Voila pour le rapport, merci beaucoup de ton attention


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Razer\razerhid.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Razer\razerofa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\documents and settings\ma session\local settings\application data\ooaemso.exe
C:\Documents and Settings\Ma Session\Application Data\drivers\winupgro.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Schmads Inc\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe

--------------- [ Processus infectieux stoppés ] ----------------


"C:\Documents and Settings\Ma Session\Application Data\drivers\winupgro.exe" (2772)


--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:

Found ! [12/01/2009 21:06] - C:\InfoSat.txt

»»»» Presence des fichiers dans C:\WINDOWS


»»»» Presence des fichiers dans C:\WINDOWS\Prefetch

Found ! - C:\WINDOWS\prefetch\549227031.EXE-3200B6E7.pf
Found ! - C:\WINDOWS\prefetch\78921.EXE-04A4F1CF.pf
Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Found ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-3B921EC8.pf
Found ! - C:\WINDOWS\Prefetch\KEY_GEN.EXE-12AE6B12.pf

»»»» Presence des fichiers dans C:\WINDOWS\system32

Found ! [12/01/2009 20:18] - C:\WINDOWS\system32\mdelk.exe
Found ! [12/01/2009 20:18] - C:\WINDOWS\system32\wintems.exe
Found ! [12/01/2009 21:19] - C:\WINDOWS\system32\ban_list.txt

»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers


»»»» Presence des fichiers dans C:\Documents and Settings\Ma Session\Application Data

Found ! [12/01/2009 19:53] - "C:\Documents and Settings\Ma Session\Application Data\m\flec006.exe"
Found ! [12/01/2009 20:17] - "C:\Documents and Settings\Ma Session\Application Data\m\shared"
Found ! [12/01/2009 20:54] - "C:\Documents and Settings\Ma Session\Application Data\m"
Found ! [12/01/2009 21:06] - "C:\Documents and Settings\Ma Session\Application Data\drivers"
Found ! [12/01/2009 20:17] - "C:\Documents and Settings\Ma Session\Application Data\drivers\srosa.sys"
Found ! [12/01/2009 20:54] - "C:\Documents and Settings\Ma Session\Application Data\drivers\downld"

»»»» Presence des fichiers dans C:\DOCUME~1\MASESS~1\LOCALS~1\Temp


»»»» Presence des fichiers dans C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5

Found ! [12/01/2009 11:44] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64[1].jpg
Found ! [12/01/2009 19:53] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64[2].jpg
Found ! [12/01/2009 02:41] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[1].jpg
Found ! [12/01/2009 03:31] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[2].jpg
Found ! [12/01/2009 07:34] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[3].jpg
Found ! [12/01/2009 07:42] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[4].jpg
Found ! [12/01/2009 11:46] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[5].jpg
Found ! [12/01/2009 15:48] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[6].jpg
Found ! [12/01/2009 20:20] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_1[7].jpg
Found ! [12/01/2009 03:33] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_2[1].jpg
Found ! [12/01/2009 02:37] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[1].jpg
Found ! [12/01/2009 02:56] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[2].jpg
Found ! [12/01/2009 07:10] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[3].jpg
Found ! [12/01/2009 11:43] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[4].jpg
Found ! [12/01/2009 19:26] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[5].jpg
Found ! [12/01/2009 20:18] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_3[6].jpg
Found ! [12/01/2009 11:16] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\b64_5[1].jpg
Found ! [12/01/2009 15:49] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\1ZLYNXMB\file[1].txt
Found ! [12/01/2009 02:48] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\6OCTQXZK\b64_1[1].jpg
Found ! [12/01/2009 03:08] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\6OCTQXZK\b64_1[2].jpg
Found ! [12/01/2009 03:10] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\6OCTQXZK\b64_2[1].jpg
Found ! [12/01/2009 07:14] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\6OCTQXZK\b64_2[2].jpg
Found ! [12/01/2009 11:16] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64[1].jpg
Found ! [12/01/2009 15:48] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64[2].jpg
Found ! [12/01/2009 02:57] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[1].jpg
Found ! [12/01/2009 03:10] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[2].jpg
Found ! [12/01/2009 07:11] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[3].jpg
Found ! [12/01/2009 07:14] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[4].jpg
Found ! [12/01/2009 15:19] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[5].jpg
Found ! [12/01/2009 19:31] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_1[6].jpg
Found ! [12/01/2009 07:43] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_2[1].jpg
Found ! [12/01/2009 15:51] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_2[2].jpg
Found ! [12/01/2009 20:24] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_2[3].jpg
Found ! [12/01/2009 03:00] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_3[1].jpg
Found ! [12/01/2009 03:30] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_3[2].jpg
Found ! [12/01/2009 15:47] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\C1Q3STI7\b64_3[3].jpg
Found ! [12/01/2009 02:57] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64[1].jpg
Found ! [12/01/2009 03:08] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64[2].jpg
Found ! [12/01/2009 07:11] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64[3].jpg
Found ! [12/01/2009 07:34] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64[4].jpg
Found ! [12/01/2009 15:19] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64[5].jpg
Found ! [12/01/2009 03:32] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_1[1].jpg
Found ! [12/01/2009 07:42] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_1[2].jpg
Found ! [12/01/2009 19:32] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_2[1].jpg
Found ! [12/01/2009 19:56] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_2[2].jpg
Found ! [12/01/2009 02:40] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_3[1].jpg
Found ! [12/01/2009 02:52] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_3[2].jpg
Found ! [12/01/2009 11:15] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_3[3].jpg
Found ! [12/01/2009 20:06] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\b64_3[4].jpg
Found ! [12/01/2009 21:19] - C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5\N0YHU489\file[1].txt
Found ! [06/11/2008 16:33] - C:\Program Files\Rockstar Games\Grand Theft Auto IV\files.txt

