Posez votre question Format imprimable Liste des forums Aidez-les Statistiques Rechercher Charte Forum Virus-Sécurité

Erreur systeme de windows 0x000000F4

Dernière réponse le 15 mar 2009 à 21:42:51 Draezen, le 15 mar 2009 à 13:06:54

Signaler ce message aux modérateurs

Bonjour,
Depuis plusieurs semaines lorsque je veux éteindre mon pc, ou quiter la session ou même redémarrer j'ai un écran bleu qui apparait avec une erreur systeme puis mon pc redémare....

"Un processus ou une thread crucial au fonctionnement du systeme s'est terminée ou été interrompue de façon inattedndue.

Si vous voyer cet écran d'errue pour la premiere fois, redémarrer votre ordinateur. Si cet écran apparait encore, suivez ces étapes :

Assurez vous que tout nouveau matériel ou logicil est installé correctement.
S'il s'agit d'une nouvelle installation consultez votre fabricant de matériel ou de logiciel afin d'obtenir les mises a jours de windows dont vous avez besoin.

Si les problemes persistent, désactivez ou supprimez tout matériel ou tout logiciciel nouvellement installé. Désactivez les options de mémoire du BIOS telles que la mise en mémoire cache ou l'ombrage.
Si vous etes obligé d'utiliser le mode sans echec pour supprimer ou désactiver des composants, redémarrer votre ordinateur, appuyer sur F8 pour sélectionner les options de démarrage avancées, puis sélectionner le Mode sans échec.

Informations techniques :

*** STOP: 0x000000F4 (0x00000003,0x880D5DA0,0x880D5F14,0x805D297C)

Début du vidange de la mémoire physique....."

Et j'ai ce message a chaque fois que je quitte windows....
Je sais que ce genre d'erreur arrive lorsqu'un processus necessaire au fonctionnement de windows se termine, mais la je ne vois pas ce que ça peute etre.

J'ai aussi remarqué que lorsque j'ouvre mon gestionaire de tache dans l'onglet applications j'ai un icone sans nom qui est en cours d'execution même lorsque rien n'est ouvert et je pense que mon probleme est lié a cette "application"
Lorsque je fais un clic droit dessus et aller dans le processus il m'amene sur "svhost32.exe"

Voila, j'attend vos réponse avec impatiences
Merci

Configuration: Windows XP
Internet Explorer 7.0

Meilleures réponses pour « Erreur systeme de windows 0x000000F4 » dans :

Erreur systeme - conflit adresse Ip Voir

Lsass.exe erreur system (Résolu) Voir

Erreur systeme irrecuperable "STOP : c000021A Voir

Autoexec.NT - Sous-système Windows 16 bits VoirEn voulant installer un programme 16 bits sous Windows, le message d'erreur suivant apparaît : Sous-système Windows 16 bits C:\WINDOWS\SYSTEM32\AUTOEXEC.NT. Le fichier système ne convient pas à l'exécution des applications MS-DOS ou Microsoft...

Erreur système : Microsoft Visual Basic VoirEn ouvrant Excel, vous rencontrez un message d'erreur. Une fenêtre au nom de "Microsoft Visual Basic" s'ouvre avec le contenu suivant : Erreur système &H80004005 (-2147467259). Erreur non spécifiée Pour corriger le problème, suivez les...

Codes d'erreur de Windows VoirLa liste ci-dessous détaille les codes d'erreur s'affichant dans les boîtes de dialogue sous Windows : Code Description ------------------------ 1 Fonction incorrecte. 2 Le fichier spécifié est introuvable. 3 Le chemin d'accès spécifié...

