Et voici le rapport de RSIT...
Logfile of random's system information tool 1.05 (written by random/random)
Run by Jean-Louis at 2009-02-28 12:06:10
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 13 GB (33%) free of 40 GB
Total RAM: 1278 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:06, on 28/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers communs\NMSAccessU.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxMediaDB.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatch.exe
D:\Program Files\Seagate\Sync\SeaSyncServices.exe
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Seagate\Schedule2\schedhlp.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatchTray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\CPSHelpRunner.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\Clavier.exe
D:\Program Files\SpywareGuard\sgmain.exe
D:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jean-Louis\Bureau\RSIT.exe
D:\Program Files\Trend Micro\HijackThis\Jean-Louis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = hideupv.univ-montp3.fr:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Babylon Client] D:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [StxTrayMenu] "D:\Program Files\Seagate\SystemTray\StxMenuMgr.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Seagate\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatchTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [00PCTFW] "D:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Range-Notes] C:\Program Files\Range-Notes\Range-Notes.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SUPERAntiSpyware] D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Clavier+] D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Babylon.exe.lnk = D:\Program Files\Babylon\Babylon-Pro\Babylon.exe
O4 - Startup: SpywareGuard.lnk = D:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Translate with &Babylon - res://D:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Xanadu - {5CC384BB-1326-11D5-F4AE-00C04923F885} - C:\Program Files\Foreignword\Xanadu\XanaduLaunch.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Fichiers communs\NMSAccessU.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - D:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - (no file)
O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxLiveShare.exe
O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxMediaDB.exe
O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCom\RoxUpnpRenderer.exe
O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe
O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatch.exe
O23 - Service: Seagate Sync Service - Seagate Technology LLC - D:\Program Files\Seagate\Sync\SeaSyncServices.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
End of file - 14214 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1957994488-1532298954-682003330-1004.job
C:\WINDOWS\tasks\Mantenimiento con 1 clic.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\ParetoLogic Registration.job
C:\WINDOWS\tasks\RegCure Program Check.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4A368E80-174F-4872-96B5-0B27DDD11DB2}]
SpywareGuardDLBLOCK.CBrowserHelper - D:\Program Files\SpywareGuard\dlprotect.dll [2003-08-02 192512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-12-12 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-12-01 2436160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-12-12 34816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-12-12 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-11-04 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-11-04 688218]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2006-07-25 344064]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2004-10-22 229438]
"UpdateManager"=C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"zBrowser Launcher"=C:\Program Files\Logitech\iTouch\iTouch.exe [2003-12-01 892928]
"Logitech Utility"=C:\WINDOWS\Logi_MwX.Exe [2003-11-07 19968]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-09-20 29744]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"Babylon Client"=D:\Program Files\Babylon\Babylon-Pro\Babylon.exe [2006-12-13 2785256]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-12-12 136600]