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
MSMSGS="C:\Program Files\Messenger\msmsgs.exe" /background
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
ooaemso="c:\documents and settings\ma session\local settings\application data\ooaemso.exe" ooaemso
AlcoholAutomount="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ehTray=C:\WINDOWS\ehome\ehtray.exe
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
razer=C:\Program Files\Razer\razerhid.exe
RTHDCPL=RTHDCPL.EXE
Alcmtr=ALCMTR.EXE
Launch LCDMon="C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
Launch LGDCore="C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
Ulead AutoDetector v2=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\key_gen]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msnmsgr]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

--------------- [ Registre / Clés infectieuses ] ----------------


Found ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_CURRENT_USER\Software\FirtR

/!\ Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
/!\ Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1

--------------- [ Etat / Services ] ----------------

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

/!\ Mode sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

/!\ Mode sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network

/!\ Mode sans echec non fonctionnel !!



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

EapHost - Type de démarrage = 3

/!\ Ip6Fw - Type de démarrage = 4

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

/!\ wscsvc - Type de démarrage = 4


--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe


+- presence des fichiers :



--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------

Merci de ta réponse,

voila le rapport


--------------- [ Active Processes ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\userinit.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in C:

Deleted ! - C:\InfoSat.txt

»»»» Supression files in C:\WINDOWS


»»»» Supression files in C:\WINDOWS\Prefetch

Deleted ! - C:\WINDOWS\prefetch\549227031.EXE-3200B6E7.pf
Deleted ! - C:\WINDOWS\prefetch\78921.EXE-04A4F1CF.pf
Deleted ! - C:\WINDOWS\prefetch\KEY_GEN.EXE-12AE6B12.pf
Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Deleted ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-3B921EC8.pf

