Salut,

Pourquoi tu ne poursuit pas avec "sherred" ?

Il est plein de "MER**" ton pc
faut nettoyer tout ca mais y a du boulot.
a tu un XP clean pres de toi pour comparer?

V-X, qu'est-ce que "sherred", une fonction d'Hijackthis ?

korhunt, j'avoue qu'il est pas clean (et je pense même que quasiment aucun PC connecté à la toile n'est pas infecté)
Donc pour trouver un XP clean à côté, il y a celui de mon frère avec lequel j'ai fait le UBCD4WIN. Il n'a pas de problèmes majeurs mais je ne peux pas affirmer qu'il est clean. Il a Antivir et Kerio (il veut tester des Firewall pour changer Zone-Alarm, j'ai hérité de Comodo...).

Re,

- le problème persiste alors je m'informe alors sur ce virus Bagle et la manière de le supprimer, je suis alors une procédure (http://sherred-aide-info-xp.forumperso.com/... qui utilise ELIBAGLA, Combofix, MAM (je la fais plusieurs fois et aussi en mode sans échec)

Re,

il n'a pas posté sur son forum , il a suivi une procédure décrite sur ce forum pour supprimer Bagle ...



Voilà ce que tu vas faire :



1-IMPORTANT :
je rappelle que bagle est amené par un crack et qu'il se relance dès que tu te sers de celui ci; même si tu ne sers pas, il peut se relancer de lui même au démarrage de ton PC . En claire :
Essaye surtout de te rappeler si récemment tu n'as pas cliquer sur un "patch" ou un "keygen" pour installer un logiciel, un jeu cracké ou avoir une version complète d'un soft , et qu'il ne se soit rien passé de particulier ... C'est la que les bagles s'infiltrent ! Si tu retrouves ce crack en particulier ,scratch tout ( le crack, le soft ou encore les zip concernés). Si tu ne te rappelles plus trop , je te conseille fortement de supprimer tous les cracks qui sont sur ton PC ... ;)


2-Télécharge FindyKill de Chiquitine29 :

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

->Enregistre le sur ton bureau et pas ailleurs !

!! Déconnecte toi et ferme toutes applications en cours !!

( Si ton anti-virus s'affolle au moment de l'enregistrement ou de l'utilisation de l'outil , ignore l'alerte ...)

-> Clique sur "FindyKill.exe" pour lancer l'installe de l'outil . Ne touche surtout pas aux paramètres d'installation.


Notes importantes :
* si tu as le prg Elibagla sur ton PC , supprime le ( risque de conflit entre les deux outils ) .

--> Double clique sur le raccourci " FindyKill " qui est sur ton bureau .
( sur la 1er fenêtre , tapes f puis [entrèe] pour la version en français ).

-->choisis l'option 1 ( recherche ) . Puis laisse travailler l'outil sans rien toucher ...

Une fois terminé, poste le rapport FindyKill.txt qui est généré ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )

PS : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.


Tuto : http://www.malekal.com/tutorial_FindyKill.php



"Baby, I'm going on an airplane, And I don't know if I'll be back again"
IMPORTANT : ne vous croyez pas tiré d'affaire tant qu'on ne 
vous l'a pas dit !

Ok merci je fais ça tout de suite :)

Voilà :



----------------- FindyKill V4.710 ------------------

* User : Léonis - ROMAIN
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 13:27:36 le 24/12/2008
* Windows XP - Internet Explorer 7.0.5730.13

((((((((((((((((( *** Recherche *** ))))))))))))))))))


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\igfxsrvc.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:


»»»» Presence des fichiers dans C:\WINDOWS


»»»» Presence des fichiers dans C:\WINDOWS\Prefetch


»»»» Presence des fichiers dans C:\WINDOWS\system32


»»»» Presence des fichiers dans C:\WINDOWS\system32\config\systemprofile\AppData\Roaming


»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers


»»»» Presence des fichiers dans C:\Documents and Settings\Léonis\Application Data

Found ! [23/12/2008 20:50] - "C:\Documents and Settings\Léonis\Application Data\drivers"

»»»» Presence des fichiers dans C:\DOCUME~1\LONIS~1\LOCALS~1\Temp


»»»» Presence des fichiers dans C:\Documents and Settings\Léonis\Local Settings\Temporary Internet Files\Content.IE5

Found ! [21/07/2007 18:55] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\26A4AFDD6DB64A03ADFA6DAB836DB8D6_more.jpg
Found ! [02/07/2007 17:10] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [21/07/2007 18:57] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Found ! [25/06/2008 17:28] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{0A17FB11-FE13-4C83-945E-FB9588BB6415}.jpg
Found ! [15/10/2008 12:23] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{0BCA49C3-0BC9-4D69-9337-2837F0A7B647}.jpg
Found ! [09/03/2007 21:00] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{11CA2DB6-7F54-4FA8-B648-97B8E4530CC7}.jpg
Found ! [04/03/2007 11:50] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{3582C5EA-632C-4209-86CD-E182237DCB64}.jpg
Found ! [03/05/2008 12:44] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{3F1121FB-159B-4439-92FF-5B64E268A7FF}.jpg
Found ! [03/05/2008 12:21] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{4F9DB836-B799-4E15-8745-DE853B64DCF2}.jpg
Found ! [03/05/2008 13:10] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{7034CB64-2CAD-451D-A7F3-FBEC3676ED32}.jpg
Found ! [15/10/2008 14:11] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{8B64537F-60F1-48CD-91DD-85C1FBB01724}.jpg
Found ! [10/03/2007 14:07] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{97214968-3A37-43B3-89A0-BB6482C8E5B0}.jpg
Found ! [03/05/2008 13:27] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{B6463356-8C0E-4550-90D3-9CC3E406B485}.jpg
Found ! [11/12/2007 21:23] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{EB641541-42FD-4EB8-99B1-61D0C782993E}.jpg
Found ! [03/05/2008 14:43] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Found ! [03/05/2008 14:43] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Leo Ferre\leo ferré\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Large.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Leo Ferre\leo ferré\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Small.jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
COMODO Internet Security="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

[HKEY_CURRENT_USER\software\local appwizard-generated applications\CPFFileSubmission]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msmsgs]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

--------------- [ Registre / Clés infectieuses ] ----------------


Found ! - HKEY_USERS\S-1-5-21-3138020122-2873969652-2698996791-1005\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro

--------------- [ Etat / Services ] ----------------



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 2

/!\ Ip6Fw - Type de démarrage = 4

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2



--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe

F: - Lecteur amovible


+- presence des fichiers :



--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------

Bien ...


des restes ! ...


Impératif :

* Désactive Comodo et AntiVir le temps de la manipe !
* Supprime Elibagla sinon les deux outils risquent de se dire merde au reboot !



la suite :

1- Important :
Branche toutes tes unités externes au PC ( DD externes , clé USB , lecteur mp3, ect...) mais sans les ouvrir !
Tu les retireras après la manipe ...


