Des pubs qui s'ouvrent toutes seul ...

Fermé
lolo38 - 9 mai 2009 à 22:40
 Utilisateur anonyme - 10 mai 2009 à 02:05
Bonjour,
Alors voilà, tout est dans le titre, lorsque je suis sur internet, des pubs indesirables s'ouvrent toutes (ads souvent) seul et parfois se bloquant en page toute blanche, se qui provoque la desactivation de mon pc ...

Aidez moi svp !

10 réponses

Utilisateur anonyme
9 mai 2009 à 22:41
Salut,

Télécharge OTViewIt (de OldTimer) sur ton Bureau.


/!\ Désactive ton Antivirus,antispyware,pare-feu /!\

Double clique sur le raccourci présent sur le Bureau)

]Coche la case "Scan All User"

Sous "File Age" en haut, clique sur le menu déroulant et sélectionne "90 days".

Clique sur "Run Scan"

/!\ Laisse Travailler l'outil /!\

2 rapports s'afficheront sur ton bureau OTViewIt ainsi que Extra.TxT.

Poste le rapport OTViewIt
1
Utilisateur anonyme
9 mai 2009 à 23:23
Re,

==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

▶ Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

▶ Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

▶ Choisis l'option 1 ( "recherche") et tapes "entrée" .

▶Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

Tutoriel Toolbard-S&D

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
1
Utilisateur anonyme
9 mai 2009 à 23:45
Re,

Fais ceci maintenant :

▶ Nettoyage avec ToolBar S&D :

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

▶Relances Toolbar-S&D en double-cliquant sur le raccourci.

▶ Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

Note : Ne touches à rien lors de la suppression !!

▶ Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
1
ok je vais le faire ...
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
OTViewIt logfile created on: 09/05/2009 23:16:13 - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Lokmane\Bureau
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

511,48 Mb Total Physical Memory | 116,88 Mb Available Physical Memory | 22,85% Memory free
1,22 Gb Paging File | 0,65 Gb Available in Paging File | 53,68% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 186,30 Gb Total Space | 167,64 Gb Free Space | 89,98% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HOME
Current User Name: Lokmane
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 90 Days

[color=orange]========== Processes ==========/color

[2006/02/21 21:39:16 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
[2006/02/21 21:39:16 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
[2008/09/06 00:30:04 | 00,952,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe
[2007/03/28 02:07:42 | 00,593,920 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
[2009/01/08 20:30:26 | 00,645,328 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe
[2007/05/08 17:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
[2009/01/27 09:23:30 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
[2008/08/19 13:26:44 | 00,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
[2008/06/19 16:42:44 | 02,808,832 | ---- | M] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2007/02/23 16:32:56 | 00,126,976 | ---- | M] (SAMSUNG ELECTRONICS) -- C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
[2007/01/30 21:36:30 | 00,057,344 | ---- | M] ((주)마크애니) -- C:\Program Files\MarkAny\ContentSafer\MaAgent.exe
[2008/04/14 14:00:00 | 00,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\regsvr32.exe
[2009/05/08 11:46:25 | 00,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
[2009/02/28 06:54:41 | 00,636,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
[2009/02/06 19:51:28 | 03,885,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
[2004/11/04 20:28:24 | 00,258,048 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[2009/01/27 09:23:30 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[2009/02/11 12:06:36 | 00,210,216 | ---- | M] () -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
[2009/01/08 20:30:26 | 00,797,864 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe
[2007/02/09 18:03:38 | 00,983,040 | R--- | M] (Teleca AB) -- C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
[2007/02/28 11:55:18 | 00,880,640 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
[2009/01/09 11:31:16 | 02,482,848 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe
[2009/01/09 08:06:52 | 00,359,952 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Fichiers communs\McAfee\McProxy\McProxy.exe
[2009/03/25 11:05:48 | 00,144,704 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe
[2001/02/23 11:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
[2009/03/19 11:42:02 | 00,884,360 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MPF\MpfSrv.exe
[2009/01/09 09:22:10 | 00,026,640 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSK\msksrver.exe
[2008/04/13 21:34:24 | 00,073,796 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\slserv.exe
[2009/05/01 10:13:43 | 00,307,704 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
[2009/03/24 00:03:18 | 00,606,736 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe
[2009/01/27 09:23:30 | 00,382,384 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jucheck.exe
[2009/05/09 23:15:27 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lokmane\Bureau\OTViewIt.exe

[color=orange]========== (O23) Win32 Services ==========/color

[2009/01/02 11:06:10 | 00,234,888 | ---- | M] () -- C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe -- (ASKUpgrade [Auto | Stopped])
[2006/02/21 21:39:16 | 00,405,504 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
[2009/05/03 10:46:28 | 00,182,768 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
[2005/11/14 02:06:04 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
[2009/01/27 09:23:30 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
[2009/04/21 15:36:50 | 00,216,232 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice [On_Demand | Stopped])
[2009/02/11 12:06:36 | 00,210,216 | ---- | M] () -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service [Auto | Running])
[2009/01/08 20:30:26 | 00,797,864 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe -- (mcmscsvc [Auto | Running])
[2009/01/09 11:31:16 | 02,482,848 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe -- (McNASvc [Auto | Running])
[2009/04/01 14:21:30 | 00,365,072 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS [On_Demand | Stopped])
[2009/01/09 08:06:52 | 00,359,952 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Fichiers communs\McAfee\McProxy\McProxy.exe -- (McProxy [Auto | Running])
[2009/03/25 11:05:48 | 00,144,704 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe -- (McShield [Unknown | Running])
[2009/03/24 00:03:18 | 00,606,736 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe -- (McSysmon [On_Demand | Running])
[2001/02/23 11:07:30 | 00,270,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe -- (MDM [Auto | Running])
[2009/03/19 11:42:02 | 00,884,360 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MPF\MpfSrv.exe -- (MpfService [Auto | Running])
[2009/01/09 09:22:10 | 00,026,640 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSK\msksrver.exe -- (MSK80Service [Auto | Running])
[2003/07/28 21:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
[2007/08/09 09:27:52 | 00,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12 [Auto | Stopped])
[2008/04/13 21:34:24 | 00,073,796 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\slserv.exe -- (SLService [Auto | Running])
[2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[color=orange]========== Driver Services ==========/color