»»»» Supression files in C:\WINDOWS\system32

Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe

»»»» Supression files in C:\WINDOWS\system32\drivers


»»»» Supression files in C:\Documents and Settings\Ma Session\Application Data

Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\m\flec006.exe"
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\123 Flash Sound Extractor 1.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\2006 Tax Calculator 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\3D Dancing Easter Egg 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\3D New Years Countdown 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\5FM Radio 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Advanced Batch PDF Splitter 1.6.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Aglare Video to 3GP Converter 6.2.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Art of the Hudson River School Screensaver.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Avast.Pro.4.6.Keygen.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Babya System Profiler 2005 11.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Bildstorung 3.39.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\BitDefender.Internet.Security.v10.FR.Incl-KeygenSS.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Blue Commander 2.1.6.219.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\boson.computer.associates.practice.tests.v5.04.jgt.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Cleaner XP 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ClearView Transliterator 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Clipper Data Entry Program Generator 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ConsoleFx 1.0 Beta 1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Cross Patrchers Delight Font 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\DBConvert for FoxPro & MySQL 2.1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\DC Data Entry Validator 2.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Desktop Lock Express 1.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Diane's Fishys Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Earth DVD To iPod Converter 1.10.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Ease Video Converter 3.30.0405.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Ease123 Video Watermarker 1.0.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Easter Bunnies Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Embird Alphabet 30 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Family Tree Pilot 1.04.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Folder Guard Professional 7.92.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Folder Navigator 1.21.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Fractal Taffeta Theme 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Free Magic Waterfall Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\funpeeps 1.0.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Fx Icon 32 4.5.6.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Gearslutz - Music Equipment Forum Search 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\God's Mercy Screen Saver 3.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Google Maps Mobile 1.4.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Google Monitor 2.2.15.31.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Google Video Downloader 1.8.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\HD Image 1.0.0.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\HH-60 Pave Hawk Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Hourly rate meter 1.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\How To Take Horse Pictures eBook 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\HTML Compressor PRO 1.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\I-play Mobile.Ricochet Lost Worlds .v1.00.SymbianOS9.1.Modified by.FAQ.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ICQ Lite Starter 1.0.6.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ICTS-WinTrader 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ILMerge 2.8.0626.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Image Sizer 1.05.19.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\IRONGATE.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Jason DVD Video to SWF Converter 5.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Kaspersky.5.0.Pro.26.10.2007.Key.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Lifextender 0.9.4.6 Beta.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Light Artist 1.5.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\LingvoSoft Talking Dictionary 2008 English - French 4.1.29.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Lock My PC 4.7.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\mail2disk Standard 2.3.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\MB4-348 Practice Exam Testing Engine Software 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Microsoft PlayReady 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Mixgram 1.0.0.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\MouseSwitcher.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\MS Word Word Count & Frequency Statistics Software 7.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\muveeNow 2.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\My Broadcast Station toolbar for Firefox 1.5.0.6.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Name Changer 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Network DeepScan 2.8.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\NovaNET for Windows Networks 11.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Package Tracker 2.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Password Magic 1.20e.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\PDF Plain Text Extractor 4.3 Build 4343.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Pepsky DVD to Zune 4.3.6.916.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\pfcVB6CodeTool 1.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Pic Cutter 2.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Pingi 0.0.1.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Polystyle 3.3u.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\POMStrap 1.0.10.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\PortaWhiz Info Manager 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\PowerDown 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Proggybar 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Propagate Soft Selection 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Proposal-Invoice 2.2.16.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Psychonet 4 R1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\PTScalc 1.0.2.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Pyramids of Giza 1.01.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\QSwitch Ax.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\queXML 1.1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Radio RSS 2.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Random Password Generator Expert 2.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Record Label and Music Artist Toolbar 2.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\RegWrench 0.8.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Salta in mente Nokia s60 v3.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ScrollBar 1.2a.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SimLD Lite 1.02.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SkinPad 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SkyAlbum Photo Gallery Builder 1.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Slaine's WoW Realm Status 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SmartSync Pro 2.11.0.914.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Southpark Icons 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SpamStopUp PE 256.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SpiderPuller 1.00.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\SpywareStopper 10.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Star Bill of Lading Program Single User Edition 6.50.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Stop Autoplay 0.7.5.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Strangers in Strange Lands 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Summary 3.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Super Clone DVD 5.2.2.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Super Fdisk Bootable CD 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\T Messager 1.0.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\TaskToday.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\The Lost World 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\TracePlus Web Detective (Standard Edition) 5.64.000.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\TSuperList Component 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\uWinamp Notifier 1.0.0.26.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\ValidateMate 1.2.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\VersyPDF.C 2.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Vipro Express 3.10.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Visual Capture 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\VoiceCall 4.32.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\WampServer 2.0e.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Wild Beast Watching Screensaver 2.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\WinEncryptor 1.3.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\WinPopup Companion 1.1.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\WM.Slammer Removal Tool 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\WTware 4.0.5.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\xIDS Web Log Analyser 1.2.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\XPeRT Keyboard 6.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\Xref 1.0.zip
Deleted ! - C:\Documents and Settings\Ma Session\Application Data\m\shared\[Software.-.ITA].McAfee.AntiVirus.8.0.+.Personal.Firewall.Plus.5.0.+.SpamKiller.5.0.zip
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\m"
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\inst.exe"
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\drivers\srosa.sys"
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\drivers\downld"
Deleted ! - "C:\Documents and Settings\Ma Session\Application Data\drivers"

»»»» Supression files in C:\DOCUME~1\MASESS~1\LOCALS~1\Temp


»»»» Supression files in C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5


--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\FirtR
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mdelk.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wintems.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\flec006.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hldrrr.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winfilse.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winupgro.exe
Deleted ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\Local AppWizard-Generated Applications\msnmsgr
Deleted ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\Local AppWizard-Generated Applications\winupgro
Deleted ! - HKEY_USERS\S-1-5-21-1708537768-1767777339-682003330-1003\Software\MuleAppData

--------------- [ States / Restarting of services ] ----------------



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2


--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe


+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Other Infections ] ----------------


Références de comparaison Bagle MD5 :

113ac36b77630a2f67dd6cb7844406a4 C:\WINDOWS\system32\mdelk.exe
113ac36b77630a2f67dd6cb7844406a4 C:\WINDOWS\system32\wintems.exe