"StxTrayMenu"=D:\Program Files\Seagate\SystemTray\StxMenuMgr.exe [2007-01-18 190008]
"Acronis Scheduler2 Service"=C:\Program Files\Fichiers communs\Seagate\Schedule2\schedhlp.exe [2007-08-20 148760]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-03-28 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-03-30 267048]
"RoxWatchTray"=C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatchTray.exe [2005-10-11 163840]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"IMEKRMIG6.1"=C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE [2004-08-05 44032]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-05-15 54576]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"00PCTFW"=D:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2009-02-25 2652056]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [2007-03-05 16384]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"TuneUp MemOptimizer"=C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe [2007-04-27 312840]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-12-02 68856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Range-Notes"=C:\Program Files\Range-Notes\Range-Notes.exe [2006-09-29 266240]
"Google Update"=C:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-02 133104]
"SUPERAntiSpyware"=D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-02-25 1830128]
"Clavier+"=D:\Documents and Settings\Jean-Louis\Local Settings\Application Data\Clavier+\Clavier.exe [2007-10-21 88576]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-05-15 95536]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
C:\Documents and Settings\Jean-Louis\Menu Démarrer\Programmes\Démarrage
Babylon.exe.lnk - D:\Program Files\Babylon\Babylon-Pro\Babylon.exe
SpywareGuard.lnk - D:\Program Files\SpywareGuard\sgmain.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-07-25 86016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
"{81559C35-8464-49F7-BB0E-07A383BEF910}"=D:\Program Files\SpywareGuard\spywareguard.dll [2003-08-02 126976]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=cli
scecli
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Magentic\bin\MgImp.exe"="C:\Program Files\Magentic\bin\MgImp.exe:*:Enabled:Magentic"
"C:\Program Files\Magentic\bin\Magentic.exe"="C:\Program Files\Magentic\bin\Magentic.exe:*:Enabled:Magentic"
"C:\Program Files\Magentic\bin\MgApp.exe"="C:\Program Files\Magentic\bin\MgApp.exe:*:Enabled:Magentic"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe"="C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe:*:Enabled:Roxio Upnp Service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
======List of files/folders created in the last 2 months======
2070-01-01 01:00:00 ----D---- C:\Program Files\Grand Robert & Collins
2009-02-28 12:06:10 ----D---- C:\rsit
2009-02-28 11:57:52 ----SHD---- C:\RECYCLER
2009-02-28 11:34:58 ----A---- C:\ComboFix.txt
2009-02-28 11:20:11 ----A---- C:\Boot.bak
2009-02-28 11:19:59 ----D---- C:\cmdcons
2009-02-28 11:17:40 ----D---- C:\Qoobox
2009-02-27 21:41:54 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2009-02-27 21:40:05 ----A---- C:\WINDOWS\system32\uxtheme.dll.backup
2009-02-27 21:37:09 ----A---- C:\WINDOWS\GOTO.INI
2009-02-27 21:37:08 ----D---- C:\Program Files\i-TimTel
2009-02-27 21:37:08 ----D---- C:\Program Files\i-Media
2009-02-27 21:37:08 ----A---- C:\WINDOWS\gotouninstall.exe
2009-02-26 22:01:03 ----A---- C:\WINDOWS\system32\ssubtmr6.dll
2009-02-26 08:56:55 ----D---- C:\SDFix
2009-02-25 19:40:26 ----D---- C:\Program Files\AskBardis
2009-02-24 17:30:02 ----D---- C:\ATI
2009-02-21 20:05:14 ----D---- C:\Program Files\Free Offers from Freeze.com
2009-02-21 20:05:12 ----D---- C:\Program Files\Common Files
2009-02-21 20:04:21 ----A---- C:\WINDOWS\system32\WINUTIL5.DLL
2009-02-21 20:04:21 ----A---- C:\WINDOWS\system32\WINLCTL5.DLL
2009-02-21 20:04:19 ----D---- C:\Program Files\Winferno
2009-02-21 20:03:55 ----D---- C:\Program Files\Wyyo
2009-02-21 20:03:55 ----D---- C:\Documents and Settings\All Users\Application Data\Wyyo
2009-02-13 15:17:19 ----D---- C:\Documents and Settings\All Users\Application Data\IM
