les fichiers et dossiers cachés,
Décoche Masquer les extensions de fichiers connus
Décoche Masquer les fichiers protégés du Système.
Un message de mise en garde va apparaitre. Clique sur OK pour confirmer ton choix.
Les fichiers et dossiers cachés du système apparaitront alors dans l'explorateur Windows en transparence.

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier : C:\wlvuy.exe\install.exe

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.
0
Réponse 11 / 24
greg

0 bytes size received / Se ha recibido un archivo vacio
0
Réponse 12 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Tu as du te tromper ,tu n'as pas envoyer le fichier ...?!
0
Réponse 13 / 24
greg

Salut JFK,
le problème est que je n'arrive pas à ouvrir le fichier: C:\wlvuy.exe
Du coup je ne peux pas envoyer le fichier: C:\wlvuy.exe\install.exe
via ce https://www.virustotal.com/gui/
Pourtant, avast se déclenche lorsque j'analyse le fichier wlvuy.exe.
Et la fenêtre d'erreur me détecte le virus sous le nom C:\wlvuy.exe\install.exe
Merci encore de ton aide.
As tu d'autres idées...
0
Réponse 14 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
```
le problème est que je n'arrive pas à ouvrir le fichier: C:\wlvuy.exe 
```
Pour quelles raisons n'arrives tu pas a ouvrir ce dossier ?

Je pourrais te faire supprimer ce fichier mais je voudrais savoir avant si il est bien illégitime .
0
Réponse 15 / 24
greg

C'est un dossier inaccessible.
Quand je veux l'ouvrir directement, voici le message windows:
Windows ne parvient pas à accéder au périphérique, au chemin d'accès ou au fichier spécifié. Vous ne disposez peut-être pas des autorisations appropriées pour avoir accès à l'élément.
0
Réponse 16 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Tu va changer les droits de ce fichier pour pouvoir le consulté comme ceci
0
Réponse 17 / 24
greg

Je t'envoie les autres virus que avast trouve:
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP67\A0006371.exe\install.exe
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP67\A0006463.exe\install.exe
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP67\A0006570.exe\install.exe
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP69\A0006757.exe\install.exe
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP70\A0006968.exe\install.exe
C:\System Volume Information\_restore{C5A72E2A-DDF6-44EF-8741-1381D29B4213}\RP71\A0006987.exe\install.exe

Je sais pas si ça peut t'aider?
Merci
0
Réponse 18 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
```
C:\System Volume Information\_restore
```
C'est la resto systeme ,on la purgera a la fin (c'est pas un soucis ) .
0
Réponse 19 / 24
greg

Voici la méthode pour ouvrir le fichier.
Je bloque à une certaine étape.

1- Cliquer sur l'élément concerné avec le bouton droit, puis choisir Propriétés.
2- Dans l'onglet sécurité, cliquer sur Paramètres avancés.
3- Si l'onglet Sécurité n'apparaît pas sous Windows XP Pro, dans le menu Outils, choisir Options des dossiers, puis dans la fenêtre cliquer sur l'onglet Affichage et décocher "utiliser le partage de fichiers simple".
l'onglet sécurité n'apparait toujours pas dans les propriétés du fichier.
4- Dans l'onglet Propriétaire, ajouter l'utilisateur concerné en tant que propriétaire. Cocher la case "Remplacer le propriétaire des sous-conteneurs et des objets", puis valider.
5- Il est essentiel de noter que l'option "refuser" a priorité sur "autoriser". Ainsi, il est préférable de décocher "autoriser" plutôt que de cocher "refuser". Par ailleurs, si l'utilisateur concerné fait partie de plusieurs groupes et que l'accès est refusé à l'un des groupes, alors l'accès lui sera refusé !
0
Réponse 20 / 24
jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175

Apparement il ne serait pas détecté a tord ==> http://www.prevx.com/filenames/X1621758182354294385-X1/WLVUY.EXE.html

Télécharge OTM de OldTimer sur ton Bureau en cliquant sur ce lien :

http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

Double-clique sur OTMoveIt3.exe pour le lancer.

Vérifie que la case devant "Unregister Dll's and Ocx's est bien cochée.

Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans le cadre de gauche de OTMoveIt : "Paste instructions for item to be moved".

:processes
explorer.exe

:Reg

:files
C:\wlvuy.exe
:services

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]

Clique sur "MoveIt!" pour lancer la suppression.

Le résultat apparaitra dans le cadre "Results".

Clique sur "Exit" pour fermer.

Poste le rapport situé dans C:\_OTMoveIt\MovedFiles sous le nom xxxxxx_xxxxxxxxxx.log .

Il te sera peut-être demander de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.
0

Virus Win32:Neredr [Drp]

24 réponses

Discussions similaires

Newsletters