[2001/08/17 21:20:04 | 00,096,256 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\ac97intc.sys -- (ac97intc [On_Demand | Stopped])
[2006/02/21 21:46:26 | 01,505,792 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
[2007/06/13 16:43:54 | 00,094,208 | ---- | M] (Guillemot Corporation) -- C:\WINDOWS\system32\drivers\camfilt2.sys -- (camfilt2 [On_Demand | Stopped])
[2009/04/21 15:39:26 | 00,014,336 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2 [On_Demand | Stopped])
[2008/04/14 14:00:00 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus [On_Demand | Running])
[2004/12/14 19:06:28 | 00,051,120 | R--- | M] (HP) -- C:\WINDOWS\system32\drivers\HPZid412.sys -- (HPZid412 [On_Demand | Stopped])
[2004/12/14 19:06:28 | 00,016,496 | R--- | M] (HP) -- C:\WINDOWS\system32\drivers\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped])
[2004/12/14 19:06:28 | 00,021,744 | R--- | M] (HP) -- C:\WINDOWS\system32\drivers\HPZius12.sys -- (HPZius12 [On_Demand | Stopped])
[2009/04/14 16:09:56 | 05,069,312 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
[2008/04/13 19:05:16 | 00,014,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kbdhid.sys -- (kbdhid [System | Stopped])
[2009/03/25 11:06:28 | 00,079,880 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk [On_Demand | Running])
[2009/03/25 11:06:28 | 00,035,272 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk [On_Demand | Running])
[2009/03/25 11:06:28 | 00,214,024 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk [System | Running])
[2009/03/25 11:05:54 | 00,034,216 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\mferkdk.sys -- (mferkdk [On_Demand | Stopped])
[2009/03/25 11:06:30 | 00,040,552 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\mfesmfk.sys -- (mfesmfk [On_Demand | Running])
[2001/08/17 23:57:38 | 00,016,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA [On_Demand | Running])
[2008/10/23 13:08:54 | 00,120,136 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\drivers\Mpfp.sys -- (MPFP [System | Running])
[2008/04/13 13:23:42 | 00,126,686 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5 [On_Demand | Running])
[2008/04/13 13:23:40 | 01,309,184 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm [On_Demand | Stopped])
[2008/04/13 13:23:42 | 00,180,360 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax [On_Demand | Stopped])
[2008/04/14 14:00:00 | 00,088,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx [Auto | Running])
[2008/04/14 14:00:00 | 00,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb [Auto | Running])
[2008/04/14 14:00:00 | 00,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx [Auto | Running])
[2008/04/14 14:00:00 | 00,163,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\nwrdr.sys -- (NWRDR [On_Demand | Running])
[2008/04/14 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink [On_Demand | Running])
[2008/04/13 13:23:44 | 00,013,776 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\RecAgent.sys -- (RecAgent [Boot | Running])
[2008/04/13 11:35:40 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139 [On_Demand | Running])
[2006/09/05 21:07:00 | 00,061,536 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59bus.sys -- (se59bus [On_Demand | Stopped])
[2006/09/05 21:07:48 | 00,009,360 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59mdfl.sys -- (se59mdfl [On_Demand | Stopped])
[2006/09/05 21:07:52 | 00,097,088 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59mdm.sys -- (se59mdm [On_Demand | Stopped])
[2006/09/05 21:08:40 | 00,088,624 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59mgmt.sys -- (se59mgmt [On_Demand | Stopped])
[2006/09/05 21:06:28 | 00,018,704 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59nd5.sys -- (se59nd5 [On_Demand | Stopped])
[2006/09/05 21:09:26 | 00,086,432 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59obex.sys -- (se59obex [On_Demand | Stopped])
[2006/09/05 21:06:22 | 00,090,800 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se59unic.sys -- (se59unic [On_Demand | Stopped])
[2008/04/14 14:00:00 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv [On_Demand | Stopped])
[2008/04/13 13:23:46 | 00,404,990 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\slntamr.sys -- (Slntamr [On_Demand | Running])
[2008/04/13 13:23:48 | 00,095,424 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal [On_Demand | Stopped])
[2008/04/13 13:23:48 | 00,013,240 | ---- | M] (Smart Link) -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup [On_Demand | Running])
[2007/04/13 20:24:04 | 10,246,144 | ---- | M] (Sonix Co. Ltd.) -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3 [On_Demand | Stopped])
[2007/07/03 16:54:24 | 00,080,552 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus [On_Demand | Stopped])
[2007/07/03 16:57:24 | 00,011,944 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl [On_Demand | Stopped])
[2007/07/03 16:58:20 | 00,106,792 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm [On_Demand | Stopped])
[2006/07/24 16:05:00 | 00,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen [System | Running])
[2008/04/13 12:45:14 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio [On_Demand | Stopped])

[color=orange]========== (R ) Internet Explorer ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=https://www.msn.com/fr-fr/?ocid=iehp
"Default_Search_URL"=https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
"Default_Secondary_Page_URL"=
"Extensions Off Page"=about:NoAdd-ons
"Local Page"=%SystemRoot%\system32\blank.htm
"Search Page"=https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
"Security Risk Page"=about:SecurityRisk
"Start Page"=https://www.msn.com/fr-fr/?ocid=iehp

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"CustomizeSearch"=https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
"SearchAssistant"=https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]
"Local Page"=C:\WINDOWS\system32\blank.htm
"Search Page"=https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
"Start Page"=http://moteur.chat-land.org/

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main]

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main]
"Local Page"=C:\WINDOWS\system32\blank.htm
"Search Page"=https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
"Start Page"=http://moteur.chat-land.org/

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0

[color=orange]========== (O1) Hosts File ==========/color

HOSTS File = (790 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
First 25 entries...
127.0.0.1 localhost