2009-02-13 15:16:05 ----D---- C:\Documents and Settings\All Users\Application Data\IncrediMail
2009-02-12 10:04:37 ----D---- C:\Program Files\Softi Software
2009-02-12 10:04:06 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\Softi Software
2009-02-06 01:48:10 ----D---- C:\Program Files\SkanerOnline
2009-02-05 23:30:09 ----RASHD---- C:\autorun.inf
2009-02-05 19:21:31 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-02-05 19:21:30 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-02-05 19:08:47 ----D---- C:\WINDOWS\system32\XPSViewer
2009-02-05 19:08:40 ----D---- C:\Program Files\MSBuild
2009-02-05 19:08:26 ----D---- C:\Program Files\Reference Assemblies
2009-02-05 19:07:50 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-02-05 19:07:49 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-02-05 19:07:49 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-02-05 14:47:21 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\CursorArts
2009-02-04 21:59:06 ----A---- C:\PureRa.txt
2009-02-04 16:56:21 ----A---- C:\WINDOWS\zip.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\VFIND.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\SWSC.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\SWREG.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\sed.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\NIRCMD.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\grep.exe
2009-02-04 16:56:21 ----A---- C:\WINDOWS\fdsv.exe
2009-02-04 16:56:17 ----D---- C:\WINDOWS\ERDNT
2009-02-03 23:11:03 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\PCToolsFirewallPlus
2009-02-03 23:05:00 ----D---- C:\Program Files\Fichiers communs\PC Tools
2009-02-03 20:10:41 ----D---- C:\Program Files\Avira
2009-02-03 20:10:41 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-02-03 17:28:14 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-02-03 00:02:45 ----D---- C:\WINDOWS\ERUNT
2009-02-02 21:57:57 ----A---- C:\FindyKill_1.txt
2009-02-02 03:19:50 ----D---- C:\WINDOWS\Prefetch
2009-02-01 10:04:56 ----D---- C:\Config.Msi
2009-02-01 01:52:06 ----A---- C:\WINDOWS\system32\gncsusp.txt
2009-01-31 10:19:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-01-30 23:08:14 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-01-30 22:52:20 ----A---- C:\WINDOWS\system32\irclass.dll
2009-01-30 22:52:19 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-01-30 22:51:51 ----RA---- C:\WINDOWS\SET8D.tmp
2009-01-30 22:51:47 ----RA---- C:\WINDOWS\SET85.tmp
2009-01-30 22:51:45 ----RA---- C:\WINDOWS\SET83.tmp
2009-01-30 19:07:43 ----D---- C:\Documents and Settings\All Users\Application Data\Fighters
2009-01-30 19:04:45 ----A---- C:\Documents and Settings\Jean-Louis\Application Data\install.txt
2009-01-30 18:42:39 ----D---- C:\Program Files\Trend Micro
2009-01-30 12:16:36 ----D---- C:\WINDOWS\BDOSCAN8
2009-01-30 10:24:52 ----D---- C:\Documents and Settings\All Users\Application Data\Grisoft
2009-01-29 18:45:24 ----D---- C:\WINDOWS\system32\logs
2009-01-29 18:43:32 ----D---- C:\Program Files\BitDefender
2009-01-29 17:36:16 ----D---- C:\Program Files\Panda Security
2009-01-26 14:31:05 ----D---- C:\Documents and Settings\All Users\Application Data\Le Robert
2009-01-25 11:09:06 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-01-25 11:07:27 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-01-24 15:54:28 ----A---- C:\WINDOWS\grwin.ini
2009-01-24 15:17:42 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\DAEMON Tools Pro
2009-01-24 15:17:31 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-01-24 15:06:04 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\DAEMON Tools Lite
2009-01-14 23:14:16 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\WinRAR
2009-01-14 22:56:13 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\DriverCure
2009-01-14 22:55:56 ----D---- C:\Documents and Settings\All Users\Application Data\DriverCure
2009-01-14 22:54:55 ----D---- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2009-01-14 22:41:31 ----D---- C:\WINDOWS\tessdata
2009-01-14 22:41:31 ----A---- C:\WINDOWS\FreeOCR.net Uninstaller.exe
2009-01-14 22:41:30 ----D---- C:\Program Files\FreeOCR25