2- ! Ferme toutes applications en cours !

Relance FindyKill :

-> choisis cette fois-ci l'option 2 .

/!\ ton PC va redémarrer de lui même , c'est normal !... Laisse travailler l'outil jusqu' à l'apparition du message :
"nettoyage terminé" .

Note : lors du message d'avertissement , clique sur " Ok " .

--> ensuite poste le nouveau rapport FindyKill.txt qui est généré et attends la suite ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )


PS : Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr , Onglet "Fichier"-> "Nouvelle tâche":
tape explorer.exe et valide .


"Baby, I'm going on an airplane, And I don't know if I'll be back again"
IMPORTANT : ne vous croyez pas tiré d'affaire tant qu'on ne 
vous l'a pas dit !

Houla ptin ya de koi paniker moi ce ke je ferait c de tous remettre a zéro sa mé deja arriver a moi :-(

Voilà :




----------------- FindyKill V4.710 ------------------

* User : L‚onis - ROMAIN
* executed from : C:\Program Files\FindyKill
* Update on 21/12/08 par Chiquitine29
* Start at 13:49:18 the 24/12/2008
* Windows XP - Internet Explorer 7.0.5730.13


((((((((((((((( *** deleting *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in C:


»»»» Supression files in C:\WINDOWS


»»»» Supression files in C:\WINDOWS\Prefetch


»»»» Supression files in C:\WINDOWS\system32


»»»» Supression files in C:\WINDOWS\system32\config\systemprofile\AppData\Roaming


»»»» Supression files in C:\WINDOWS\system32\drivers


»»»» Supression files in C:\Documents and Settings\L‚onis\Application Data

Deleted ! - "C:\Documents and Settings\L‚onis\Application Data\drivers"

»»»» Supression files in C:\DOCUME~1\LONIS~1\LOCALS~1\Temp


»»»» Supression files in C:\Documents and Settings\L‚onis\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\26A4AFDD6DB64A03ADFA6DAB836DB8D6_more.jpg
Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0A17FB11-FE13-4C83-945E-FB9588BB6415}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0BCA49C3-0BC9-4D69-9337-2837F0A7B647}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{11CA2DB6-7F54-4FA8-B648-97B8E4530CC7}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{3582C5EA-632C-4209-86CD-E182237DCB64}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{3F1121FB-159B-4439-92FF-5B64E268A7FF}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{4F9DB836-B799-4E15-8745-DE853B64DCF2}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7034CB64-2CAD-451D-A7F3-FBEC3676ED32}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{8B64537F-60F1-48CD-91DD-85C1FBB01724}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{97214968-3A37-43B3-89A0-BB6482C8E5B0}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B6463356-8C0E-4550-90D3-9CC3E406B485}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{EB641541-42FD-4EB8-99B1-61D0C782993E}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Leo Ferre\leo ferr‚\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Leo Ferre\leo ferr‚\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Small.jpg

--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
Deleted ! - HKEY_USERS\S-1-5-21-3138020122-2873969652-2698996791-1005\Software\Local AppWizard-Generated Applications\winupgro

--------------- [ States / Restarting of services ] ----------------



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2


--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe

F: - Lecteur amovible

G: - Lecteur amovible


+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Cracks / Keygen ] ----------------

C:\Documents and Settings\L‚onis\Bureau\Chicken Invaders 3\file crack ban ga.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\AOE.PPC.v1.25.Full\Crack
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\AOE.PPC.v1.25.Full\Crack\aoeppc.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen.rar
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Aide installation.txt
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Meta.txt
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\tt7_keygen.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\TTN_7.450.9028.cab
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Agglom_rations.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Agglom_rations.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cline.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Clublibertin.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Clublibertin.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cname.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cnode.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cphoneme.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\crpoi.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cspeech_FRA.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Distributeurs_Bancaires.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Distributeurs_Bancaires.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Essence_Discount.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Essence_Discount.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\faces.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-14.meta
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-14.meta.dct
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-15.meta
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France.pna
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_110.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_110.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_130.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_130.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_30.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_30.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_50.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_50.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_70.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_70.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Magasin_Lidl.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Magasin_Lidl.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\mapinfo.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Mcdonalds_France.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Mcdonalds_France.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Metrorer_Paris.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Metrorer_Paris.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\poi.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Restaurant_Quick.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Restaurant_Quick.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-030.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-030.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-050.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-050.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-070.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-070.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-080.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-080.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-090.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-090.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-110.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-110.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-130.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-130.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\tables.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\tmccodes.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Tout_Paris.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Tout_Paris.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\traffic.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur00_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur00_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07840.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07840.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07840.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07840.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,10424.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,10424.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,11224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,11224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,09624.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,09624.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,10424.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,10424.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,11224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,11224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,05760.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,05760.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,08160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,08160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,10560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,10560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,05760.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,05760.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,08160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,08160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,10560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,10560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,09624.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,09624.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,07200.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,07200.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,14400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,14400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_18720,07200.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_18720,07200.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur18_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur18_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\europe.ver
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\collected.ini
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data00.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data00.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data01.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data01.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data02.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data02.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data04.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data04.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data05.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data05.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data10.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data10.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data11.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data11.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data12.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data12.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data13.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data13.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data14.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data14.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data15.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data15.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data17.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data17.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data18.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data18.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data19.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data19.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data20.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data20.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data21.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data21.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data22.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data22.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data23.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data23.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data24.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data24.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data25.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data25.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data26.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data26.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data27.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data27.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data28.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data28.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data29.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data29.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data46.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data46.vif
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\asm\asmfr_MODESTE-INTRO-64KO-MASM32_15285\Infoticaires2002_src\utils\fsg\xt.cracktro.exe
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Benchmark.doc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Clefs.ico
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Asm
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.dlg
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Inc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.obj
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.rap
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.RES
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res\Fast MD5 CrackerDlg.Rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res\Fast MD5 CrackerRes.rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\setup\[APP] Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack
C:\Documents and Settings\L‚onis\Mes documents\Archives\setup\[APP] Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack\serial.txt
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack\BF2.exe
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack\rzr-b241.nfo
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 01.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 02.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 03.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 04.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 05.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 06.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 07.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 08.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 09.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 10.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 11.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 12.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 13.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 14.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Dutronc\Dutronc Crack Boum Hue.MP3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\radiohead\RADIO HEAD (F)\WINAMP-BUENO\Winamp 2.0\Winamp Crack.zip


---------------- ! End of report ! ------------------

Vire tous tes cracks ! Sinon t'es bon pour te réinfecter directe !!!


Supprime proprement MSN car définitivement shooter par bagle ; tu réinstalles ensuite .