[color=orange]========== (O2) BHO's ==========/color

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (HKLM) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
{201f27d4-3704-41d6-89c1-aa35e39143ed} (HKLM) -- C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
{27B4851A-3207-45A2-B947-BE8AFE6163AB} (HKLM) -- c:\Program Files\McAfee\MSK\mskapbho.dll ()
{3049C3E9-B461-4BC5-8870-4C09146192CA} (HKLM) -- C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
{5BFAC7FE-A5C6-75B7-3F4F-C07F3648C7BB} (HKLM) -- C:\WINDOWS\system32\qupjbtyntkjid.dll ()
{5C255C8A-E604-49b4-9D64-90988571CECB} (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
{6714ADBD-C6C1-42A8-BD84-9C9339059421} (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} (HKLM) -- C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
{9030D464-4C02-4ABF-8ECC-5164760863C6} (HKLM) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
{AA58ED58-01DD-4d91-8333-CF10577473F7} (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (HKLM) -- C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
{B164E929-A1B6-4A06-B104-2CD0E90A88FF} (HKLM) -- c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} (HKLM) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
{DBC80044-A445-435b-BC74-9C25C1C588A9} (HKLM) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (HKLM) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
{f241ea71-bba4-8746-1d7b-78d50cf4f0d0} (HKLM) -- C:\WINDOWS\system32\nsh234.dll ()

[color=orange]========== (O3) Toolbars ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}" (HKLM) -- c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{10000000-1000-1000-1000-100000000000}" (HKLM) -- C:\Program Files\IEToolbar\ECO Bar\ecobar.dll ()

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}" (HKLM) -- C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{10000000-1000-1000-1000-100000000000}" (HKLM) -- C:\Program Files\IEToolbar\ECO Bar\ecobar.dll ()

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}" (HKLM) -- C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{10000000-1000-1000-1000-100000000000}" (HKLM) -- C:\Program Files\IEToolbar\ECO Bar\ecobar.dll ()

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}" (HKLM) -- C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)

[color=orange]========== (O4) Run Keys ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
"AlcWzrd"=ALCWZRD.EXE (RealTek Semicoductor Corp.)
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
"MAAgent"=C:\Program Files\MarkAny\ContentSafer\MAAgent.exe ((주)마크애니)
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey (McAfee, Inc.)
"McENUI"=C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide (McAfee, Inc.)
"SMSTray"=C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe (SAMSUNG ELECTRONICS)
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions ()
"SoundMan"=SOUNDMAN.EXE (Realtek Semiconductor Corp.)
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot (RealNetworks, Inc.)
"zbrvlmmdvhhowzvgy"=C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\qupjbtyntkjid.dll" (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

[color=orange]========== (O4) Startup Folders ==========/color

[2004/11/04 20:28:24 | 00,258,048 | ---- | M] (Hewlett-Packard Co.) -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[2009/01/13 18:58:28 | 00,024,576 | ---- | M] (BB Inc) -- C:\Documents and Settings\Lokmane\Menu Démarrer\Programmes\Démarrage\runit_32.lnk = C:\Program Files\runit\runit_32.exe

[color=orange]========== (O6 & O7) Current Version Policies ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

[color=orange]========== (O8) IE Context Menu Extensions ==========/color

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2009/03/02 15:09:56 | 10,351,440 | ---- | M] (Microsoft Corporation)

[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2009/03/02 15:09:56 | 10,351,440 | ---- | M] (Microsoft Corporation)

[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2009/03/02 15:09:56 | 10,351,440 | ---- | M] (Microsoft Corporation)

[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: Reg Error: Key does not exist or could not be opened. File not found

[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: Reg Error: Key does not exist or could not be opened. File not found

[HKEY_USERS\S-1-5-21-1482476501-413027322-1417001333-1004\Software\Microsoft\Internet Explorer\MenuExt\]
E&xporter vers Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2009/03/02 15:09:56 | 10,351,440 | ---- | M] (Microsoft Corporation)

[color=orange]========== (O9) IE Extensions ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
{92780B25-18CC-41C8-B9BE-3C9C571A8263}: Button: Recherche -- %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [2007/04/19 15:10:18 | 00,063,840 | ---- | M] (Microsoft Corporation)
{e2e2dd38-d088-4134-82b7-f2ba38496583}: Menu: @xpsp3res.dll,-20001 -- %SystemRoot%\Network Diagnostic\xpnetdiag.exe [2008/04/14 14:00:00 | 00,558,080 | ---- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Button: Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2008/04/13 20:34:14 | 01,695,232 | ---- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Menu: Windows Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2008/04/13 20:34:14 | 01,695,232 | ---- | M] (Microsoft Corporation)

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 14:00:00 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/13 20:34:14 | 01,695,232 | ---- | M] (Microsoft Corporation)

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 14:00:00 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/13 20:34:14 | 01,695,232 | ---- | M] (Microsoft Corporation)

[color=orange]========== (O12) Internet Explorer Plugins ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]
PluginsPage: "" = http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s
PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery

[color=orange]========== (O13) Default Prefixes ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
""=http://

[color=orange]========== (O15) Trusted Sites ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
1 domain(s) and sub-domain(s) not assigned to a zone.

[color=orange]========== (O16) DPF ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]
{0CCA191D-13A6-4E29-B746-314DEE697D83}: http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab -- Facebook Photo Uploader 5 Control
{166B1BCA-3F9C-11CF-8075-444553540000}: http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab -- Shockwave ActiveX Control
{17492023-C23A-453E-A040-C7C580BBF700}: http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab -- Windows Genuine Advantage Validation Tool
{867E13F2-7F31-44FB-AC97-CD38E0DC46EF}: http://fichiers.touslesdrivers.com/hardwaredetection/hardwaredetection_3_1_2_0.cab -- HardwareDetection Control
{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab -- Java Plug-in 1.6.0_11
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab -- Java Plug-in 1.6.0_11
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab -- Java Plug-in 1.6.0_11

[color=orange]========== (O17) DNS Name Servers ==========/color

{0717841F-A451-4BB9-BD17-92E2DD40D800} (Servers: | Description: )
{A7A25C64-F50B-45D1-B676-4998AFC4CA28} (Servers: | Description: Sony Ericsson Device 089 USB Ethernet Emulation (NDIS 5))
{E83305BC-F153-49FD-8A61-D53C439B4003} (Servers: | Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family)
{F8702324-AE45-40CB-8902-B1831CA31374} (Servers: | Description: Carte réseau 1394)

[color=orange]========== (O20) Winlogon Notify Settings ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]
AtiExtEvent: "DllName" = Ati2evxx.dll -- C:\WINDOWS\system32\ati2evxx.dll (ATI Technologies Inc.)