--------------- [ Searching Cracks / Keygen ] ----------------

C:\Documents and Settings\Ma Session\Application Data\uTorrent\crack.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\fallout 3 crack nodvd et lanceur anglais.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\fallout 3 crack.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\photoimpact 12 crack.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\Spore.Update.1.03.Cracked-BAT.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\Stalker Clear Sky 1.5.04 Multi-Lang -- Crack.torrent
C:\Documents and Settings\Ma Session\Application Data\uTorrent\WoWGamerCardKeyGen.rar.torrent
C:\Documents and Settings\Ma Session\Bureau\photoimpact 12 crack
C:\Documents and Settings\Ma Session\Bureau\Adobe Photoshop CS 8.0\crack
C:\Documents and Settings\Ma Session\Bureau\Adobe Photoshop CS 8.0\crack\AdobeLM.dll
C:\Documents and Settings\Ma Session\Bureau\Adobe Photoshop CS 8.0\crack\Tw10122.dat
C:\Documents and Settings\Ma Session\Bureau\photoimpact 12 crack\Ulead PhotoImpact 12 English - Bidjan.exe
C:\Documents and Settings\Ma Session\Bureau\photoimpact 12 crack\upi12_tbyb_e_na.exe
C:\Documents and Settings\Ma Session\Mes documents\Downloads\fallout 3 crack nodvd et lanceur anglais
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Stalker Clear Sky 1.5.04 Multi-Lang -- Crack
C:\Documents and Settings\Ma Session\Mes documents\Downloads\fallout 3 crack nodvd et lanceur anglais\rld-fou3.7z
C:\Documents and Settings\Ma Session\Mes documents\Downloads\fallout 3 crack nodvd et lanceur anglais\torrent411.nfo
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Fallout..3.FRENCH-KAO\crack
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Fallout..3.FRENCH-KAO\crack\NS-FO3_SR-poseden.mdf
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Fallout..3.FRENCH-KAO\crack\NS-FO3_SR-poseden.mds
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Fallout..3.FRENCH-KAO\crack\NS-FO3_SR-poseden.nfo
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r00
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r01
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r02
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r03
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r04
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r05
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r06
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r07
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r08
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r09
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.r10
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.rar
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\fm2009-crack&patch.sfv
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Football Manager 2009 + Multilanguage Addon [PC]\CRACK\Gratis Godis h„r.URL
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Stalker Clear Sky 1.5.04 Multi-Lang -- Crack\Stalker Clear Sky 1.5.04 Multi-Lang -- Crack.rar
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Worms 4 Mayhem\CRACK
C:\Documents and Settings\Ma Session\Mes documents\Downloads\Worms 4 Mayhem\CRACK\Lisez-moi.txt


---------------- ! End of report ! ------------------

Salut et merci,

En ce qui concerne OTmoveit

Le rapport m'indique "not found" a chaque fichier car je les avais supprimé moi même

Pour le rapport Findykill le voila :

--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Razer\razerhid.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\Program Files\Schmads Inc\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\documents and settings\ma session\local settings\application data\ooaemso.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Razer\razerofa.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:


»»»» Presence des fichiers dans C:\WINDOWS


»»»» Presence des fichiers dans C:\WINDOWS\Prefetch


»»»» Presence des fichiers dans C:\WINDOWS\system32


»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers


»»»» Presence des fichiers dans C:\Documents and Settings\Ma Session\Application Data


»»»» Presence des fichiers dans C:\DOCUME~1\MASESS~1\LOCALS~1\Temp


»»»» Presence des fichiers dans C:\Documents and Settings\Ma Session\Local Settings\Temporary Internet Files\Content.IE5


--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
AlcoholAutomount="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
ooaemso="c:\documents and settings\ma session\local settings\application data\ooaemso.exe" ooaemso

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ehTray=C:\WINDOWS\ehome\ehtray.exe
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
razer=C:\Program Files\Razer\razerhid.exe
RTHDCPL=RTHDCPL.EXE
Alcmtr=ALCMTR.EXE
Launch LCDMon="C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
Launch LGDCore="C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
Ulead AutoDetector v2=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=


--------------- [ Registre / Clés infectieuses ] ----------------




--------------- [ Etat / Services ] ----------------



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 2

Ip6Fw - Type de démarrage = 2

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2


--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe


+- presence des fichiers :



--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------






Si j'ai bien compris, il m'indique que je n'ai plus d'infection?

Oki, merci bien, le scan est en route :)

Voila le log


Search Navipromo version 3.7.1 commencé le 13/01/2009 à 16:09:36,53

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Ma Session ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:75 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (CD or DVD)


Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Ma Session\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Ma Session\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :



*** Analyse terminée le 13/01/2009 à 16:17:10,48 ***

Voila :)




Clean Navipromo version 3.7.1 commencé le 13/01/2009 à 16:58:52,26

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Ma Session ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:75 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (CD or DVD)


Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" *



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Ma Session\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Ma Session\menudm~1\progra~1" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Ma Session\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Ma Session\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***