Si tes défenses ne fonctionnent toujours pas ( Comodo et AntiVir ), même topo : désinstalle proprement et réinstalle .




ensuite fais ceci :



1- Télécharge CCleaner :
http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner
ou http://www.pcastuces.com/logitheque/ccleaner.htm
Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corriger ton registre .
Lors de l'installation:
-choisis bien "francais" en langue .
-avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 premières.


Un tuto ( aide ):
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

---> Utilisation:
! déconnecte toi et ferme toutes applications en cours !
* va dans "nettoyeur" : fais -analyse- puis -nettoyage-
* va dans "registre" : fais -chercher les erreurs- et -réparer toutes les erreurs-
( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )



2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Ferme bien toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...


( Note : Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.)


-> laisse faire le scan et ne touche pas au PC ...


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ... si tu essaies de poster les deux en même temps,
cela risque d'être trop long pour le forum ...
Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ...

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

"Baby, I'm going on an airplane, And I don't know if I'll be back again"
IMPORTANT : ne vous croyez pas tiré d'affaire tant qu'on ne 
vous l'a pas dit !

(je connaissais CCleaner et l'utilisais souvent, entre autre, j'ai oublié de le préciser, je l'ai utilisé plusieurs fois après UBCD4WIN)

Voici log.txt :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Léonis at 2008-12-24 14:24:22
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 36 GB (23%) free of 152 GB
Total RAM: 1022 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:24:37, on 24/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\Léonis\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Léonis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\LONIS~1\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers A faire.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C765BE1D-C8C4-4610-9DC1-58BC020FADFF}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SeaPort - Unknown owner - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (file missing)
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
End of file - 8323 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Analyse antivirus Avast!.job
C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-07-30 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2008-12-22 1797880]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-07-13 81920]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-07-13 8466432]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
""= []
"MessengerPlusLiveUninstall"=C:\DOCUME~1\LONIS~1\LOCALS~1\Temp\MsgPlusUninstall.exe [2008-08-09 901456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray]
C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-03-03 761948]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Léonis^Menu Démarrer^Programmes^Démarrage^RocketDock.lnk]
C:\WINDOWS\BRICOP~1\VISTAI~1\ROCKET~1\ROCKET~1.EXE [2007-03-19 630784]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Launchy.lnk - C:\Program Files\Launchy\Launchy.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe

C:\Documents and Settings\Léonis\Menu Démarrer\Programmes\Démarrage
Raccourci vers A faire.lnk - C:\Documents and Settings\Léonis\Bureau\A faire.txt

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-11-04 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=
"AllowUnhashedWebView"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\THQ\Dawn Of War\W40kWA.exe"="C:\Program Files\THQ\Dawn Of War\W40kWA.exe:*:Disabled:W40kWA"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe"="C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0f50eaa6-b919-11db-8bf7-9d31a364ac43}]
shell\AutoRun\command - E:\PdtGuide.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{780a2c97-910f-11db-8bae-0018de08e904}]
shell\AutoRun\command - E:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7f868c37-4cdc-11dc-8d02-0018de08e904}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d42d0171-9e16-11db-8bc6-0018de08e904}]
shell\1\command - RUNAUT~1\autorun.pif
shell\2\command - RUNAUT~1\autorun.pif
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNAUT~1\autorun.pif

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f2425b99-b413-11db-8bf0-0018de08e904}]
shell\AutoRun\command - F:\start.exe


======List of files/folders created in the last 2 months======

2008-12-24 14:24:22 ----D---- C:\rsit
2008-12-24 14:20:58 ----D---- C:\Program Files\CCleaner
2008-12-24 13:27:19 ----D---- C:\Program Files\FindyKill
2008-12-24 12:02:06 ----D---- C:\Documents and Settings\Léonis\Application Data\Miranda
2008-12-24 12:01:35 ----D---- C:\Program Files\Miranda IM
2008-12-24 11:50:36 ----SHD---- C:\RECYCLER
2008-12-24 08:48:33 ----A---- C:\TCleaner.txt
2008-12-23 21:21:52 ----D---- C:\WINDOWS\temp
2008-12-23 20:45:15 ----A---- C:\WINDOWS\zip.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\VFIND.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWXCACLS.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWSC.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWREG.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\sed.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\grep.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\fdsv.exe
2008-12-23 17:46:41 ----D---- C:\32788R22FWJFW.0.tmp
2008-12-23 17:45:06 ----D---- C:\WINDOWS\ERDNT
2008-12-23 17:37:53 ----D---- C:\Documents and Settings\Léonis\Application Data\Lavasoft
2008-12-23 14:38:12 ----A---- C:\WINDOWS\bmxbanhj.txt
2008-12-23 14:01:53 ----D---- C:\Documents and Settings\Léonis\Application Data\Malwarebytes
2008-12-23 14:01:02 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-23 14:01:01 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-22 22:47:27 ----D---- C:\Documents and Settings\Léonis\Application Data\Intel
2008-12-22 22:46:54 ----D---- C:\Program Files\Fichiers communs\Intel
2008-12-22 22:46:54 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2008-12-22 22:43:55 ----A---- C:\WINDOWS\system32\libeay32.dll
2008-12-22 22:34:02 ----A---- C:\WINDOWS\system32\NETw4r32.dll
2008-12-22 22:34:02 ----A---- C:\WINDOWS\system32\NETw4c32.dll
2008-12-22 22:02:58 ----A---- C:\Win-Files.txt
2008-12-22 21:39:31 ----D---- C:\Program Files\DIFX
2008-12-22 21:39:10 ----A---- C:\WINDOWS\system32\NETw5r32.dll
2008-12-22 21:39:10 ----A---- C:\WINDOWS\system32\NETw5c32.dll
2008-12-22 20:15:05 ----D---- C:\Documents and Settings\Léonis\Application Data\fretsonfire
2008-12-22 19:24:14 ----D---- C:\Documents and Settings\All Users\Application Data\comodo
2008-12-22 19:24:14 ----A---- C:\WINDOWS\system32\guard32.dll
2008-12-22 19:24:12 ----D---- C:\Program Files\COMODO
2008-12-22 19:22:29 ----D---- C:\Program Files\a-squared HiJackFree
2008-12-22 19:12:55 ----D---- C:\Program Files\Avira
2008-12-22 19:12:55 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2008-12-22 10:34:01 ----A---- C:\WINDOWS\system32\aswBoot.exe
2008-12-22 10:19:24 ----SHD---- C:\Config.Msi
2008-12-22 00:38:07 ----D---- C:\Program Files\Sophos
2008-12-20 12:32:55 ----D---- C:\WINDOWS\pss
2008-12-20 09:58:32 ----D---- C:\Program Files\MGTEK
2008-12-20 09:58:32 ----D---- C:\Program Files\Fichiers communs\MGTEK
2008-12-20 09:57:58 ----D---- C:\Documents and Settings\All Users\Application Data\MGTEK
2008-12-19 22:46:40 ----D---- C:\Program Files\Fichiers communs\Windows Live
2008-12-13 21:33:20 ----D---- C:\Program Files\eMule
2008-12-13 15:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2008-12-13 15:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-13 15:25:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2008-12-13 15:24:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2008-11-15 15:44:35 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-15 15:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-15 15:43:27 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