FICHIER WINDOWS SYSTEM32 WINLOAD.EXE MANQUANT Voir

Erreur systeme windows Voir

Message d'erreur \windows\system32\winload.ex Voir

Posez votre question Répondre

gen-hackman, le 15 mar 2009 à 13:10:25

Bonjour :

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 13:16:23

Logfile of random's system information tool 1.05 (written by random/random)
Run by Draezen at 2009-03-15 14:13:01
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 11 GB (7%) free of 153 GB
Total RAM: 2038 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:13:12, on 15/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\NA_Service.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\svhost32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\NA_XWAY.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Draezen\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Draezen.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [svhost32] svhost32.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINDOWS\system32\NA_Service.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
End of file - 11694 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-07 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C56CB6B0-0D96-11D6-8C65-B2868B609932}]
NTIECatcher Class - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll [2005-09-08 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-07 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-07 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=C:\WINDOWS\system32\JMRaidSetup.exe [2007-01-08 1953792]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-04-23 13529088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-04-23 86016]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-23 16804864]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2007-11-20 1826816]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2008-06-18 77824]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-13 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-07 136600]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"svhost32"=C:\WINDOWS\svhost32.exe [2009-02-06 180224]
"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2008-10-16 1368064]
"IntelWireless"=C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe [2008-10-16 1191936]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
C:\WINDOWS\system32\antiwpa.dll [2008-05-30 60416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-06 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceClassicControlPanel"=1
"NoDriveAutoRun"=FFFFFFFF
"NofolderOptions"=0
"NoFind"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoFolderOptions"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}]
shell\AutoRun\command - G:\wd_windows_tools\WDSetup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}]
shell\Shell00\command - F:\Start.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}]
shell\AutoRun\command - G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe
shell\open\command - G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}]
shell\Auto\command - cmd /C launch.bat
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cmd /C launch.bat

======List of files/folders created in the last 2 months======

2009-03-15 14:13:01 ----D---- C:\rsit
2009-03-14 16:21:42 ----D---- C:\Program Files\Adobe
2009-03-14 16:21:16 ----SHD---- C:\Config.Msi
2009-03-11 23:08:18 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-03-11 23:08:12 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-03-11 23:07:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-03-06 12:01:12 ----D---- C:\RaidTool
2009-03-05 15:04:04 ----D---- C:\Program Files\Fichiers communs\Intel
2009-03-02 15:36:00 ----D---- C:\CVIPtools
2009-03-02 00:12:33 ----A---- C:\WINDOWS\ntbtlog.txt
2009-02-25 18:02:07 ----A---- C:\WINDOWS\imsins.BAK
2009-02-25 18:01:45 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-02-24 19:43:20 ----DC---- C:\Documents and Settings\Draezen\Application Data\vlc
2009-02-24 19:42:23 ----D---- C:\Program Files\VideoLAN
2009-02-23 17:56:23 ----RSH---- C:\WINDOWS\svhost32.exe
2009-02-19 13:39:54 ----A---- C:\WINDOWS\BlendSettings.ini
2009-02-19 13:33:15 ----D---- C:\Program Files\Oblivion
2009-02-16 17:59:17 ----A---- C:\WINDOWS\system32\DIMM.dll
2009-02-16 17:58:48 ----A---- C:\WINDOWS\system32\MSIMRT.dll
2009-02-09 13:47:54 ----D---- C:\Program Files\TechnoLogismiki
2009-02-06 14:21:32 ----A---- C:\WINDOWS\system32\is4tray.dll
2009-02-06 14:21:25 ----D---- C:\Program Files\Invisible Secrets 4
2009-02-05 18:42:06 ----A---- C:\WINDOWS\RUNAWAY.INI
2009-02-04 17:51:21 ----D---- C:\Program Files\PENDULO Studios
2009-01-30 19:01:06 ----D---- C:\.jagex_cache_32
2009-01-30 18:27:17 ----D---- C:\WINDOWS\.jagex_cache_32
2009-01-30 11:42:19 ----RA---- C:\WINDOWS\system32\ftserui2.dll
2009-01-30 11:42:19 ----RA---- C:\WINDOWS\system32\FTLang.dll
2009-01-30 11:41:57 ----RA---- C:\WINDOWS\system32\ftdiun2k.ini
2009-01-30 11:41:54 ----RA---- C:\WINDOWS\system32\ftdiunin.exe
2009-01-25 14:34:53 ----RA---- C:\WINDOWS\unasetup.exe
2009-01-25 14:33:24 ----A---- C:\WINDOWS\system32\unrar.dll
2009-01-25 14:33:23 ----RA---- C:\WINDOWS\uncsetup.exe
2009-01-22 18:47:21 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-01-22 18:37:19 ----D---- C:\Program Files\Microsoft Games
2009-01-19 14:18:53 ----D---- C:\Program Files\FusionSoft DVD Player XP
2009-01-18 22:19:37 ----DC---- C:\Documents and Settings\Draezen\Application Data\dvdcss