[color=orange]========== Shell Execute Hooks ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{88485281-8b4b-4f8d-9ede-82e29a064277}" (HKLM) -- C:\Program Files\MarkAny\ContentSafer\MACSMANAGER.dll (MarkAny Cooperation.)

[color=orange]========== LSA *Authentication Packages* ==========/color

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages"=msv1_0,nwprovau,
>[2008/04/14 14:00:00 | 00,145,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\nwprovau.dll

[color=orange]========== Safeboot Options ==========/color

"AlternateShell"=cmd.exe

[color=orange]========== CDRom AutoRun Settings ==========/color

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1

[color=orange]========== Autorun Files on Drives ==========/color

AUTOEXEC.BAT []
[2009/01/16 12:11:13 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT -- [ NTFS ]

[color=orange]========== MountPoints2 ==========/color

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d446ca0-2e4d-11de-bded-000feac84c67}\Shell]
""=AutoRun


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d446ca0-2e4d-11de-bded-000feac84c67}\Shell\AutoRun\command]
""=I:\LaunchU3.exe -- File not found

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\Shell]
""=AutoRun


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\Shell\AutoRun\command]
""=I:\LaunchU3.exe -- File not found

[color=orange]========== Files/Folders - Created Within 90 Days ==========/color

[24 C:\WINDOWS\System32\*.tmp files]
[2009/05/09 23:15:25 | 00,422,912 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lokmane\Bureau\OTViewIt.exe
[2009/05/08 15:26:27 | 03,438,479 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\090506111737505512.gif
[2009/05/08 11:47:32 | 00,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\xing shared
[2009/05/08 11:47:27 | 00,000,951 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\RealPlayer.lnk
[2009/05/08 11:46:31 | 00,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2009/05/06 13:37:39 | 00,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2009/05/06 13:37:38 | 00,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2009/05/05 20:56:26 | 00,059,558 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Chat.mp3
[2009/05/05 20:51:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Bureau\Messenger
[2009/05/05 20:47:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Mes documents\My Art
[2009/05/05 20:06:43 | 00,037,579 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Beyonce(2).jpg
[2009/05/05 19:51:30 | 00,036,214 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Beyonce.jpg
[2009/05/05 19:49:17 | 00,164,257 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Fast_And_Furious_4.mp3
[2009/05/05 13:03:18 | 00,020,289 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Tui Tui SmS.mp3
[2009/05/05 11:52:07 | 00,038,524 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\1878971229-Chole-chole-chole-les-algeriens-danger-2008.html
[2009/05/03 21:27:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Application Data\AVS4YOU
[2009/05/03 21:21:58 | 00,014,931 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\rot(2).mpeg
[2009/05/03 21:21:48 | 00,151,717 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - TARZAN.mp3
[2009/05/03 21:21:41 | 00,116,696 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\bruitage - klaxon camion.mp3
[2009/05/03 21:21:18 | 00,522,240 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Combat De Chats.mp3
[2009/05/03 21:21:11 | 00,708,855 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitage - Ronflement.mp3
[2009/05/03 21:20:59 | 00,948,352 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Aboiements(2).mp3
[2009/05/03 21:20:51 | 00,055,946 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Police.mp3
[2009/05/03 21:20:45 | 00,111,221 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Coups De Feu.mp3
[2009/05/03 21:20:15 | 00,573,568 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Vache(2).mp3
[2009/05/03 21:20:09 | 00,152,440 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\loups.mpeg
[2009/05/03 21:20:01 | 00,016,185 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\agneau.mpeg
[2009/05/03 21:19:55 | 00,047,114 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\chimpanze.mpeg
[2009/05/03 21:19:46 | 00,014,931 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\rot.mpeg
[2009/05/03 21:19:37 | 00,573,568 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Vache.mp3
[2009/05/03 21:19:32 | 00,025,121 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitage - Prout Gras.mp3
[2009/05/03 21:19:19 | 00,548,460 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitage - Brebis.mp3
[2009/05/03 21:19:12 | 00,226,499 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Rugissement De Lion.mp3
[2009/05/03 21:18:54 | 00,172,661 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Effects .mp3
[2009/05/03 21:18:49 | 00,860,200 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Bébé qui pleure.mp3
[2009/05/03 21:18:41 | 00,948,352 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitages - Aboiements.mp3
[2009/05/03 21:17:15 | 00,407,971 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\bruitages - Sirene De Police.mp3
[2009/05/02 22:05:11 | 00,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ProgHelp.dll
[2009/05/02 22:05:11 | 00,044,440 | ---- | C] () -- C:\WINDOWS\System32\MtpAccess.dll
[2009/05/01 19:05:40 | 00,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2009/05/01 18:09:46 | 00,013,002 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Photo0472+.jpg
[2009/05/01 17:55:59 | 00,014,666 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bogoss8n.jpg
[2009/05/01 17:39:13 | 00,137,862 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\New_Lokmane_Bogosssss.bmp
[2009/05/01 17:25:00 | 00,830,300 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bruitage - pets.mp3
[2009/05/01 16:33:43 | 00,112,636 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\akon-freedom-album-cover.jpg
[2009/05/01 16:24:53 | 02,111,120 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\2pac.gif
[2009/05/01 16:17:59 | 00,095,300 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Oran__by_beebodz.jpg
[2009/05/01 16:16:41 | 00,268,861 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Wahran_by_roooka.jpg