======List of files/folders modified in the last 2 months======

2008-12-24 14:24:34 ----D---- C:\WINDOWS\Prefetch
2008-12-24 14:22:02 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-12-24 14:22:01 ----D---- C:\WINDOWS\Debug
2008-12-24 14:22:01 ----D---- C:\WINDOWS
2008-12-24 14:20:58 ----RD---- C:\Program Files
2008-12-24 14:19:19 ----SHD---- C:\WINDOWS\Installer
2008-12-24 14:14:29 ----D---- C:\Program Files\Messenger Plus! Live
2008-12-24 14:12:13 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-24 13:53:54 ----D---- C:\WINDOWS\system32
2008-12-24 13:53:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-12-24 13:47:56 ----N---- C:\WINDOWS\SchedLgU.Txt
2008-12-24 13:45:59 ----D---- C:\WINDOWS\system32\CatRoot2
2008-12-24 13:35:19 ----D---- C:\Program Files\Mozilla Thunderbird
2008-12-24 13:10:38 ----D---- C:\Program Files\Mozilla Firefox
2008-12-24 12:15:48 ----D---- C:\Program Files\Trend Micro
2008-12-24 08:25:39 ----SHD---- C:\System Volume Information
2008-12-24 08:25:39 ----D---- C:\WINDOWS\system32\Restore
2008-12-23 21:20:15 ----A---- C:\WINDOWS\system.ini
2008-12-23 21:19:11 ----D---- C:\WINDOWS\system32\drivers
2008-12-23 21:19:10 ----D---- C:\WINDOWS\AppPatch
2008-12-23 21:19:10 ----D---- C:\Program Files\Fichiers communs
2008-12-23 20:50:49 ----D---- C:\WINDOWS\system32\config
2008-12-23 12:26:47 ----A---- C:\index.ini
2008-12-22 22:48:09 ----HD---- C:\WINDOWS\inf
2008-12-22 22:47:49 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-12-22 22:47:45 ----D---- C:\WINDOWS\system32\CatRoot
2008-12-22 22:46:54 ----D---- C:\Program Files\Intel
2008-12-22 22:45:27 ----A---- C:\WINDOWS\system32\results.txt
2008-12-22 22:34:02 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-12-22 19:37:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-12-22 15:38:35 ----D---- C:\Program Files\Messenger
2008-12-22 10:43:54 ----D---- C:\Documents and Settings\Léonis\Application Data\nView_Wallpaper
2008-12-22 10:28:46 ----D---- C:\WINDOWS\SxsCaPendDel
2008-12-22 10:22:02 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-12-22 10:21:11 ----RSD---- C:\WINDOWS\assembly
2008-12-22 10:21:03 ----D---- C:\Program Files\Windows Live
2008-12-22 10:19:51 ----D---- C:\WINDOWS\WinSxS
2008-12-22 10:18:22 ----D---- C:\WINDOWS\Microsoft.NET
2008-12-22 10:14:13 ----D---- C:\WINDOWS\SoftwareDistribution
2008-12-22 10:11:04 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-12-21 19:53:00 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2008-12-21 19:51:45 ----D---- C:\Program Files\Fichiers communs\Real
2008-12-21 19:51:08 ----D---- C:\Documents and Settings\Léonis\Application Data\Real
2008-12-20 13:34:01 ----D---- C:\WINDOWS\system32\ZoneLabs
2008-12-20 12:10:36 ----D---- C:\WINDOWS\Internet Logs
2008-12-20 10:57:02 ----SD---- C:\Documents and Settings\Léonis\Application Data\Microsoft
2008-12-19 23:35:00 ----D---- C:\WINDOWS\system32\DirectX
2008-12-19 23:30:48 ----RSD---- C:\WINDOWS\Fonts
2008-12-19 22:44:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-12-19 22:44:22 ----D---- C:\WINDOWS\ie7updates
2008-12-19 22:43:26 ----HD---- C:\WINDOWS\$hf_mig$
2008-12-14 11:33:24 ----D---- C:\Documents and Settings\Léonis\Application Data\OpenOffice.org2
2008-12-13 15:28:15 ----D---- C:\Program Files\Internet Explorer
2008-12-13 10:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll
2008-12-10 03:24:37 ----A---- C:\WINDOWS\system32\MRT.exe
2008-12-03 13:21:46 ----D---- C:\WINDOWS\Help
2008-11-02 18:27:02 ----D---- C:\Program Files\Creative
2008-11-02 18:26:30 ----D---- C:\Documents and Settings\All Users\Application Data\Creative
2008-11-02 18:25:49 ----D---- C:\Program Files\Yahoo!
2008-11-02 18:09:40 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-11-01 18:23:25 ----D---- C:\Program Files\ma-config.com
2008-11-01 18:23:24 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-10-25 20:32:35 ----D---- C:\Documents and Settings\Léonis\Application Data\U3

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-12-23 75072]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2008-12-22 101776]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2008-12-22 31504]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 meiudf;meiudf; C:\WINDOWS\System32\Drivers\meiudf.sys [2007-09-06 102384]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2007-12-13 394952]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2006-05-25 3712]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAud.sys [2007-08-08 634368]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2006-05-10 13568]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-07-13 6807744]
R3 qkbfiltr;Quanta HotKey Keyboard Filter Driver; C:\WINDOWS\system32\drivers\qkbfiltr.sys [2006-01-12 31872]
R3 qmofiltr;Quanta HotKey Mouse Filter Driver; C:\WINDOWS\system32\drivers\qmofiltr.sys [2005-05-05 7936]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-03-03 191968]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-11-30 162560]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2002-06-20 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2002-06-20 39776]
R3 X10Hid;X10 Hid Device; C:\WINDOWS\System32\Drivers\x10hid.sys [2005-11-28 7040]
S1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys []
S1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys []
S2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 ayxdgx74;ayxdgx74; C:\WINDOWS\system32\drivers\ayxdgx74.sys []
S3 BoiHwsetup;Access 32bits INT15 routine; C:\WINDOWS\system32\drivers\BoiHwSetup.sys [2005-06-11 5504]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-10-19 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-04 1353820]
S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2006-05-10 27264]
S3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2006-05-10 71680]
S3 Maplom;Maplom; C:\WINDOWS\system32\drivers\Maplom.sys [2005-05-14 17408]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETw4x32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows XP 32 bits; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-04-27 2203520]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-09-25 3634688]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 ovt519;VGA USB Camera; C:\WINDOWS\System32\Drivers\ov519vid.sys []
S3 SaiHFF0C;SaiHFF0C; C:\WINDOWS\system32\DRIVERS\SaiHFF0C.sys [2004-06-11 56576]
S3 SaiUFF0C;SaiUFF0C; C:\WINDOWS\system32\DRIVERS\SaiUFF0C.sys [2004-06-11 19584]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SMCB000;SMSC CIR HID Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\hidsmsc.sys [2006-01-17 15744]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TIEHDUSB;TIEHDUSB; C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 tosrfec;Bluetooth ACPI from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 9344]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-05 1428096]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\w810bus.sys [2006-02-20 58288]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\w810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\w810obex.sys [2006-02-20 83344]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2002-06-20 20128]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2002-06-20 5728]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2008-12-22 618232]
R2 DVD-RAM_Service;DVD-RAM_Service; C:\WINDOWS\system32\DVDRAMSV.exe [2007-09-06 110592]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-10-02 860160]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-07-13 155716]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2008-10-02 466944]
R2 UTSCSI;USBest Service Zero; C:\WINDOWS\system32\UTSCSI.EXE [2006-10-03 45568]
R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
S2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2008-10-02 905216]
S2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe []
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-10-28 195752]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-12-22 75304]