======List of files/folders modified in the last 2 months======

2009-03-15 14:12:46 ----D---- C:\WINDOWS\Prefetch
2009-03-15 12:42:30 ----D---- C:\WINDOWS\Temp
2009-03-15 12:41:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-03-15 12:29:37 ----D---- C:\WINDOWS
2009-03-15 12:29:32 ----A---- C:\WINDOWS\system32\NetAccessLog.txt
2009-03-15 12:29:16 ----SHD---- C:\WINDOWS\CSC
2009-03-15 11:41:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-03-15 11:20:31 ----D---- C:\WINDOWS\system32
2009-03-15 11:20:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-03-14 16:22:36 ----SHD---- C:\WINDOWS\Installer
2009-03-14 16:21:53 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-03-14 16:21:47 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-03-14 16:21:42 ----RD---- C:\Program Files
2009-03-14 15:19:24 ----A---- C:\WINDOWS\NeroDigital.ini
2009-03-13 17:39:19 ----D---- C:\Documents and Settings\Draezen\Application Data\uTorrent
2009-03-11 23:08:21 ----HD---- C:\WINDOWS\inf
2009-03-11 23:08:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-03-11 17:11:28 ----HD---- C:\WINDOWS\$hf_mig$
2009-03-08 22:48:15 ----D---- C:\Program Files\Notepad++
2009-03-07 14:58:41 ----HD---- C:\Program Files\InstallShield Installation Information
2009-03-07 14:58:38 ----D---- C:\Program Files\Ubisoft
2009-03-06 12:01:12 ----D---- C:\WINDOWS\RaidTool
2009-03-06 12:01:11 ----D---- C:\WINDOWS\system32\drivers
2009-03-06 12:01:09 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-03-05 21:47:52 ----SDC---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-03-05 21:47:52 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-03-05 15:04:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-03-05 15:04:37 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-03-05 15:04:04 ----D---- C:\Program Files\Fichiers communs
2009-03-05 14:50:19 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-03-05 14:50:11 ----D---- C:\Program Files\ma-config.com
2009-03-05 14:50:10 ----DC---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-03-05 14:29:30 ----D---- C:\Program Files\a-squared Free
2009-03-02 19:35:46 ----DC---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-16 17:54:01 ----D---- C:\WINDOWS\Debug
2009-02-15 22:37:00 ----D---- C:\Program Files\Microsoft Works
2009-02-15 16:35:46 ----D---- C:\Program Files\eMule
2009-02-13 00:11:38 ----D---- C:\Program Files\Internet Explorer
2009-02-13 00:11:27 ----D---- C:\WINDOWS\ie7updates
2009-02-12 06:56:17 ----A---- C:\WINDOWS\system32\MRT.exe
2009-02-05 23:11:35 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-02-03 16:10:23 ----D---- C:\PL7TEMP
2009-02-03 15:41:06 ----A---- C:\WINDOWS\IMAGEIN.INI
2009-02-03 15:37:38 ----D---- C:\IMAGEIN3
2009-01-22 18:53:29 ----SD---- C:\Documents and Settings\Draezen\Application Data\Microsoft
2009-01-22 18:47:28 ----RSD---- C:\WINDOWS\assembly
2009-01-22 18:45:43 ----D---- C:\WINDOWS\system32\DirectX
2009-01-22 15:52:28 ----DC---- C:\Documents and Settings\Draezen\Application Data\gtk-2.0
2009-01-22 15:11:55 ----A---- C:\WINDOWS\win.ini
2009-01-16 22:15:42 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-13 11904]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 Duntlw;UNTLW device; C:\WINDOWS\System32\Drivers\DuntlwNT.sys [2003-01-29 53824]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-12-07 25280]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAud.sys [2007-02-12 625664]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-11-17 3636864]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-04-23 6534688]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-12-06 285952]
S3 a3ox139l;a3ox139l; C:\WINDOWS\system32\drivers\a3ox139l.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 FTDIBUS;USB Serial Converter Driver; C:\WINDOWS\system32\drivers\ftdibus.sys [2004-04-20 24209]
S3 FTSER2K;USB Serial Port Driver; C:\WINDOWS\system32\drivers\ftser2k.sys [2004-04-20 57404]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-24 4749824]
S3 itecir;ITECIR Infrared Receiver; C:\WINDOWS\system32\DRIVERS\itecir.sys [2007-01-08 46592]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETw4x32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows XP 32 bits; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2008-03-13 2530176]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS []
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2005-11-30 474184]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\system32\ZDCndis5.SYS []
S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-03-05 425080]
R2 aawservice;Ad-Aware 2007 Service; C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [2008-03-19 607576]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-10-16 860160]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-07 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NA_Service;NetAccess Service; C:\WINDOWS\system32\NA_Service.exe [2003-02-05 45056]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-04-23 159812]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2008-10-16 466944]
R2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2008-10-16 905216]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-01-24 216232]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-12-05 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