*** Nettoyage terminé le 13/01/2009 à 17:01:24,68 ***

Voici le log.txt



Logfile of random's system information tool 1.05 (written by random/random)
Run by Ma Session at 2009-01-13 17:38:05
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 77 GB (25%) free of 305 GB
Total RAM: 3070 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:38:08, on 13/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Razer\razerhid.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\Program Files\Schmads Inc\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
C:\Program Files\Razer\razerofa.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ma Session\Bureau\RSIT.exe
C:\Program Files\trend micro\Ma Session.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\razerhid.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
End of file - 7030 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
Click-to-Call BHO - C:\Program Files\Windows Live\Messenger\wlchtc.dll [2008-12-02 73040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-12-03 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-12-03 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-12-03 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-10-14 863688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-12-03 136600]
"razer"=C:\Program Files\Razer\razerhid.exe [2005-05-17 147456]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-09-09 16851968]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"Launch LCDMon"=C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2007-12-13 2051096]
"Launch LGDCore"=C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [2007-12-13 2095640]
"Ulead AutoDetector v2"=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe [2009-01-12 90112]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-11-12 13672448]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-11-12 86016]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-11-23 203720]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2008-12-02 3882312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOW
scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NBF]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nbf.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProtectedStorage]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sglfb.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vds]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSMBalloonTip"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Documents and Settings\Ma Session\Bureau\WAR Europe Downloader.exe"="C:\Documents and Settings\Ma Session\Bureau\WAR Europe Downloader.exe:*:Enabled:Warhammer Downloader"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Microsoft Games\Gears of War\Binaries\WarGame-G4WLive.exe"="C:\Program Files\Microsoft Games\Gears of War\Binaries\WarGame-G4WLive.exe:*:Enabled:Gears of War"
"C:\Program Files\Sports Interactive\Football Manager 2009 Demo\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2009 Demo\fm.exe:*:Disabled:Football Manager 2009 Demo"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\DVDFab 5\DVDFab.exe"="C:\Program Files\DVDFab 5\DVDFab.exe:*:Enabled:DVDFab 5"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\GSC World Publishing\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\bin\xrEngine.exe"="C:\Program Files\GSC World Publishing\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\bin\xrEngine.exe:*:Enabled:Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî (CLI)"
"C:\Program Files\GSC World Publishing\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\bin\dedicated\xrEngine.exe"="C:\Program Files\GSC World Publishing\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\bin\dedicated\xrEngine.exe:*:Enabled:Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî (SRV)"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Disabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Disabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Disabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Disabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Disabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Disabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Disabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Disabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Disabled:hpqnrs08.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Disabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Disabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Disabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Disabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Disabled:hpzwiz01.exe"
"C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe:*:Enabled:Football Manager 2009"
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Rockstar Games\Grand Theft Auto IV\GTAIV.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Codemasters\Worms 4 Mayhem\WORMS 4 MAYHEM.EXE"="C:\Program Files\Codemasters\Worms 4 Mayhem\WORMS 4 MAYHEM.EXE:*:Enabled:Worms 4 Mayhem"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-01-13 17:38:05 ----D---- C:\rsit
2009-01-13 16:58:52 ----A---- C:\cleannavi.txt
2009-01-13 16:09:36 ----A---- C:\fixnavi.txt
2009-01-13 16:08:17 ----D---- C:\Program Files\Navilog1
2009-01-13 13:29:05 ----D---- C:\Documents and Settings\Ma Session\Application Data\Malwarebytes
2009-01-13 13:29:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-01-13 13:29:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-01-13 12:21:54 ----A---- C:\FindyKill.txt
2009-01-13 12:21:08 ----D---- C:\_OTMoveIt
2009-01-13 01:46:33 ----A---- C:\lopR.txt
2009-01-13 01:46:27 ----D---- C:\Lop SD
2009-01-13 01:15:07 ----D---- C:\Program Files\Avira
2009-01-13 01:15:07 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-01-12 21:37:36 ----D---- C:\Program Files\FindyKill
2009-01-12 03:16:12 ----D---- C:\WINDOWS\system32\Kaspersky Lab
2009-01-12 00:26:52 ----D---- C:\Program Files\Alcohol Soft
2009-01-11 00:01:49 ----D---- C:\MicroProse
2009-01-10 19:47:37 ----D---- C:\Program Files\Codemasters
2009-01-08 17:03:18 ----D---- C:\Program Files\Eidos
2009-01-05 18:01:46 ----D---- C:\WINDOWS\nview
2009-01-02 14:02:25 ----D---- C:\Documents and Settings\Ma Session\Application Data\DAEMON Tools Pro
2009-01-02 14:02:19 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-01-02 14:01:45 ----D---- C:\Program Files\DAEMON Tools Lite
2009-01-02 14:01:29 ----D---- C:\Documents and Settings\Ma Session\Application Data\DAEMON Tools Lite
2008-12-27 13:15:22 ----A---- C:\WINDOWS\system32\gdiplus.dll
2008-12-25 21:23:24 ----D---- C:\Program Files\Rockstar Games
2008-12-24 20:10:13 ----D---- C:\Program Files\Sports Interactive
2008-12-21 15:49:09 ----D---- C:\Documents and Settings\Ma Session\Application Data\XRay Engine
2008-12-19 18:27:52 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-12-19 17:19:42 ----D---- C:\Documents and Settings\All Users\Application Data\Macrovision
2008-12-19 03:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2008-12-19 01:45:39 ----A---- C:\WINDOWS\system32\appdrvrem01.exe
2008-12-19 01:29:53 ----A---- C:\WINDOWS\NeroDigital.ini
2008-12-19 00:34:03 ----D---- C:\Program Files\GSC World Publishing
2008-12-18 21:49:28 ----D---- C:\Documents and Settings\Ma Session\Application Data\HP
2008-12-18 20:24:43 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZisn12.dll
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZipt12.dll
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZipr12.dll
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZipm12.exe
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZinw12.exe
2008-12-18 20:23:54 ----A---- C:\WINDOWS\system32\HPZidr12.dll
2008-12-18 20:23:53 ----A---- C:\WINDOWS\IsUninst.exe
2008-12-18 20:00:28 ----HD---- C:\Config.Msi
2008-12-18 19:54:33 ----RA---- C:\WINDOWS\system32\HPZIDS01.dll
2008-12-18 19:54:27 ----A---- C:\WINDOWS\system32\hpz3l054.dll
2008-12-16 12:51:02 ----D---- C:\Program Files\Microsoft Silverlight
2008-12-16 12:48:09 ----D---- C:\Program Files\Microsoft
2008-12-16 12:47:49 ----D---- C:\Program Files\Windows Live SkyDrive
2008-12-14 03:00:20 ----D---- C:\Program Files\MSXML 4.0