-----------------EOF-----------------

Voici le info.txt :

info.txt logfile of random's system information tool 1.05 2008-12-24 14:24:40

======Uninstall list======

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CBBB5EED-CC92-49F2-A276-D5433F39D1EB}\Setup.exe" -l0x40c
7-Zip 4.57-->MsiExec.exe /I{23170F69-40C1-2701-0457-000001000000}
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
a-squared HiJackFree 3.0-->"C:\Program Files\a-squared HiJackFree\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AxCrypt (Désinstaller uniquement)-->"C:\Program Files\Axon Data\AxCrypt\AxCryptU.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Command & Conquer 3 Tiberium Wars(TM) Worldbuilder-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F428768A-BA63-43A5-86E9-7F0CFD174944}\setup.exe" -l0x9 -removeonly
Command & Conquer 3-->MsiExec.exe /I{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}
COMODO Internet Security-->C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe -u
Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -I*.INF
Correctif Lecteur Windows Media 10 - KB895316-->"C:\WINDOWS\$NtUninstallKB895316$\spuninst\spuninst.exe"
Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Counter-Strike: Source (Update 11)-->C:\Games\Counter-Strike Source\CSS.Uninstaller.exe
Creative Jukebox Driver-->C:\Program Files\Creative\Jukebox 3 Drivers\DrvUnins.exe /s
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
ffdshow [rev 1703] [2007-12-15]-->"C:\Program Files\ffdshow\unins000.exe"
FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Free Mp3 Wma Converter V 1.7.3-->"C:\Program Files\Free Audio Pack\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}
GIMP 2.4.7-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Glary Utilities 2.4-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
ImgBurn-->"C:\Program Files\ImgBurn\uninstall.exe"
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
Intel PROSet Wireless-->Intel PROSet Wireless
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
Larousse Chambers Français - Anglais-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD61D1CF-4AE4-4459-B351-CFB6C7817632}\Setup.exe" -l0x40c
Launchy 2.0-->"C:\Program Files\Launchy\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Ma-Config.com-->MsiExec.exe /X{49C3F7D7-215F-47D7-A93B-E9FC772A5E96}
Macromedia Flash Player-->MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maple 9.5-->"C:\Program Files\Maple 9.5\Uninstall_Maple 9.5\Uninstall Maple 9.5.exe"
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
MGTEK dopisp-->MsiExec.exe /I{C25D1742-3136-4B33-9D32-8F0F5E81F349}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft Motocross Madness 2-->"C:\Program Files\Microsoft Games\Motocross Madness 2\UNINSTAL.EXE" /runtemp /addremove
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Miranda IM 0.7.13-->C:\Program Files\Miranda IM\Uninstall.exe
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.18)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
oggcodecs 0.71.0946-->C:\Program Files\illiminable\oggcodecs\uninst.exe
OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
OpenOffice.org 2.4-->MsiExec.exe /I{A122962F-331A-4C2E-93DB-AD92D8A4FB14}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
PeaZip 1.11-->"C:\Program Files\PeaZip\unins000.exe"
Pilote du DVD-RAM-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9D765FA6-F2BC-40AF-8145-50808F9BDF4E}\setup.exe" -l0x40c DVD-RAM Driver
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
Regressi-->MsiExec.exe /I{E2E164AB-1367-488F-8F1F-BA312DB2FF18}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
SpywareBlaster 4.0-->"C:\Program Files\SpywareBlaster\unins000.exe"
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Texas Instruments PCIxx21/x515/xx12 drivers.-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{4497AFF6-98C4-4F49-B073-F48F42BCBF9E} /l1036
TI Connect 1.5-->MsiExec.exe /I{A8B94669-8654-4126-BD28-D0D2412CDED6}
VideoLAN VLC media player 0.8.6e-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Warhammer 40,000: Dawn Of War - Gold Edition-->MsiExec.exe /X{D0B36BAF-3E9D-423E-8821-ED238C18DB0A}
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Driver Package - Intel (NETw5x32) net (09/25/2008 12.1.2.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst32.exe /u C:\WINDOWS\system32\DRVSTORE\netw5x32_74BACD4A361CF37186F7E967730975606AB2E1F8\netw5x32.inf
Windows Driver Package - Intel (w29n51) net (12/19/2007 9.0.4.39)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst32.exe /u C:\WINDOWS\system32\DRVSTORE\w29n51_AEF466EE116FDF742A02BFF75E6143DB4A91003C\w29n51.inf
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Contrôle parental-->MsiExec.exe /X{EB8BAA0D-11EF-4EDC-A960-2AB7CA8F53F0}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Édition Media Center 2005 KB888316-->C:\WINDOWS\$NtUninstallKB888316$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB894553-->C:\WINDOWS\$NtUninstallKB894553$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB895678-->C:\WINDOWS\$NtUninstallKB895678$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
World Community Grid - BOINC Agent-->MsiExec.exe /I{97257926-3443-4DB5-93CF-2B3ADAD581CC}

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: Norton Internet Worm Protection (disabled)
FW: ZoneAlarm Firewall
FW: COMODO Firewall

System event log

Computer Name: ROMAIN
Event Code: 8032
Message: Le service Explorateur d'ordinateur a rencontré un nombre d'échecs trop important en essayant de retrouver la copie de sauvegarde de la liste sur le transport \Device\NetBT_Tcpip_{CBC4BCE1-4422-48B2-8B0C-70D157ACF286}.
L'explorateur secondaire s'arrête.

Record Number: 34910
Source Name: BROWSER
Time Written: 20081120121611.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34909
Source Name: DCOM
Time Written: 20081120121412.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34908
Source Name: DCOM
Time Written: 20081120121412.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34907
Source Name: DCOM
Time Written: 20081120121411.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 8021
Message: L'explorateur n'a pas pu retrouver la liste des serveurs du maître explorateur \\PC-DE-CHRISTINE sur le réseau \Device\NetBT_Tcpip_{CBC4BCE1-4422-48B2-8B0C-70D157ACF286}.
La donnée est le code d'erreur.