-----------------EOF-----------------

Répondre à Draezen

Draezen, le 15 mar 2009 à 13:17:14

Info.txt logfile of random's system information tool 1.05 2009-03-15 14:13:14

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2007-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Algolab Photo Vector 1.98.77-->C:\PROGRA~1\ALGOLA~1\UNWISE.EXE C:\PROGRA~1\ALGOLA~1\INSTALL.LOG
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Borland Delphi 7-->MsiExec.exe /I{72263053-50D1-4598-9502-51ED64E54C51}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80
Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -IPBxVen5a.inf
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
CVIPtools-->C:\WINDOWS\IsUninst.exe -fC:\CVIPtools\Uninst.isu
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Dawn of War - Dark Crusade-->C:\Program Files\InstallShield Installation Information\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}\setup.exe -runfromtemp -l0x040c -removeonly
Dawn Of War - Winter Assault-->MsiExec.exe /X{DD8408E9-9421-484F-979D-DB6361E3E828}
Dawn Of War-->MsiExec.exe /X{83F12F73-D52E-40C0-93B1-463C311C4E17}
Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Fable - The Lost Chapters-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
Fallout 2-->C:\WINDOWS\ipuninst.exe -fC:\Program Files\BlackIsle\Fallout2\uninst.log
Fallout Tactics-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\14 Degrees East\Fallout Tactics\Uninst.isu"
FileZilla Client 3.1.5-->C:\Program Files\FileZilla FTP Client\uninstall.exe
FTDI USB Serial Converter Drivers-->C:\WINDOWS\system32\ftdiunin.exe C:\WINDOWS\system32\ftdiun2k.ini
FusionSoft DVD Player XP Version 5.0-->"C:\Program Files\FusionSoft DVD Player XP\unins000.exe"
GIMP 2.6.3-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
Hackman Suite-->"C:\Program Files\TechnoLogismiki\Hackman\Uninstall.exe" "C:\Program Files\TechnoLogismiki\Hackman\install.log" -u
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hitman: Contracts-->C:\PROGRA~1\Eidos\HITMAN~1\uninstall.exe
Inkscape 0.46-->C:\Program Files\Inkscape\Uninstall.exe
Intel PROSet Wireless-->Intel PROSet Wireless
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
ITECIR Driver-->C:\Program Files\InstallShield Installation Information\{FCED9B62-34FF-4C15-8A23-F65221F7874D}\setup.exe -runfromtemp -l0x0009 -removeonly
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMicron JMB36X Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
LCD-Test v1.3.2-->"C:\Program Files\LCD-Test\unins000.exe"
Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{8AFB8FC4-3EBA-4C67-943F-CF43DB2180F1}
Magic ISO Maker v5.4 (build 0251)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Marvell Miniport Driver-->MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}
Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework 1.0-->"C:\WINDOWS\$NtUninstallWdf01000$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Works 6-9 Converter-->MsiExec.exe /X{172423F9-522A-483A-AD65-03600CE4CA4F}
Might and Magic® VI-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Might and Magic VI\Uninst.isu"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
Nero 7 Essentials-->MsiExec.exe /X{8A8C4EAC-9AB7-45FA-9480-5716FD261036}
Net Transport 1.94.282-->"C:\Program Files\Xi\NetTransport 2\unins000.exe"
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
Package de pilotes Windows - ITE Tech.Inc. (itecir) HIDClass (01/05/2007 5.0.0003.2)-->C:\PROGRA~1\DIFX\F46A63020E122F0A\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\itecir_4680E068E00FB6287B0B00C040C9D5CA4B7B7B16\itecir.inf
Peggle Extreme-->"C:\Program Files\Steam\steam.exe" steam://uninstall/3483
PL7 Pro V4.4-->C:\WINDOWS\PL7SYS\UNINSTAL\SETUP PL7PRO/PL7 Pro/44/F
Portal: The First Slice-->"C:\Program Files\Steam\steam.exe" steam://uninstall/410
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
Quake III Arena Point Release 1.32-->C:\WINDOWS\unvise32.exe C:\Program Files\Quake III Arena\uninstal5.log
Quake III Arena-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quake III Arena\QIII.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Raster to Vector 9.0-->"C:\Program Files\Raster to Vector\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.50.03-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything
RUNAWAY - A road adventure-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6CEE8642-A462-42CE-8C3B-22E370DE7947}\setup.exe"
SA Driver Manager-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\XWAYMgrUninst.isu -cC:\WINDOWS\system32\XwayMgrU.dll
SA UNITELWAY WDM Driver-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\UNITELWAYW2KDriverUninst.isu -cC:\WINDOWS\system32\DUNTLWU.DLL
Schemax 1.0 Beta R11-->"C:\Program Files\Schemax\unins000.exe"
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE}
SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\STEINB~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\STEINB~1\CUBASE~1\INSTALL.LOG
SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Unreal Tournament 2004-->C:\UT2004\System\Setup.exe uninstall "UT2004"
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xvid 1.1.3 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
Zattoo 3.3.1 Beta-->C:\Program Files\Zattoo\uninst.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090314-0]