======List of files/folders modified in the last 1 months======

2009-01-13 17:38:07 ----D---- C:\WINDOWS\Prefetch
2009-01-13 17:38:06 ----D---- C:\Program Files\Trend Micro
2009-01-13 17:16:36 ----D---- C:\Program Files\Mozilla Firefox
2009-01-13 17:01:36 ----D---- C:\WINDOWS
2009-01-13 17:01:32 ----D---- C:\WINDOWS\Temp
2009-01-13 17:01:24 ----D---- C:\WINDOWS\system32
2009-01-13 17:00:59 ----D---- C:\WINDOWS\Registration
2009-01-13 16:59:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-13 16:08:17 ----RD---- C:\Program Files
2009-01-13 15:00:02 ----D---- C:\WINDOWS\system32\drivers
2009-01-13 11:43:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-01-13 02:19:35 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-13 01:38:59 ----SHD---- C:\WINDOWS\Installer
2009-01-13 01:38:40 ----D---- C:\Program Files\Windows Live
2009-01-13 01:32:40 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-01-13 00:33:02 ----RSD---- C:\WINDOWS\assembly
2009-01-13 00:11:49 ----D---- C:\Program Files\uTorrent
2009-01-12 22:50:01 ----D---- C:\Program Files\Alwil Software
2009-01-12 21:49:59 ----D---- C:\WINDOWS\Minidump
2009-01-12 21:18:12 ----D---- C:\WINDOWS\repair
2009-01-12 03:16:13 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-01-12 03:16:12 ----HD---- C:\WINDOWS\inf
2009-01-11 23:23:27 ----D---- C:\Documents and Settings\Ma Session\Application Data\OpenOffice.org2
2009-01-11 23:03:52 ----D---- C:\Program Files\eMule
2009-01-10 19:52:54 ----HD---- C:\Program Files\InstallShield Installation Information
2009-01-10 19:52:54 ----D---- C:\Program Files\Electronic Arts
2009-01-08 17:18:19 ----D---- C:\WINDOWS\system32\DirectX
2009-01-07 21:03:33 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-01-06 21:51:04 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-01-06 21:41:35 ----A---- C:\WINDOWS\game.ini
2009-01-06 01:48:08 ----D---- C:\Documents and Settings\Ma Session\Application Data\dvdcss
2009-01-05 18:01:55 ----D---- C:\WINDOWS\Help
2009-01-05 18:01:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-01-05 16:02:21 ----D---- C:\Program Files\CCleaner
2009-01-04 22:26:48 ----SD---- C:\Documents and Settings\Ma Session\Application Data\Microsoft
2009-01-02 14:02:26 ----D---- C:\Documents and Settings\Ma Session\Application Data\DAEMON Tools
2009-01-02 14:01:47 ----D---- C:\Program Files\DAEMON Tools Toolbar
2008-12-26 00:09:20 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2008-12-26 00:08:41 ----D---- C:\WINDOWS\system32\CatRoot
2008-12-25 06:12:27 ----D---- C:\Documents and Settings\Ma Session\Application Data\Sports Interactive
2008-12-24 20:17:48 ----D---- C:\WINDOWS\WinSxS
2008-12-24 20:12:54 ----D---- C:\WINDOWS\twain_32
2008-12-24 20:09:44 ----D---- C:\Program Files\Fichiers communs
2008-12-22 02:05:23 ----D---- C:\Program Files\Fichiers communs\Adobe
2008-12-22 02:05:23 ----D---- C:\Program Files\Adobe
2008-12-22 02:05:23 ----D---- C:\Documents and Settings\Ma Session\Application Data\Adobe
2008-12-19 23:18:55 ----D---- C:\Documents and Settings\Ma Session\Application Data\Vso
2008-12-19 17:16:03 ----D---- C:\WINDOWS\Debug
2008-12-19 03:49:55 ----D---- C:\Documents and Settings\Ma Session\Application Data\temp
2008-12-19 03:00:42 ----HD---- C:\WINDOWS\$hf_mig$
2008-12-18 20:28:33 ----A---- C:\WINDOWS\win.ini
2008-12-17 11:28:33 ----D---- C:\WINDOWS\UI
2008-12-17 11:27:02 ----A---- C:\WINDOWS\DFC.INI
2008-12-16 19:25:27 ----D---- C:\Program Files\World of Warcraft
2008-12-16 12:47:57 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2008-12-19 2915944]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-01-13 75072]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-09-09 4813824]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-10 12288]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-11 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-11-12 6188320]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2007-09-20 53632]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2007-09-20 22016]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-12-07 47360]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S1 asusgsb;ASUS Virtual Video Capture Device Driver; C:\WINDOWS\system32\drivers\asusgsb32.sys []
S2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
S3 a0atys1l;a0atys1l; C:\WINDOWS\system32\drivers\a0atys1l.sys []
S3 ae6872es;ae6872es; C:\WINDOWS\system32\drivers\ae6872es.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 catchme;catchme; \??\C:\DOCUME~1\MASESS~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 Pcmren;Pcmren; C:\WINDOWS\system32\drivers\Pcmren.sys []
S3 Razerlow;Razerlow USB Filter Driver; C:\WINDOWS\System32\Drivers\Razerlow.sys [2005-04-24 13225]
S3 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D32.sys []
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-10-09 237568]
R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-12-03 152984]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-08-29 935208]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-11-12 163908]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-01-06 66872]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-01-07 202040]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2008-12-19 304528]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------