Record Number: 34906
Source Name: BROWSER
Time Written: 20081120121351.000000+240
Event Type: Avertissement
User:

Application event log

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25595
Source Name: nview_info
Time Written: 20081217135545.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25594
Source Name: nview_info
Time Written: 20081217135545.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25593
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25592
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25591
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Fichiers communs\Ulead Systems\DVD;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Intel\WiFi\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"tvdumpflags"=8

-----------------EOF-----------------

Bien ....


des restes d'Avast et de ZoneAlarm ... Plus une infection par support amovible possible ...


dans l'ordre :


1- Télécharge OTMoveIt3 (de Old_Timer) sur ton Bureau.

http://oldtimer.geekstogo.com/OTMoveIt3.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double clique sur "OTMoveIt3.exe" pour ouvrir le prg .
Puis copie ce qui se trouve en citation ci-dessous,

:Processes
explorer.exe

:Services
ayxdgx74
vsdatant
vsmon

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] 
""=-

:Files
C:\WINDOWS\tasks\Analyse antivirus Avast!.job
C:\WINDOWS\System32\vsdatant.sys 
C:\WINDOWS\system32\ZoneLabs\vsmon.exe 

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Voilà le rapport de OTMoveIT3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Unable to stop service ayxdgx74 .
Unable to stop service vsdatant .
Service vsmon stopped successfully.
Service vsmon deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\RunOnce\\ deleted successfully.
========== FILES ==========
C:\WINDOWS\tasks\Analyse antivirus Avast!.job moved successfully.
File move failed. C:\WINDOWS\System32\vsdatant.sys scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\ZoneLabs\vsmon.exe scheduled to be moved on reboot.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12242008_145026

Files moved on Reboot...
File move failed. C:\WINDOWS\System32\vsdatant.sys scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\ZoneLabs\vsmon.exe scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.

Voilà celui de USBFIX :



-------------- UsbFix V2.413.7 ---------------

* User : L‚onis - ROMAIN
* Outils mis a jours le 24/12/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 15:00:14 le 24/12/2008
* Windows Xp - Internet Explorer 7.0.5730.13


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

F: - Lecteur amovible


--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe


+- Listing des fichiers présents :

[21/03/2006 12:11][--a------] C:\AUTOEXEC.BAT
[10/08/2004 17:00][-rahs----] C:\NTDETECT.COM
[18/11/2006 18:14][--ahs----] C:\boot.ini
[18/11/2006 18:14][--ahs----] C:\index.ini
[24/11/2007 22:27][--a------] C:\Detections.txt
[24/11/2007 22:27][--a------] C:\log.txt
[24/11/2007 22:27][--a------] C:\SWSTAMP.TXT
[24/11/2007 22:27][--a------] C:\TCleaner.txt
[24/11/2007 22:27][--a------] C:\UsbFix.txt
[24/11/2007 22:27][--a------] C:\Win-Files.txt
[21/03/2006 12:11][--a------] C:\CONFIG.SYS
[21/03/2006 12:11][--a------] C:\hiberfil.sys
[21/03/2006 12:11][--a------] C:\IO.SYS
[21/03/2006 12:11][--a------] C:\MSDOS.SYS
[21/03/2006 12:11][--a------] C:\pagefile.sys

--------------- [ Lecteur F ] ----------------

F: - Lecteur amovible


+- Listing des fichiers présents :

[24/12/2008 14:18][--a------] F:\RSIT.exe
[24/12/2008 14:18][--a------] F:\KillBox.exe
[24/12/2008 14:18][--a------] F:\ccsetup215.exe
[24/12/2008 14:18][--a------] F:\ToolsCleaner2.exe
[24/12/2008 14:18][--a------] F:\SafeBootKeyRepair.exe
[24/12/2008 14:18][--a------] F:\HJTInstall.exe
[24/12/2008 14:18][--a------] F:\miranda-im-v0.7.13-unicode.exe
[24/12/2008 14:18][--a------] F:\FindyKill.exe
[19/12/2008 14:23][--a------] F:\adresse mail.txt
[19/12/2008 14:23][--a------] F:\FindyKill.txt

--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
COMODO Internet Security="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f50eaa6-b919-11db-8bf7-9d31a364ac43}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{780a2c97-910f-11db-8bae-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7f868c37-4cdc-11dc-8d02-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d42d0171-9e16-11db-8bc6-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2425b99-b413-11db-8bf0-0018de08e904}\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------


--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[21/03/2006 12:11][--a------] C:\AUTOEXEC.BAT
[10/08/2004 17:00][-rahs----] C:\NTDETECT.COM
[18/11/2006 18:14][--ahs----] C:\boot.ini
[18/11/2006 18:14][--ahs----] C:\index.ini
[24/12/2008 14:18][--a------] F:\RSIT.exe
[24/12/2008 14:18][--a------] F:\KillBox.exe
[24/12/2008 14:18][--a------] F:\ccsetup215.exe
[24/12/2008 14:18][--a------] F:\ToolsCleaner2.exe
[24/12/2008 14:18][--a------] F:\SafeBootKeyRepair.exe
[24/12/2008 14:18][--a------] F:\HJTInstall.exe
[24/12/2008 14:18][--a------] F:\miranda-im-v0.7.13-unicode.exe
[24/12/2008 14:18][--a------] F:\FindyKill.exe

Joyeuses fetes a tous de la part de T'Chiki et Chimay ...et merci a toutes les personnes ayant,
de pret ou de loin participé a UsbFix durant l annee 2008 , merci a eux !

--------------- ! Fin du rapport ! ----------------

Et le log.txt de RSIT :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Léonis at 2008-12-24 15:03:16
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 39 GB (26%) free of 152 GB
Total RAM: 1022 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:03:22, on 24/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Documents and Settings\Léonis\Bureau\RSIT.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\Léonis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers A faire.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C765BE1D-C8C4-4610-9DC1-58BC020FADFF}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SeaPort - Unknown owner - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (file missing)
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
End of file - 8348 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-07-30 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2008-12-22 1797880]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-07-13 81920]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-07-13 8466432]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray]
C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-03-03 761948]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Léonis^Menu Démarrer^Programmes^Démarrage^RocketDock.lnk]
C:\WINDOWS\BRICOP~1\VISTAI~1\ROCKET~1\ROCKET~1.EXE [2007-03-19 630784]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Launchy.lnk - C:\Program Files\Launchy\Launchy.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe

C:\Documents and Settings\Léonis\Menu Démarrer\Programmes\Démarrage
Raccourci vers A faire.lnk - C:\Documents and Settings\Léonis\Bureau\A faire.txt

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-11-04 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=
"AllowUnhashedWebView"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\THQ\Dawn Of War\W40kWA.exe"="C:\Program Files\THQ\Dawn Of War\W40kWA.exe:*:Disabled:W40kWA"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe"="C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 2 months======