System event log

Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 5
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 4
Source Name: EventLog
Time Written: 20090301132520.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 3
Source Name: EventLog
Time Written: 20090228234518.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20090228234510.000000+120
Event Type: Informations
User:

Application event log

Computer Name: DRAEZEN-PORT
Event Code: 4
Message: The LightScribe Service started successfully.

Record Number: 4851
Source Name: LightScribeService
Time Written: 20081230125817.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 1
Message:
Record Number: 4850
Source Name: Bonjour Service
Time Written: 20081230125813.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 0
Message:
Record Number: 4849
Source Name: EvtEng
Time Written: 20081230125813.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 101
Message: msnmsgr (2496) Le moteur de base de données est arrêté.

Record Number: 4848
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:

Computer Name: DRAEZEN-PORT
Event Code: 103
Message: msnmsgr (2496) \\.\C:\Documents and Settings\Draezen\Local Settings\Application Data\Microsoft\Messenger\t.danger@hotmail.fr\SharingMetadata\Working\database_58BC_AC6_BC0A_9E9E\dfsr.db: Le moteur de base de données a arrêté une instance (0).

Record Number: 4847
Source Name: ESENT
Time Written: 20081230012317.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\Borland\Delphi7\Bin;C:\Program Files\Borland\Delphi7\Projects\Bpl\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Intel\WiFi\bin\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"CVIPtoolsHOME"=C:\CVIPtools

-----------------EOF-----------------

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 13:20:18

Desinstalle AD-Aware il vaut pas un clou

ensuite :

Désactiver le TeaTimer de Spybot (Merci à Nico):

Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.

* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.