Et voila l'info.txt


info.txt logfile of random's system information tool 1.05 2009-01-13 17:38:10

======Uninstall list======

-->MsiExec /X{AC54E544-3E42-443C-A91D-A00A6974C592}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch-->C:\Program Files\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch-->C:\Program Files\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Company of Heroes-->MsiExec.exe /X{51D718D1-DA81-4FAD-919F-5C1CE3C33379}
Cool Beans NFO Creator 2.0.1.3-->"C:\Program Files\Cool Beans NFO Creator\unins000.exe"
Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
DriverAgent by TouchStone Software-->RunDll32.exe advpack.dll,LaunchINFSection driveragent_exe.inf,TVICHW32Remove
DVD Decoder Pak for Windows XP-->MsiExec.exe /X{92C5DB3D-9D6F-4324-BB11-57825F4C2635}
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.6.0-->"C:\Program Files\DVDFab 5\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Europa Universalis III-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59C80C5E-8C92-40FF-B910-2BB5C7281F61}\setup.exe" -l0x40c
EVEREST Ultimate Edition v4.60-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
EXPERTool-->RunDll32 Setupapi.dll,InstallHinfSection TB.Remove 4 TBNT4.inf
FairUse Wizard 2-->"C:\Program Files\FairUse Wizard 2\un_FU-Setup_14333.exe"
Fallout 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{974C4B12-4D02-4879-85E0-61C95CC63E9E}\setup.exe" -l0x40c -removeonly
Favorit-->"c:\documents and settings\ma session\local settings\application data\ooaemso.exe" -uninstall
FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
Football Manager 2009-->"C:\Program Files\Sports Interactive\Football Manager 2009\Uninstall_Football Manager 2009\Uninstall Football Manager 2009.exe"
G15_TeamSpeak (NSIS)-->"C:\Program Files\Schmads Inc\G15_TeamSpeak\uninstall.exe"
Gears of War-->C:\Program Files\InstallShield Installation Information\{1170D24F-42B7-40CF-AA1B-6395CE562354}\Setup.exe -runfromtemp -l0x040c
Grand Theft Auto IV-->"C:\Program Files\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
KC Softwares VideoInspector-->"C:\Program Files\KC Softwares\VideoInspector\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech GamePanel Software 2.02-->MsiExec.exe /X{0523EAF4-402C-4435-A0DA-13C40193D811}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Medieval II Total War-->C:\Program Files\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe -runfromtemp -l0x040c -removeonly
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî-->"C:\Program Files\GSC World Publishing\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\unins000.exe"
Navilog1 3.7.1-->"C:\Program Files\Navilog1\unins000.exe"
Nero 9-->C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A"
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX v8.10.13-->MsiExec.exe /X{AC54E544-3E42-443C-A91D-A00A6974C592}
OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
OpenOffice.org 2.4-->MsiExec.exe /I{B6694BAA-7604-46AA-A41F-B5F1E6DADE7A}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
Razer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D6D5CFB3-7095-4073-B6B7-B7E909838C57}\Setup.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Rockstar Games Social Club-->"C:\Program Files\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x040c -removeonly
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Tomb Raider: Underworld 1.0-->C:\Program Files\Eidos\Tomb Raider - Underworld\uninst.exe
Ulead PhotoImpact 12-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11AFE21E-B193-430D-B57A-DFF7815BB962}\Setup.exe" -l0x9
VLC media player 0.9.4-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Warhammer Online - Age of Reckoning-->"C:\Warhammer Online - Age of Reckoning\unins000.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Media Center Edition 2005 KB895275-->C:\WINDOWS\$NtUninstallKB895275$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinISO 5.3-->"C:\Program Files\WinISO\unins000.exe"
World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft\Uninstall.exe
Worms 4 Mayhem-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45E7C481-3EF4-4FCB-AF0B-19F70D618F0C}\setup.exe" -l0x40c -removeonly
Worms Armageddon-->C:\WINDOWS\IsUninst.exe -f"c:\MicroProse\Worms Armageddon\Uninst.isu"
Wow Cartographe 1.09-->C:\Program Files\WowCartographe\uninst.exe
Xvid 1.1.3 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
XviD MPEG-4 Video Codec-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_XviD 132 C:\WINDOWS\INF\xvid.inf