[2009/05/01 16:11:39 | 00,062,447 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\alger_02_by_yacertouhami.jpg
[2009/05/01 16:02:06 | 00,010,564 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\7960614a5cdb140b.jpg
[2009/05/01 15:59:09 | 00,100,989 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Bladi_by_slevin28.jpg
[2009/05/01 15:58:53 | 00,039,434 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Flag_of_ALGERIA_by_OAMstyle.jpg
[2009/05/01 15:58:13 | 00,092,658 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\Please_don__t_go_tonight_by_vampire_zombie.jpg
[2009/05/01 15:47:05 | 00,183,916 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\592423177_dfcd6cfb51.jpg
[2009/05/01 15:17:03 | 00,000,000 | ---D | C] -- C:\ConvertTemp
[2009/05/01 15:14:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Application Data\Samsung
[2009/05/01 15:11:28 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2009/05/01 15:07:39 | 00,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\framedyn.dll
[2009/05/01 15:06:55 | 00,106,792 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdmdm.sys
[2009/05/01 15:06:55 | 00,080,552 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdbus.sys
[2009/05/01 15:06:55 | 00,011,944 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdmdfl.sys
[2009/05/01 15:06:55 | 00,009,256 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdwhnt.sys
[2009/05/01 15:06:55 | 00,009,256 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdwh.sys
[2009/05/01 15:06:55 | 00,009,256 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdcmnt.sys
[2009/05/01 15:06:55 | 00,009,256 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdcm.sys
[2009/05/01 15:06:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Samsung_USB_Drivers
[2009/05/01 15:05:51 | 00,000,766 | ---- | C] () -- C:\WINDOWS\System32\Uninstall.ico
[2009/05/01 15:05:33 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2009/05/01 15:05:08 | 00,000,673 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Samsung PC Studio 3.lnk
[2009/05/01 14:43:52 | 00,001,829 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\VirginMega Premium.lnk
[2009/05/01 14:43:51 | 00,000,000 | ---D | C] -- C:\Program Files\VirginMega
[2009/05/01 14:43:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2009/05/01 14:39:55 | 00,016,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009/05/01 14:03:32 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2009/05/01 14:03:31 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2009/05/01 13:46:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Bureau\wmp11-windowsxp-x86-FR-FR(2)
[2009/05/01 13:26:12 | 00,000,704 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\WinRAR.lnk
[2009/05/01 13:26:07 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009/05/01 12:11:35 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2009/05/01 12:10:17 | 04,909,440 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lokmane\Bureau\Silverlight.2.0.exe
[2009/04/30 21:42:49 | 00,085,654 | ---- | C] () -- C:\WINDOWS\System32\956bb211-d156-4122-fade-6d7bdc1448e8.exe
[2009/04/30 21:42:39 | 00,905,670 | ---- | C] () -- C:\WINDOWS\tfqm6026.exe
[2009/04/30 21:42:27 | 00,905,670 | ---- | C] () -- C:\WINDOWS\enlw7557.exe
[2009/04/30 21:42:23 | 00,069,697 | ---- | C] () -- C:\WINDOWS\lcggf0805.exe
[2009/04/30 21:42:09 | 00,225,494 | ---- | C] () -- C:\WINDOWS\vfeo4546.exe
[2009/04/30 21:42:09 | 00,069,697 | ---- | C] () -- C:\WINDOWS\khcr87864.exe
[2009/04/30 21:41:32 | 00,048,291 | ---- | C] () -- C:\WINDOWS\System32\gvadogbrvmop.exe
[2009/04/30 21:41:26 | 00,225,494 | ---- | C] () -- C:\WINDOWS\fnmw7870.exe
[2009/04/30 21:30:11 | 00,003,584 | ---- | C] () -- C:\Documents and Settings\Lokmane\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/30 21:26:28 | 25,839,688 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lokmane\Bureau\wmp11-windowsxp-x86-FR-FR(2).exe
[2009/04/30 20:27:51 | 00,000,000 | ---D | C] -- C:\Program Files\XviD
[2009/04/30 20:27:10 | 00,001,781 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Samsung Media Studio5.lnk
[2009/04/30 20:26:30 | 00,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2009/04/30 20:26:30 | 00,569,344 | ---- | C] ((c) MusicCity) -- C:\WINDOWS\System32\muzdecode.ax
[2009/04/30 20:26:30 | 00,258,048 | ---- | C] ((c) PeeringPortal) -- C:\WINDOWS\System32\muzoggsp.ax
[2009/04/30 20:26:30 | 00,245,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unicows.dll
[2009/04/30 20:26:30 | 00,200,704 | ---- | C] ( (c) MusicCity) -- C:\WINDOWS\System32\muzwmts.dll
[2009/04/30 20:26:30 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2009/04/30 20:26:30 | 00,131,072 | ---- | C] ((c) MusicCity) -- C:\WINDOWS\System32\muzmpgsp.ax
[2009/04/30 20:26:30 | 00,122,880 | ---- | C] ((c) MUSICCITY) -- C:\WINDOWS\System32\muzeffect.ax
[2009/04/30 20:26:30 | 00,110,592 | ---- | C] (ENJsoft Corporation) -- C:\WINDOWS\System32\tg_dump.dll
[2009/04/30 20:26:30 | 00,110,592 | ---- | C] ((c) MusicCity) -- C:\WINDOWS\System32\muzmp4sp.ax
[2009/04/30 20:26:29 | 00,471,040 | ---- | C] (Musiccity Co.Ltd.) -- C:\WINDOWS\System32\muzapp.dll
[2009/04/30 20:26:29 | 00,397,429 | ---- | C] (Pixtree Technologies, Inc.) -- C:\WINDOWS\System32\PixtreeMP4FormatWriter.ax
[2009/04/30 20:26:29 | 00,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2009/04/30 20:26:29 | 00,163,840 | ---- | C] (Musiccity Co.Ltd.) -- C:\WINDOWS\System32\muzapp.exe
[2009/04/30 20:26:29 | 00,135,168 | ---- | C] (Musiccity Co.Ltd.) -- C:\WINDOWS\System32\muzaf1.dll
[2009/04/30 20:26:29 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\Ogg.dll
[2009/04/30 20:25:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Application Data\InstallShield
[2009/04/30 18:24:54 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2009/04/30 18:20:58 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\umdf\MsftWdf_user_01_00_00.Wdf
[2009/04/30 18:20:50 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2009/04/30 17:13:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2009/04/30 17:13:49 | 00,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\WINDOWS\System32\CSVer.dll
[2009/04/30 17:13:49 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009/04/30 17:12:53 | 00,000,000 | ---D | C] -- C:\Intel