=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.

ensuite :

Télécharge SDFix sur ton bureau :
ici :SDFix
ou ici SDFix
ou ici SDFix

--> Double-clique sur SDFix.exe et choisis "Install" .

Tuto

Puis une fois l'installe faite ,

Impératif : Démarrer en mode sans echec .

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...

Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
-->Tapes Y pour lancer le script ...
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
presses une touche pour redémarrer quand il te le sera demandé .

Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .

Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
C:\SDFix sous le nom "Report.txt".

Poste ce dernier dans ta prochaine réponse

®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 14:02:09

[b]SDFix: Version 1.240 /b
Run by Draezen on 15/03/2009 at 14:42

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services /b:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files /b:

No Trojan Files Found

Removing Temp Files

[b]ADS Check /b:

[b]Final Check /b:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-15 14:53:48
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:8c,24,5b,5a,c8,04,58,c6,38,4e,21,6a,ed,61,05,57,23,54,12,cc,55,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,12,4d,b2,9f,ea,c6,f1,90,ee,9b,05,45,52,bd,97,0f,a4,..
"khjeh"=hex:4a,4b,90,5a,ab,3b,ed,a2,b2,3b,23,8d,43,81,ec,60,8a,b0,57,55,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:90,66,14,07,c9,af,0b,1f,e7,53,98,1b,41,47,32,60,69,57,98,92,3a,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:8c,24,5b,5a,c8,04,58,c6,38,4e,21,6a,ed,61,05,57,23,54,12,cc,55,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,12,4d,b2,9f,ea,c6,f1,90,ee,9b,05,45,52,bd,97,0f,a4,..
"khjeh"=hex:4a,4b,90,5a,ab,3b,ed,a2,b2,3b,23,8d,43,81,ec,60,8a,b0,57,55,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:90,66,14,07,c9,af,0b,1f,e7,53,98,1b,41,47,32,60,69,57,98,92,3a,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services /b:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files /b:

[b]Files with Hidden Attributes /b:

Fri 6 Feb 2009 180,224 ..SHR --- "C:\WINDOWS\svhost32.exe"
Wed 22 Oct 2008 949,072 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
Mon 7 Jul 2008 1,429,840 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 7 Jul 2008 4,891,472 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Tue 16 Sep 2008 1,833,296 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
Sat 2 Aug 2008 4 A..H. --- "C:\PL7\PL7SYS\SERVERS\SERVER.DLL"
Mon 29 Aug 2005 121,240 A..HR --- "C:\Program Files\THQ\Dawn Of War\Disk1CheckW40k.EXE"
Sat 20 Aug 2005 121,237 A..HR --- "C:\Program Files\THQ\Dawn Of War\Disk1Check.EXE"
Thu 31 Jul 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 26 Oct 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\550d841de13098ccce98beef5ab9e667\BIT2.tmp"
Tue 9 Dec 2008 7,779,776 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\7598c5e898b491e1fae3c5353371da80\BIT1.tmp"

[b]Finished!/b

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 14:56:58

Désactiver le TeaTimer de Spybot (Merci à Nico):

Pour désactiver le TeaTimer :
=> Ouvrir Spybot S&D
=> Dans le menu "Mode", séléctionner le mode avancé.
=> Une fenêtre demande confirmation cliquer sur "oui".
=> Une fois le mode avancé actif, ouvrir l'onglet "Outils".
=> Cliquer sur Résident.
=> La partie Résident comporte deux lignes qui sont normalement cochées :
*Résident "SDHelper" (bloqueur de téléchargements nuisibles pour Internet Explorer) actif.

* Résident "TeaTimer" (Protection des réglages système fondamentaux) actif.

=> Décocher la ligne TeaTimer.
=> Redémarrer Spybot (le fermer et le réouvrir)
=> Retourner dans le menu Résident et vérifier qu'il soit bien désactivé.

ensuite :

Télécharge ToolBar S&D ( de Eric_71/Team IDN ) sur ton bureau :

TOOLBAR S&D

( Tuto : http://toolbarsd.googlepages.com/aideenimages )

!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !!

* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
--> Tapes ( option " recherche " ) puis tape sur [Entrée].

Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

ensuite :

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :

OtMoveIt 3

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:services

:files
C:\WINDOWS\svhost32.exe
C:\WINDOWS\SYSTEM32\antiwpa.dll
G:\wd_windows_tools\WDSetup.exe
F:\Start.exe
G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe
C:\Program Files\Oblivion

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"svhost32"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}]

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]

---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 15:25:48

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz )
BIOS : Ver 1.00PARTTBL
USER : Draezen ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090314-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:10 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 15/03/2009|16:00 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
C:\Program Files\DAEMON Tools Toolbar\Resources
C:\Program Files\DAEMON Tools Toolbar\uninst.exe
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://fr.yahoo.com/"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

--------------------\\ Recherche d'autres infections

--------------------\\ Suspect ..

C:\WINDOWS\system32\antiwpa.dll

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Draezen\Application Data\uTorrent\Delphi Keygen.zip.torrent
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt

1 - "C:\ToolBar SD\TB_1.txt" - 15/03/2009|16:00 - Option : [1]

-----------\\ Fin du rapport a 16:00:53,22

Répondre à Draezen

Draezen, le 15 mar 2009 à 15:26:59

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== FILES ==========
C:\WINDOWS\svhost32.exe moved successfully.
C:\WINDOWS\SYSTEM32\antiwpa.dll unregistered successfully.
File move failed. C:\WINDOWS\SYSTEM32\antiwpa.dll scheduled to be moved on reboot.
File/Folder G:\wd_windows_tools\WDSetup.exe not found.
File/Folder F:\Start.exe not found.
File/Folder G:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\svhost32.exe not found.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\épée du roi sorier moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Screenshots moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons\Mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\Orcish moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons\mithril moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis\Data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\the_elder_scrolls_4_oblivion_mithril_and_orcish_weapon_sets_version_2_by_ionis moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor\mythicdawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus\Icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\robemcblack moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\black moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks\allcolors moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes\Capes and Cloaks moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Clothes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Skingrad moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Leyawiin moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Kvatch moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Chorrol moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Cheydinhal moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bruma moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Bravil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial\Anvil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\Town Ceremonial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja\ninja2 moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\ninja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor\MythicDawn moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\M moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial\F moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp\Imperial moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice\MythicDemon Armor V1.0.esp moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound\Voice moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Sound moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\Slave moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicSage moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicOminous moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNinja moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicNecro moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicKnight moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicDevil moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon\MythicArmor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor\MythicDemon moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes\Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor\Meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Quest For Mythic Armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchsmall moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire\firetorchlarge moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\fire moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\m moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass\f moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor\flameglass moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes\armor moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Phoenix armour moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion - mods\Frostmourne moved successfully.
C:\Program Files\Oblivion\Oblivion - mods moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Video moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\icons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book\outlawsposters moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus\book moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\menus moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures\Effects moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Textures moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Shaders moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\omod conversion data moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Special moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Public moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Explore moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Dungeon moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music\Battle moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\Music moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar\sword moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\templar moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo\Frostmournenew moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons\jojjo moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes\weapons moved successfully.
C:\Program Files\Oblivion\Oblivion\Data\meshes moved successfully.
C:\Program Files\Oblivion\Oblivion\Data moved successfully.
C:\Program Files\Oblivion\Oblivion moved successfully.
C:\Program Files\Oblivion moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost32 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa\\ not found.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1274eaec-f3aa-11dd-acad-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4893e11a-df2d-11dd-ac76-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7520ca6b-79d4-11dd-ab7c-001b248cdba3}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff960aa0-607b-11dd-ab52-001b248cdba3}\\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03152009_160225

Files moved on Reboot...
File C:\WINDOWS\SYSTEM32\antiwpa.dll not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_1dc.dat moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_5ec.dat moved successfully.

Est ce normal que quand mon pc a redémarer on m'a demander d'activer mon windows alors que c'était deja fait ???????