======Security center information======

AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: ANTOINE-A
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 5316
Source Name: Tcpip
Time Written: 20081207131632.000000+060
Event Type: Avertissement
User:

Computer Name: ANTOINE-A
Event Code: 36
Message: Le service de temps n'a pas pu synchroniser l'heure système de 49152
secondes car aucun fournisseur de temps n'a pu fournir de datage
utilisable. L'horloge système n'est pas synchronisée.

Record Number: 5315
Source Name: W32Time
Time Written: 20081207065712.000000+060
Event Type: Avertissement
User:

Computer Name: ANTOINE-A
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 5314
Source Name: Tcpip
Time Written: 20081207021804.000000+060
Event Type: Avertissement
User:

Computer Name: ANTOINE-A
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 5313
Source Name: Tcpip
Time Written: 20081207012300.000000+060
Event Type: Avertissement
User:

Computer Name: ANTOINE-A
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 5312
Source Name: Service Control Manager
Time Written: 20081207003738.000000+060
Event Type: Informations
User:

Application event log

Computer Name: ANTOINE-A
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 5
Source Name: SecurityCenter
Time Written: 20090105173056.000000+060
Event Type: Informations
User:

Computer Name: ANTOINE-A
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 4
Source Name: SecurityCenter
Time Written: 20090105172736.000000+060
Event Type: Informations
User:

Computer Name: ANTOINE-A
Event Code: 11728
Message: Produit : NVIDIA PhysX v8.10.13 -- La configuration s'est terminée correctement.

Record Number: 3
Source Name: MsiInstaller
Time Written: 20090105172545.000000+060
Event Type: Informations
User: ANTOINE-A\Ma Session

Computer Name: ANTOINE-A
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 2
Source Name: SecurityCenter
Time Written: 20090105172223.000000+060
Event Type: Informations
User:

Computer Name: ANTOINE-A
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20090105165340.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"RGSCLauncher"=C:\Program Files\Rockstar Games\Rockstar Games Social Club
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\1_0_0_0

-----------------EOF-----------------

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 13/01/2009|17:47 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
C:\Program Files\DAEMON Tools Toolbar\Resources
C:\Program Files\DAEMON Tools Toolbar\uninst.exe
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome.manifest
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\install.rdf
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome\dttoolbar.jar
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.xpt
C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioError.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioError_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioSmallDisp.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioSmallDisp_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioWait.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\RadioWait_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
C:\WINDOWS\iun6002.exe

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 13/01/2009|17:47 - Option : [1]

-----------\\ Fin du rapport a 17:47:50,45




Voila :)

Le "Aucune autre infection trouvée !" me fait plaisir !

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Ma Session ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:75 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 13/01/2009|17:54 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\Program Files\DAEMON Tools Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 13/01/2009|17:47 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 13/01/2009|17:55 - Option : [2]

-----------\\ Fin du rapport a 17:55:52,81


Voilou

Merci pour tout ce temps que tu as passés à me répondre, c'est sympas de ta part!

Le scan est en route depuis 30 min et ca risque de prendre encore une pair d'heure visiblement

Et bien tout est redevenu comme avant, plus de processus inconnus qui sortent de nul part, les drivers sont de retour, j'ai DL un nouvel antivirus qui s'est installé sans soucis enfin voila ca remarche nickel.

Je te remercie pour le temps que tu as passés à te pencher sur mon cas, c'est très sympas de ta part

Je te souhaite une bonne journée et j'espère qu'on ne se reverra pas trop rapidement lol

Salut,

Bon bah voila je repasse pour dire que tout vas bien même une semaine après

Je te remercie encore pour ta patience et ton aide :)