[2009/04/30 17:12:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Bureau\infinst_autol
[2009/04/30 17:11:24 | 02,284,293 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\infinst_autol.zip
[2009/04/30 16:57:10 | 00,038,496 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Configuration.mc
[2009/04/30 16:29:18 | 02,678,026 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\L_Algeroi_Roi_16_CRB_EN_FORCE_TAHiiA_EL_HAMRA_O_BiiDA-Abdelkader_chaou_-El_Bahdja.mp3
[2009/04/30 16:22:14 | 01,254,505 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\ALGEROIS-HADJ_LAKHDAR-HADJ_LAKHDAR.mp3
[2009/04/30 16:20:41 | 05,909,083 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\CLICK_PAS_TU_DEUH--Hey_wa_hey_wa.mp3
[2009/04/29 13:08:54 | 00,430,510 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\3456304156_b3189245ce_b.jpg
[2009/04/29 13:08:43 | 00,448,095 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\3455483893_b56766cb57_b.jpg
[2009/04/29 13:00:39 | 00,261,664 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\3484306536_d2d73c031e_b.jpg
[2009/04/29 12:59:22 | 00,554,244 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\3482858462_41c98c5e05_b.jpg
[2009/04/29 12:38:24 | 00,034,478 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\09-02-22_11_49_47.jpg
[2009/04/29 12:38:14 | 00,056,257 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\2301367809_1.jpg
[2009/04/29 12:38:07 | 00,061,396 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\2301367885_1.jpg
[2009/04/29 12:37:46 | 00,746,097 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\dsc00480copy.jpg
[2009/04/27 15:41:35 | 00,046,507 | ---- | C] () -- C:\Documents and Settings\Lokmane\Bureau\2905368.jpg
[2009/04/27 14:38:19 | 00,184,627 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2275113.jpg
[2009/04/27 14:38:18 | 00,379,035 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\big_33328_62396.jpg
[2009/04/27 14:38:18 | 00,119,304 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\signature_ompsg-c545ad.png
[2009/04/27 14:38:18 | 00,066,418 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2584_72107178297_518148297_2236852_8123351_n.jpg
[2009/04/27 14:38:18 | 00,062,544 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n1270048114_30263226_8736.jpg
[2009/04/27 14:38:18 | 00,058,712 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n609006933_1645665_3352.jpg
[2009/04/27 14:38:18 | 00,052,508 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2cc31eee931e3b83517c9da91b384817.jpg
[2009/04/27 14:38:18 | 00,051,205 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\1904914235_small_1.jpg
[2009/04/27 14:38:18 | 00,045,931 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n128786875205_5694930_3482.jpg
[2009/04/27 14:38:18 | 00,043,673 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\image.gif
[2009/04/27 14:38:18 | 00,037,896 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\440309441005203044.jpeg
[2009/04/27 14:38:18 | 00,036,711 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n128786875205_5694931_3666.jpg
[2009/04/27 14:38:18 | 00,033,879 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n128786875205_5694957_7711.jpg
[2009/04/27 14:38:18 | 00,007,791 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n36241286852_2933.jpg
[2009/04/27 14:38:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Mes documents\Samsung Media Studio
[2009/04/27 14:38:17 | 02,457,625 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\72454_jjj2_122_401lo.jpg
[2009/04/27 14:38:17 | 00,820,992 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\algermedinado5.jpg
[2009/04/27 14:38:17 | 00,517,793 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\big_33296_62396.jpg
[2009/04/27 14:38:17 | 00,483,814 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\93064023.gif
[2009/04/27 14:38:17 | 00,470,734 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\95309665.gif
[2009/04/27 14:38:17 | 00,436,006 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\95312193.gif
[2009/04/27 14:38:17 | 00,413,672 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\124413733.gif
[2009/04/27 14:38:17 | 00,390,141 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090107063226117354.gif
[2009/04/27 14:38:17 | 00,368,329 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\95316744.gif
[2009/04/27 14:38:17 | 00,250,414 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\lastpamel.gif
[2009/04/27 14:38:17 | 00,091,810 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090306114259988971.jpg
[2009/04/27 14:38:17 | 00,041,890 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2346785509_small_2.jpg
[2009/04/27 14:38:17 | 00,040,255 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\su35ep4.jpg
[2009/04/27 14:38:17 | 00,031,634 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\1418629783.jpg
[2009/04/27 14:38:17 | 00,026,834 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\124439452_small.jpg
[2009/04/27 14:38:17 | 00,022,341 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\403058chelskiir9.jpg
[2009/04/27 14:38:17 | 00,021,886 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Samsung-SGH-F480-Player-Style-Photo.jpg
[2009/04/27 14:38:17 | 00,019,851 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\237561629_small.jpg
[2009/04/27 14:38:16 | 00,145,983 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090309063903443147.png
[2009/04/27 14:38:16 | 00,139,167 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\sans1_11.jpg
[2009/04/27 14:38:16 | 00,118,917 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\29yh7v4.jpg
[2009/04/27 14:38:16 | 00,115,736 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2lbkjyb.jpg
[2009/04/27 14:38:16 | 00,115,623 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\zuiiqv.jpg
[2009/04/27 14:38:16 | 00,111,183 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\29lz68w.jpg
[2009/04/27 14:38:16 | 00,071,472 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\article-2664-benie2.jpg
[2009/04/27 14:38:16 | 00,070,077 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\pt9074.jpg
[2009/04/27 14:38:16 | 00,057,628 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n28073702539_1969926_2522932.jpg
[2009/04/27 14:38:16 | 00,052,929 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2342175969_1.jpg