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 15:35:57

C:\DOCUME~1\Draezen\Application Data\uTorrent\Delphi Keygen.zip.torrent
C:\DOCUME~1\Draezen\Mes documents\210 Diablo 2 & Lord Of Destuction Serials [battle.net Diablo II online works LoD FLT-D2B cdkeygen & how to crack].txt

supprime ceci

ensuite :

apparemment le prog qui t'a active le windows etait infecte

qui t'a installé le programme d'activation?
qui te l'a activé ?
qui t'a installé le windows ?

ton jeu oblivion aussi(tu joues en ligne avec , c est normal j ai eu le meme probleme avec CS

Relance Toolbar-S&D en double-cliquant sur le raccourci
.
Ø Tape sur "2" puis valide en appuyant sur "Entrée".

! Ne ferme pas la fenêtre lors de la suppression !

Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 15:42:02

Faut que je supprime Oblivion aussi ???? (je ne joue pas en ligne avec par contre c'est un ami qui me l'a passer donc je ne sais pas d'ou il vient....)

Pour windows, c'est un ami qui me l'a installé et activé et je n'ai pas eu de probleme depuis, à par celui la qui est apparu il y a 3 semaines.

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 15:47:18

Faut que je supprime Oblivion aussi

c'est deja fait; les restes seront retirés au nettoyage

Pour windows, c'est un ami qui me l'a installé et activé et je n'ai pas eu de probleme depuis,
ben apparemment c'est un windows cracké

apparu il y a 3 semaines.

lequel ? ®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 15:54:56

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 16:52:46

> Télécharge Dr.Web CureIt sur ton Bureau : Dr Web

- Double clique <drweb-cureit.exe> et ensuite clique sur <Analyse>;

- Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
- Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
- De retour à la fenêtre principale : clique pour activer <Analyse complète>
- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
- Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
- Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
- Ferme Dr.Web Cureit
- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
- Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.
®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 19:37:58

RegUBP2b-Draezen.reg;C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2;Trojan.StartPage.1505;Supprimé.;
ComboFix.exe\327882R2FWJFW\psexec.cfexe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\ComboFix.exe;Program.PsExec.171;;
ComboFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
SDFix.exe\SDFix\apps\Process.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus\SDFix.exe;Tool.Prockill;;
SDFix.exe;C:\Documents and Settings\Draezen\Bureau\Logiciels\Anti Virus;L'archive contient des éléments infectés;Quarantaine.;
Desktop_.ini;C:\Documents and Settings\Draezen\Mes documents\Ma musique\Black Sabbath\1980 - Between Heaven And Hell;Win32.HLLW.Gavir.ini;Supprimé.;
Process.exe;C:\SDFix\apps;Tool.Prockill;Quarantaine.;
A0064248.reg;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;Trojan.StartPage.1505;Supprimé.;
A0064249.exe\327882R2FWJFW\psexec.cfexe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064249.exe;Program.PsExec.171;;
A0064249.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
A0064250.exe\SDFix\apps\Process.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237\A0064250.exe;Tool.Prockill;;
A0064250.exe;C:\System Volume Information\_restore{FC786480-51CE-48C1-B674-BB611D6EE4D4}\RP237;L'archive contient des éléments infectés;Quarantaine.;
wordpad.exe;C:\WINDOWS\$NtServicePackUninstall$;Trojan.Packed.433;Supprimé.;

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 20:06:17

Répondre à gen-hackman

Draezen, le 15 mar 2009 à 21:39:38

Il manque quelque chose ??? parceque moi je n'est que ça dans le rapport....

Répondre à Draezen

gen-hackman, le 15 mar 2009 à 21:42:51

Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

Télécharge MalwareByte's :
Malwarebytes ou :
Malwarebytes

* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

* Potasse le tuto pour te familiariser avec le prg :

Tuto

( cela dis, il est très simple d'utilisation ).

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

* Lance Malwarebyte's .

Fais un examen dit "Complet" .

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

®© ----™g3и-н@¢км@и™---- ©®

Répondre à gen-hackman

Posez votre question Répondre