2008-12-24 15:03:16 ----D---- C:\rsit
2008-12-24 14:57:17 ----D---- C:\Program Files\UsbFix
2008-12-24 14:50:26 ----D---- C:\_OTMoveIt
2008-12-24 14:20:58 ----D---- C:\Program Files\CCleaner
2008-12-24 13:27:19 ----D---- C:\Program Files\FindyKill
2008-12-24 12:02:06 ----D---- C:\Documents and Settings\Léonis\Application Data\Miranda
2008-12-24 12:01:35 ----D---- C:\Program Files\Miranda IM
2008-12-24 11:50:36 ----SHD---- C:\RECYCLER
2008-12-24 08:48:33 ----A---- C:\TCleaner.txt
2008-12-23 21:21:52 ----D---- C:\WINDOWS\temp
2008-12-23 20:45:15 ----A---- C:\WINDOWS\zip.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\VFIND.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWXCACLS.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWSC.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\SWREG.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\sed.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\grep.exe
2008-12-23 20:45:15 ----A---- C:\WINDOWS\fdsv.exe
2008-12-23 17:46:41 ----D---- C:\32788R22FWJFW.0.tmp
2008-12-23 17:45:06 ----D---- C:\WINDOWS\ERDNT
2008-12-23 17:37:53 ----D---- C:\Documents and Settings\Léonis\Application Data\Lavasoft
2008-12-23 14:38:12 ----A---- C:\WINDOWS\bmxbanhj.txt
2008-12-23 14:01:53 ----D---- C:\Documents and Settings\Léonis\Application Data\Malwarebytes
2008-12-23 14:01:02 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-23 14:01:01 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-22 22:47:27 ----D---- C:\Documents and Settings\Léonis\Application Data\Intel
2008-12-22 22:46:54 ----D---- C:\Program Files\Fichiers communs\Intel
2008-12-22 22:46:54 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2008-12-22 22:43:55 ----A---- C:\WINDOWS\system32\libeay32.dll
2008-12-22 22:34:02 ----A---- C:\WINDOWS\system32\NETw4r32.dll
2008-12-22 22:34:02 ----A---- C:\WINDOWS\system32\NETw4c32.dll
2008-12-22 22:02:58 ----A---- C:\Win-Files.txt
2008-12-22 21:39:31 ----D---- C:\Program Files\DIFX
2008-12-22 21:39:10 ----A---- C:\WINDOWS\system32\NETw5r32.dll
2008-12-22 21:39:10 ----A---- C:\WINDOWS\system32\NETw5c32.dll
2008-12-22 20:15:05 ----D---- C:\Documents and Settings\Léonis\Application Data\fretsonfire
2008-12-22 19:24:14 ----D---- C:\Documents and Settings\All Users\Application Data\comodo
2008-12-22 19:24:14 ----A---- C:\WINDOWS\system32\guard32.dll
2008-12-22 19:24:12 ----D---- C:\Program Files\COMODO
2008-12-22 19:22:29 ----D---- C:\Program Files\a-squared HiJackFree
2008-12-22 19:12:55 ----D---- C:\Program Files\Avira
2008-12-22 19:12:55 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2008-12-22 10:34:01 ----A---- C:\WINDOWS\system32\aswBoot.exe
2008-12-22 10:19:24 ----SHD---- C:\Config.Msi
2008-12-22 00:38:07 ----D---- C:\Program Files\Sophos
2008-12-20 12:32:55 ----D---- C:\WINDOWS\pss
2008-12-20 09:58:32 ----D---- C:\Program Files\MGTEK
2008-12-20 09:58:32 ----D---- C:\Program Files\Fichiers communs\MGTEK
2008-12-20 09:57:58 ----D---- C:\Documents and Settings\All Users\Application Data\MGTEK
2008-12-19 22:46:40 ----D---- C:\Program Files\Fichiers communs\Windows Live
2008-12-13 21:33:20 ----D---- C:\Program Files\eMule
2008-12-13 15:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2008-12-13 15:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-13 15:25:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2008-12-13 15:24:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2008-11-15 15:44:35 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-15 15:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-15 15:43:27 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

======List of files/folders modified in the last 2 months======

2008-12-24 14:58:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-12-24 14:58:29 ----D---- C:\WINDOWS\Prefetch
2008-12-24 14:57:17 ----RD---- C:\Program Files
2008-12-24 14:52:49 ----D---- C:\WINDOWS
2008-12-24 14:50:27 ----SD---- C:\WINDOWS\Tasks
2008-12-24 14:36:13 ----D---- C:\Program Files\Windows Media Connect 2
2008-12-24 14:31:29 ----SHD---- C:\WINDOWS\Installer
2008-12-24 14:31:28 ----D---- C:\Program Files\THQ
2008-12-24 14:22:02 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-12-24 14:22:01 ----D---- C:\WINDOWS\Debug
2008-12-24 14:20:05 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-24 14:12:22 ----D---- C:\Program Files\EA GAMES
2008-12-24 13:53:54 ----D---- C:\WINDOWS\system32
2008-12-24 13:53:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-12-24 13:45:59 ----D---- C:\WINDOWS\system32\CatRoot2
2008-12-24 13:35:19 ----D---- C:\Program Files\Mozilla Thunderbird
2008-12-24 13:10:38 ----D---- C:\Program Files\Mozilla Firefox
2008-12-24 12:15:48 ----D---- C:\Program Files\Trend Micro
2008-12-24 08:25:39 ----SHD---- C:\System Volume Information
2008-12-24 08:25:39 ----D---- C:\WINDOWS\system32\Restore
2008-12-23 21:20:15 ----A---- C:\WINDOWS\system.ini
2008-12-23 21:19:11 ----D---- C:\WINDOWS\system32\drivers
2008-12-23 21:19:10 ----D---- C:\WINDOWS\AppPatch
2008-12-23 21:19:10 ----D---- C:\Program Files\Fichiers communs
2008-12-23 20:50:49 ----D---- C:\WINDOWS\system32\config
2008-12-23 12:26:47 ----A---- C:\index.ini
2008-12-22 22:48:09 ----HD---- C:\WINDOWS\inf
2008-12-22 22:47:49 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-12-22 22:47:45 ----D---- C:\WINDOWS\system32\CatRoot
2008-12-22 22:46:54 ----D---- C:\Program Files\Intel
2008-12-22 22:45:27 ----A---- C:\WINDOWS\system32\results.txt
2008-12-22 22:34:02 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-12-22 19:37:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-12-22 10:43:54 ----D---- C:\Documents and Settings\Léonis\Application Data\nView_Wallpaper
2008-12-22 10:28:46 ----D---- C:\WINDOWS\SxsCaPendDel
2008-12-22 10:22:02 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-12-22 10:21:11 ----RSD---- C:\WINDOWS\assembly
2008-12-22 10:19:51 ----D---- C:\WINDOWS\WinSxS
2008-12-22 10:18:22 ----D---- C:\WINDOWS\Microsoft.NET
2008-12-22 10:14:13 ----D---- C:\WINDOWS\SoftwareDistribution
2008-12-22 10:11:04 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-12-21 19:53:00 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2008-12-21 19:51:45 ----D---- C:\Program Files\Fichiers communs\Real
2008-12-21 19:51:08 ----D---- C:\Documents and Settings\Léonis\Application Data\Real
2008-12-20 13:34:01 ----D---- C:\WINDOWS\system32\ZoneLabs
2008-12-20 12:10:36 ----D---- C:\WINDOWS\Internet Logs
2008-12-20 10:57:02 ----SD---- C:\Documents and Settings\Léonis\Application Data\Microsoft
2008-12-19 23:35:00 ----D---- C:\WINDOWS\system32\DirectX
2008-12-19 23:30:48 ----RSD---- C:\WINDOWS\Fonts
2008-12-19 22:44:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-12-19 22:44:22 ----D---- C:\WINDOWS\ie7updates
2008-12-19 22:43:26 ----HD---- C:\WINDOWS\$hf_mig$
2008-12-14 11:33:24 ----D---- C:\Documents and Settings\Léonis\Application Data\OpenOffice.org2
2008-12-13 15:28:15 ----D---- C:\Program Files\Internet Explorer
2008-12-13 10:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll
2008-12-10 03:24:37 ----A---- C:\WINDOWS\system32\MRT.exe
2008-12-03 13:21:46 ----D---- C:\WINDOWS\Help
2008-11-02 18:27:02 ----D---- C:\Program Files\Creative
2008-11-02 18:26:30 ----D---- C:\Documents and Settings\All Users\Application Data\Creative
2008-11-02 18:09:40 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-11-01 18:23:25 ----D---- C:\Program Files\ma-config.com
2008-11-01 18:23:24 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-10-25 20:32:35 ----D---- C:\Documents and Settings\Léonis\Application Data\U3