[2009/04/27 14:38:16 | 00,047,458 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\GRENOBLE_FEGHOULI_120209.jpg
[2009/04/27 14:38:16 | 00,033,966 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\av-3240.png
[2009/04/27 14:38:16 | 00,033,770 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\GRENOBLE_FEGHOULI_240908.jpg
[2009/04/27 14:38:16 | 00,024,985 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\articleimage.ashx.jpeg
[2009/04/27 14:38:16 | 00,021,006 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\image.jpeg
[2009/04/27 14:38:16 | 00,017,212 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Anti_psg.jpg
[2009/04/27 14:38:16 | 00,014,550 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\1440858667.jpg
[2009/04/27 14:38:16 | 00,011,510 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\anti psg_32421.jpg
[2009/04/27 14:38:05 | 00,400,706 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\RDP.jpg
[2009/04/27 14:38:05 | 00,347,648 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lokmane\Mes documents\mspaint.exe
[2009/04/27 14:38:05 | 00,129,077 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090419112528325459.jpg
[2009/04/27 14:38:05 | 00,037,615 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2403336719_1.jpg
[2009/04/27 14:38:05 | 00,027,507 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2403334089_1.jpg
[2009/04/27 14:38:05 | 00,018,168 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2403336547_1.jpg
[2009/04/27 14:38:03 | 00,997,156 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090406090439316954.gif
[2009/04/27 14:38:03 | 00,012,298 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\thumb_0b9ab5a07b4528747f3175bbef41c09b.jpg
[2009/04/27 14:38:02 | 18,473,733 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\20090330_luis17h_rmc.mp3
[2009/04/27 14:38:02 | 00,246,318 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\5juilletxt5.jpg
[2009/04/27 14:37:59 | 00,026,178 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\PDF_14082006v_brk1.pdf
[2009/04/27 14:37:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Lokmane\Mes documents\Australie
[2009/04/27 14:37:25 | 00,562,717 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3455479287_47b0cf3543_b.jpg
[2009/04/27 14:37:25 | 00,448,095 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3455483893_b56766cb57_b.jpg
[2009/04/27 14:37:25 | 00,430,510 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3456304156_b3189245ce_b.jpg
[2009/04/27 14:37:25 | 00,152,596 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\baraki4.png
[2009/04/27 14:37:25 | 00,142,783 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\baraki1.jpg
[2009/04/27 14:37:25 | 00,130,494 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090419112916884779.jpg
[2009/04/27 14:37:25 | 00,108,188 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\09-01-29_13_57_17.jpg
[2009/04/27 14:37:25 | 00,083,707 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2185478427_1.jpg
[2009/04/27 14:37:23 | 00,400,404 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3455481881_5ca86f9c86_b.jpg
[2009/04/27 14:37:23 | 00,290,166 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Eiffel_trocadero_i.jpg
[2009/04/27 14:37:23 | 00,252,841 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\6hkw0w.jpg
[2009/04/27 14:37:23 | 00,226,820 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\baraki6.png
[2009/04/27 14:37:23 | 00,213,775 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\photo892tj4.jpg
[2009/04/27 14:37:23 | 00,158,919 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090418105748514488.jpg
[2009/04/27 14:37:23 | 00,147,566 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\baraki3.png
[2009/04/27 14:37:23 | 00,123,293 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090419112853742787.jpg
[2009/04/27 14:37:23 | 00,030,240 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Cannaba.jpg
[2009/04/27 14:37:21 | 00,120,120 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\090419112720865866.jpg
[2009/04/27 14:36:29 | 00,802,337 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\dsc00365copy.jpg
[2009/04/27 14:36:29 | 00,159,711 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3372789233_c59eea4627.jpg
[2009/04/27 14:36:29 | 00,157,878 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3373607270_2cc09d2681.jpg
[2009/04/27 14:36:29 | 00,098,516 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3373555458_13e3d18969.jpg
[2009/04/27 14:36:29 | 00,082,934 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n1264367346_30385554_2985995.jpg
[2009/04/27 14:36:29 | 00,077,338 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n1264367346_30385555_393552.jpg
[2009/04/27 14:36:29 | 00,038,936 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2pac.jpg
[2009/04/27 14:36:29 | 00,026,105 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\dsc02046t.jpg
[2009/04/27 14:36:28 | 00,750,857 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\dsc00368copy.jpg
[2009/04/27 14:36:28 | 00,398,784 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3393684253_461a2a2408_b.jpg
[2009/04/27 14:36:28 | 00,387,315 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\1800288030_cf7cd0059a_b.jpg
[2009/04/27 14:36:28 | 00,376,433 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\3282393763_9200a5d09b_b.jpg
[2009/04/27 14:36:28 | 00,184,560 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2198526888_3e3a5f9f13_b.jpg
[2009/04/27 14:36:28 | 00,182,368 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\alg20809oe0.png
[2009/04/27 14:36:28 | 00,078,757 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2290566625_1.jpg
[2009/04/27 14:36:28 | 00,057,586 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\2250014631_2.jpg
[2009/04/27 14:36:28 | 00,057,306 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\16974931.jpg
[2009/04/27 14:36:28 | 00,053,354 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\n729613597_1515132_3551.jpg
[2009/04/27 14:36:28 | 00,046,701 | ---- | C] () -- C:\Documents and Settings\Lokmane\Mes documents\Hammam.jpg
[2009/04/27 14:
0
OTViewIt Extras logfile created on: 09/05/2009 23:16:13 - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Lokmane\Bureau
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