2009-01-14 14:36:25 ----D---- C:\WINDOWS\system32\IOSUBSYS
2009-01-14 14:33:43 ----A---- C:\WINDOWS\BtnConfig.ini
2009-01-11 10:46:50 ----D---- C:\Program Files\OLYMPUS
======List of files/folders modified in the last 2 months======
2009-02-28 12:04:24 ----D---- C:\Program Files\Mozilla Firefox
2009-02-28 11:57:53 ----AD---- C:\WINDOWS
2009-02-28 11:57:52 ----D---- C:\WINDOWS\Temp
2009-02-28 11:57:52 ----D---- C:\WINDOWS\Minidump
2009-02-28 11:35:06 ----D---- C:\WINDOWS\system32\drivers
2009-02-28 11:35:06 ----D---- C:\WINDOWS\system32
2009-02-28 11:35:03 ----A---- C:\WINDOWS\iTouch.ini
2009-02-28 11:33:09 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-28 11:30:03 ----A---- C:\WINDOWS\system.ini
2009-02-28 11:29:39 ----SD---- C:\WINDOWS\Tasks
2009-02-28 11:29:26 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-02-28 11:29:05 ----D---- C:\Documents and Settings\All Users\Application Data\Babylon
2009-02-28 11:24:41 ----D---- C:\WINDOWS\system32\config
2009-02-28 11:23:27 ----D---- C:\WINDOWS\AppPatch
2009-02-28 11:23:23 ----D---- C:\Program Files\Fichiers communs
2009-02-28 11:20:11 ----RASH---- C:\boot.ini
2009-02-28 11:18:20 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-02-28 11:10:56 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\FileZilla
2009-02-27 22:08:00 ----D---- C:\Program Files\Windows Media Player
2009-02-27 22:08:00 ----D---- C:\Program Files\Outlook Express
2009-02-27 22:08:00 ----D---- C:\Program Files\Internet Explorer
2009-02-27 21:40:05 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-02-27 21:37:08 ----RD---- C:\Program Files
2009-02-27 09:35:08 ----D---- C:\Program Files\Mozilla Thunderbird
2009-02-27 00:25:51 ----D---- C:\Program Files\Emoticon
2009-02-26 22:04:53 ----A---- C:\WINDOWS\NeroDigital.ini
2009-02-25 20:21:52 ----HD---- C:\WINDOWS\inf
2009-02-25 11:06:33 ----D---- C:\Program Files\DICCIONARIO CLAVE
2009-02-25 10:08:48 ----D---- C:\WINDOWS\system32\CatRoot
2009-02-25 10:08:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-02-25 09:35:38 ----HD---- C:\WINDOWS\$hf_mig$
2009-02-24 23:26:31 ----SHD---- C:\WINDOWS\Installer
2009-02-24 23:23:12 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-02-23 15:26:59 ----D---- C:\swsetup
2009-02-20 14:53:17 ----D---- C:\Program Files\TuneUp Utilities 2007
2009-02-20 14:33:30 ----D---- C:\WINDOWS\Debug
2009-02-13 18:11:19 ----D---- C:\Program Files\Norton Security Scan
2009-02-13 15:20:04 ----RSD---- C:\WINDOWS\Fonts
2009-02-12 11:28:15 ----D---- C:\WINDOWS\ie7updates
2009-02-08 10:43:40 ----D---- C:\WINDOWS\security
2009-02-06 19:50:09 ----D---- C:\WINDOWS\WinSxS
2009-02-06 09:13:06 ----D---- C:\Program Files\Folding@Home
2009-02-06 02:39:44 ----D---- C:\WINDOWS\Microsoft.NET
2009-02-06 02:39:34 ----RSD---- C:\WINDOWS\assembly
2009-02-06 01:33:15 ----SHD---- C:\System Volume Information
2009-02-06 01:33:15 ----D---- C:\WINDOWS\system32\Restore
2009-02-05 22:40:20 ----D---- C:\Program Files\ActivIcons
2009-02-05 19:24:36 ----D---- C:\WINDOWS\SxsCaPendDel
2009-02-05 19:21:03 ----D---- C:\WINDOWS\system32\fr-fr
2009-02-05 19:15:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-02-05 19:08:42 ----D---- C:\WINDOWS\system32\en-US
2009-02-05 19:08:06 ----D---- C:\WINDOWS\system32\spool
2009-02-05 14:46:55 ----D---- C:\WINDOWS\Help
2009-02-05 11:39:59 ----D---- C:\Program Files\Java
2009-02-04 22:03:03 ----RD---- C:\WINDOWS\Offline Web Pages
2009-02-04 12:24:07 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-04 00:21:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-02-03 23:19:59 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\SUPERAntiSpyware.com
2009-02-03 23:18:59 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-02-03 22:48:49 ----D---- C:\WINDOWS\Internet Logs
2009-02-03 19:49:40 ----D---- C:\Program Files\Alwil Software
2009-02-02 23:36:45 ----HDC---- C:\WINDOWS\ie7
2009-02-02 21:35:28 ----D---- C:\Program Files\eMule
2009-02-02 19:45:27 ----D---- C:\Program Files\Lavasoft
2009-02-02 19:45:27 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2009-02-02 17:17:59 ----D---- C:\Program Files\RogueRemover FREE
2009-02-02 03:17:28 ----D---- C:\WINDOWS\system32\Setup