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-12-23 75072]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2008-12-22 101776]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2008-12-22 31504]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 meiudf;meiudf; C:\WINDOWS\System32\Drivers\meiudf.sys [2007-09-06 102384]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2007-12-13 394952]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2006-05-25 3712]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAud.sys [2007-08-08 634368]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2006-05-10 13568]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-07-13 6807744]
R3 qkbfiltr;Quanta HotKey Keyboard Filter Driver; C:\WINDOWS\system32\drivers\qkbfiltr.sys [2006-01-12 31872]
R3 qmofiltr;Quanta HotKey Mouse Filter Driver; C:\WINDOWS\system32\drivers\qmofiltr.sys [2005-05-05 7936]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-03-03 191968]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-11-30 162560]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2002-06-20 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2002-06-20 39776]
R3 X10Hid;X10 Hid Device; C:\WINDOWS\System32\Drivers\x10hid.sys [2005-11-28 7040]
S1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys []
S1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys []
S2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 ax4c9gaq;ax4c9gaq; C:\WINDOWS\system32\drivers\ax4c9gaq.sys []
S3 BoiHwsetup;Access 32bits INT15 routine; C:\WINDOWS\system32\drivers\BoiHwSetup.sys [2005-06-11 5504]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-10-19 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-04 1353820]
S3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2006-05-10 27264]
S3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2006-05-10 71680]
S3 Maplom;Maplom; C:\WINDOWS\system32\drivers\Maplom.sys [2005-05-14 17408]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETw4x32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows XP 32 bits; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-04-27 2203520]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-09-25 3634688]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 ovt519;VGA USB Camera; C:\WINDOWS\System32\Drivers\ov519vid.sys []
S3 SaiHFF0C;SaiHFF0C; C:\WINDOWS\system32\DRIVERS\SaiHFF0C.sys [2004-06-11 56576]
S3 SaiUFF0C;SaiUFF0C; C:\WINDOWS\system32\DRIVERS\SaiUFF0C.sys [2004-06-11 19584]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SMCB000;SMSC CIR HID Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\hidsmsc.sys [2006-01-17 15744]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TIEHDUSB;TIEHDUSB; C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 tosrfec;Bluetooth ACPI from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 9344]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-05 1428096]
S3 w810bus;Sony Ericsson W810 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\w810bus.sys [2006-02-20 58288]
S3 w810mgmt;Sony Ericsson W810 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\w810mgmt.sys [2006-02-20 85408]
S3 w810obex;Sony Ericsson W810 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\w810obex.sys [2006-02-20 83344]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2002-06-20 20128]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2002-06-20 5728]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2008-12-22 618232]
R2 DVD-RAM_Service;DVD-RAM_Service; C:\WINDOWS\system32\DVDRAMSV.exe [2007-09-06 110592]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-10-02 860160]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-07-13 155716]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2008-10-02 466944]
R2 UTSCSI;USBest Service Zero; C:\WINDOWS\system32\UTSCSI.EXE [2006-10-03 45568]
R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
S2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2008-10-02 905216]
S2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe []
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-10-28 195752]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe []
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-12-22 75304]

-----------------EOF-----------------

Bien ...

mais les reste de ZoneAlarme font de la résistance ...


fais ceci :


A- Impératif : Démarrer en mode sans echec .

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...


Double clique sur "OTMoveIt3.exe" pour ouvrir le prg .
Puis copie ce qui se trouve en citation ci-dessous,

:Processes
explorer.exe

:Services
vsmon
TrueVector Internet Monitor
vsdatant

:Reg

:Files
C:\WINDOWS\system32\ZoneLabs\vsmon.exe 
C:\WINDOWS\system32\ZoneLabs
C:\WINDOWS\System32\vsdatant.sys
C:\WINDOWS\Internet Logs 

:Commands
[emptytemp]
[start explorer]
[Reboot]

Voilà le log de OTMoveIT3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service vsmon stopped successfully.
Service vsmon deleted successfully.
Unable to stop service TrueVector Internet Monitor .
Service vsdatant stopped successfully.
Service vsdatant deleted successfully.
========== REGISTRY ==========
========== FILES ==========
C:\WINDOWS\system32\ZoneLabs\vsmon.exe moved successfully.
C:\WINDOWS\system32\ZoneLabs\Updates moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi\imslsp moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi\httpblocker moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins\vsmon_plugin moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins\rpc_server moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins moved successfully.
C:\WINDOWS\system32\ZoneLabs\lib\pyd moved successfully.
C:\WINDOWS\system32\ZoneLabs\lib moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32 moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32 moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\bases moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys moved successfully.
C:\WINDOWS\system32\ZoneLabs moved successfully.
C:\WINDOWS\System32\vsdatant.sys moved successfully.
C:\WINDOWS\Internet Logs moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12242008_153922