2009-02-02 03:17:26 ----D---- C:\WINDOWS\system32\wbem
2009-02-02 03:17:26 ----D---- C:\Program Files\Fichiers communs\System
2009-02-02 01:19:16 ----D---- C:\Program Files\Messenger
2009-02-02 01:09:56 ----D---- C:\WINDOWS\ime
2009-02-02 01:09:30 ----D---- C:\WINDOWS\PeerNet
2009-02-02 01:09:29 ----D---- C:\Program Files\Movie Maker
2009-02-02 01:04:02 ----D---- C:\WINDOWS\system32\npp
2009-02-02 01:03:58 ----D---- C:\WINDOWS\msagent
2009-02-02 01:03:54 ----D---- C:\WINDOWS\srchasst
2009-02-02 01:03:47 ----D---- C:\Program Files\NetMeeting
2009-02-02 01:03:43 ----D---- C:\WINDOWS\system32\Com
2009-02-02 01:03:37 ----D---- C:\Program Files\Windows NT
2009-02-02 01:02:48 ----D---- C:\WINDOWS\system32\oobe
2009-02-02 01:02:47 ----D---- C:\WINDOWS\system32\usmt
2009-02-02 01:02:43 ----D---- C:\WINDOWS\system
2009-02-02 00:55:17 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-02-02 00:47:22 ----D---- C:\WINDOWS\EHome
2009-02-01 20:49:22 ----D---- C:\WINDOWS\Registration
2009-01-31 23:18:22 ----D---- C:\WINDOWS\SoftwareDistribution
2009-01-30 23:44:25 ----D---- C:\WINDOWS\Media
2009-01-30 23:40:45 ----D---- C:\WINDOWS\system32\1036
2009-01-30 23:40:14 ----D---- C:\WINDOWS\twain_32
2009-01-30 23:39:20 ----D---- C:\WINDOWS\system32\icsxml
2009-01-30 23:38:36 ----D---- C:\WINDOWS\system32\1033
2009-01-30 23:37:22 ----D---- C:\WINDOWS\Driver Cache
2009-01-30 23:16:20 ----D---- C:\WINDOWS\repair
2009-01-30 23:09:18 ----AC---- C:\WINDOWS\ODBCINST.INI
2009-01-30 23:08:52 ----D---- C:\WINDOWS\system32\ias
2009-01-30 23:08:17 ----RD---- C:\WINDOWS\Web
2009-01-30 23:08:04 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-01-30 23:07:49 ----A---- C:\WINDOWS\win.ini
2009-01-29 18:40:40 ----D---- C:\WINDOWS\system32\URTTemp
2009-01-25 18:53:47 ----A---- C:\WINDOWS\PR1V2.INI
2009-01-25 11:07:50 ----D---- C:\Program Files\Windows Media Connect 2
2009-01-24 16:00:20 ----AC---- C:\WINDOWS\rcwin.ini
2009-01-24 15:17:43 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\DAEMON Tools
2009-01-23 10:08:19 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-01-17 23:57:46 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\Vso
2009-01-16 21:15:42 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-01-14 14:36:04 ----D---- C:\Program Files\Google
2009-01-11 10:45:52 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-01-08 20:14:19 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\Azureus
2009-01-08 20:13:59 ----D---- C:\Documents and Settings\Jean-Louis\Application Data\uTorrent
2009-01-08 19:54:49 ----D---- C:\Program Files\CCleaner
2009-01-08 19:51:01 ----AC---- C:\WINDOWS\SUPERLEX.INI
2009-01-06 18:05:40 ----D---- C:\Program Files\Free Audio Pack
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
R1 BANTExt;Belarc SMBios Access; C:\WINDOWS\System32\Drivers\BANTExt.sys [2005-04-07 3840]
R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2005-10-11 309632]
R1 DCDisk;DCDisk; C:\WINDOWS\system32\drivers\DCDisk.sys [2007-03-30 42240]
R1 dtd;dtd; \??\C:\Program Files\Arovax Shield\dtd.sys []
R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2005-10-11 119168]
R1 RxFilter;RxFilter; C:\WINDOWS\system32\DRIVERS\RxFilter.sys [2005-10-11 50176]
R1 SASDIFSV;SASDIFSV; \??\D:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 SSHDRV84;SSHDRV84; \??\C:\WINDOWS\system32\drivers\SSHDRV84.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 CVPNDRVA;Cisco Systems IPsec Driver; \??\C:\WINDOWS\system32\Drivers\CVPNDRVA.sys []
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 PCLEPCI;PCLEPCI; C:\WINDOWS\system32\drivers\PCLEPCI.sys [2000-07-27 14235]
R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-25 1681408]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 CAMCAUD;Conexant AMC 3D Environmental Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-11-17 293120]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-11-17 280192]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DNE;Deterministic Network Enhancer Miniport; C:\WINDOWS\system32\DRIVERS\dne2000.sys [2005-06-29 110080]
R3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2005-10-11 27264]
R3 GEARAspiWDM;GEAR CDRom Filter; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2008-01-29 16168]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-10-28 1041664]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-10-28 200576]
R3 LCcfltr;Logitech USB Filter Driver; C:\WINDOWS\System32\Drivers\LCcFltr.Sys [2003-11-07 14092]
R3 LHidFlt2;Logitech HID/USB Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFlt2.Sys [2003-11-07 25502]
R3 LHidUsb;Logitech USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsb.Sys [2003-11-07 37884]
R3 LMouFlt2;Logitech Mouse Class Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFlt2.Sys [2003-11-07 70798]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
R3 SASENUM;SASENUM; \??\D:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SFilter;PCTools Driver; C:\WINDOWS\system32\DRIVERS\pctfw.sys [2008-09-22 97408]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-11-04 186016]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2004-11-08 85504]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-10-28 685184]
S3 61883;Pilote d'unité 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 akkve7hj;akkve7hj; C:\WINDOWS\system32\drivers\akkve7hj.sys []
S3 aquv9gtq;aquv9gtq; C:\WINDOWS\system32\drivers\aquv9gtq.sys []
S3 Avc;Périphérique AVC; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 BCM43XX;Pilote pour carte réseau BCM 802.11b; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2004-10-27 342912]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CVirtA;Cisco Systems VPN Adapter; C:\WINDOWS\system32\DRIVERS\CVirtA.sys [2005-05-17 5315]
S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys []
S3 exdisk;Express Disk Service; C:\WINDOWS\system32\DRIVERS\exdisk.sys []
S3 fsRamDsk;RamDisk Drive Service; C:\WINDOWS\System32\Drivers\fsRamDsk.sys [2004-09-21 37409]
S3 hidusb;hidusb; C:\WINDOWS\system32\drivers\hidusb.sys [2008-04-13 10368]
S3 itchfltr;iTouch Keyboard Filter; C:\WINDOWS\system32\DRIVERS\itchfltr.sys [2003-11-08 12953]
S3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2005-10-11 27136]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 P1110VID;Creative WebCam NX; C:\WINDOWS\system32\DRIVERS\P1110VID.sys [2003-05-14 90357]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-29 47360]
S3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe [2007-08-20 410904]
R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-25 401408]
R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [2005-11-04 1516584]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-12-12 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 NMSAccessU;NMSAccessU; C:\Program Files\Fichiers communs\NMSAccessU.exe [2007-01-25 65536]
R2 RoxWatch;Roxio Hard Drive Watcher; C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxWatch.exe [2005-10-11 155648]
R2 Seagate Sync Service;Seagate Sync Service; D:\Program Files\Seagate\Sync\SeaSyncServices.exe [2007-01-18 24120]
R2 StarWindServiceAE;StarWind AE Service; D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-03-30 504104]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
R3 RoxMediaDB;RoxMediaDB; C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxMediaDB.exe [2005-10-11 856064]
S2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-12 57344]
S2 PCToolsFirewallPlus;PC Tools Firewall Plus; D:\Program Files\PC Tools Firewall Plus\FWService.exe [2008-12-11 146800]
S2 RoxLiveShare;LiveShare P2P Server; C:\Program Files\Fichiers communs\Roxio Shared\SharedCOM8\RoxLiveShare.exe [2005-10-11 229376]
S2 RoxUpnpServer;RoxUpnpServer; C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe [2005-10-11 401408]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-09-20 29744]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-12-01 138168]
S3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\shared\hpqwmi.exe [2004-11-18 98304]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-03-14 779824]
S3 RoxUPnPRenderer;RoxUpnpRenderer; C:\Program Files\Fichiers communs\Roxio Shared\SharedCom\RoxUpnpRenderer.exe [2005-10-11 45056]
S3 UMWdf;Infrastructure de pilote-mode utilisateur Windows; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------