511,48 Mb Total Physical Memory | 116,88 Mb Available Physical Memory | 22,85% Memory free
1,22 Gb Paging File | 0,65 Gb Available in Paging File | 53,68% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 186,30 Gb Total Space | 167,64 Gb Free Space | 89,98% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HOME
Current User Name: Lokmane
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 90 Days

[color=orange]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

[color=orange]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=1
"AntiVirusDisableNotify"=1
"FirewallDisableNotify"=1
"UpdatesDisableNotify"=0
"AntiVirusOverride"=0
"FirewallOverride"=0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall"=1
"DisableNotifications"=0
"DoNotAllowExceptions"=0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

[color=orange]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[2008/04/14 14:00:00 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2008/04/14 14:00:00 | 00,142,848 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2009/02/06 19:51:28 | 03,885,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2008/04/14 14:00:00 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2008/04/14 14:00:00 | 00,142,848 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2006/04/11 09:03:44 | 00,163,840 | ---- | M] (Musiccity Co.Ltd.) -- C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player
[2008/04/14 14:00:00 | 00,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres
[2008/09/18 20:50:21 | 00,147,456 | ---- | M] (Lime Wire, LLC) -- C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
[2009/02/06 19:51:28 | 03,885,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
[2007/07/02 16:04:32 | 10,031,104 | ---- | M] (Guillemot Corporation S.A.) -- C:\Program Files\Hercules\Classic Silver\Station2.exe:*:Enabled:Hercules Webcam Station Evolution
[2009/01/09 11:31:16 | 02,482,848 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent
[2009/04/21 15:36:50 | 00,216,232 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice
[2008/04/14 14:00:00 | 00,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test

[color=orange]========== (O10) Winsock2 Catalogs ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\]
NameSpace_Catalog5\Catalog_Entries\000000000004 [Protocole de transport compatible NWLink IPX/SPX/NetBIOS] -- C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)

[color=orange]========== (O18) Protocol Handlers ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
ipp: [HKLM - No CLSID value]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 13:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2009/02/06 19:52:44 | 00,062,304 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
msdaipp: [HKLM - No CLSID value]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 13:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 13:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2009/02/06 19:52:44 | 00,062,304 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2007/03/14 14:10:22 | 07,255,384 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} (HKLM) [Data Page Pluggable Protocol mso-offdap Handler])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2007/05/10 14:45:34 | 08,069,464 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} (HKLM) [Data Page Plugable Protocal mso-offdap11 Handler])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2009/02/13 13:44:56 | 00,150,032 | ---- | M] () c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (sacore:{5513F07E-936B-4E52-9B00-067394E91CC5} (HKLM) [McAfee SACore Protocol Handler])

[color=orange]========== (O18) Protocol Filters ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters
[2007/04/19 14:57:40 | 00,046,432 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL text/xml:{807553E5-5146-11D5-A672-00B0D022E945} (HKLM) [Reg Error: Value does not exist or could not be read.]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters
[2009/05/01 10:11:37 | 00,470,512 | ---- | M] (Google Inc.) C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll x-sdch:{B1759355-3EEC-4C1E-B0F1-B719FE26E377} (HKLM) [Google Dictionary Compression filter]

[color=orange]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{059C042E-796A-4ACC-A81A-ECC2010BB78C}"=Windows Live Messenger
"{06A940CD-4924-485E-8500-476C9E08A820}"=Samsung PC Studio 3
"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}"=Scan
"{14BEB6DF-A499-4A38-8E06-E173BCD5C087}"=ScannerCopy
"{17293791-C82E-476C-9997-9A0FF234A19B}"=HP Product Assistant
"{181821B7-82AA-44DA-9DAF-EF254CCB670A}"=Fax
"{18455581-E099-4BA8-BC6B-F34B2F06600C}"=Google Toolbar for Internet Explorer
"{205C6BDD-7B73-42DE-8505-9A093F35A238}"=Outil de téléchargement Windows Live
"{20FBC0A0-3160-4F14-83ED-3A74BB6B8C31}"=TrayApp
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}"=MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}"=Java(TM) 6 Update 11
"{2E8428AD-6CD2-4031-916A-3CF9BBF2DEC9}"=Unload
"{342C7C88-D335-4bc2-8CF1-281857629CE2}"=HP PSC & OfficeJet 4.7
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}"=HP Product Assistant
"{391E18CE-7D3B-45E9-A8F0-34E77F14F47A}"=ProductContext
"{3947442A-1409-45fc-A885-FB1CF937675D}"=1400
"{3B4E636E-9D65-4D67-BA61-189800823F52}"=Windows Live Communications Platform
"{442BE28B-782B-4DC0-B490-E70A403B1C69}"=Readme
"{655CB07D-C944-40BE-B93F-55957CAC7625}"=AiO_Scan
"{68963635-14A4-48D9-B431-DF3A74D1AAE1}"=Destinations
"{700A6597-3CE6-49C1-AA75-846B24CDA66D}"=BufferChm
"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable
"{7370DF47-B4F9-4279-BFC3-3F09919F720D}"=Installation Windows Live
"{7AD25C9F-9957-4D1C-95EF-9BCD09F6D31B}"=HPSystemDiagnostics
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}"=Windows Live Call
"{85CFD253-38AE-4DB1-ACB7-F0F4C791990D}"=AiOSoftware
"{8777AC6D-89F9-4793-8266-DE406F343E89}"=QFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}"=Microsoft Silverlight
"{8F7A4D82-B168-4F89-99C2-B9873EC877AF}"=HP Image Zone Express
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}"=Choice Guard
"{9011040C-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Professional Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}"=Microsoft Application Error Reporting
"{A07BAED2-DA9A-436A-83F1-80BA23FA9E4B}"=1400_Help
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}"=Segoe UI
"{AC76BA86-7AD7-1036-7B44-A90000000001}"=Adobe Reader 9 - Français
"{B911B811-BA3E-46D4-90F8-6F3338359651}"=Director
"{BD29EBAC-AD7D-4b27-B727-4CC6AC52D36B}"=MarketResearch
"{C20CE592-B0F8-4D20-BF31-0151CA6331A6}"=Samsung Media Studio
"{C4A4722E-79F9-417C-BD72-8D359A090C97}"=Samsung PC Studio 3
"{CDFCF124-115F-4976-8BF4-08C89187A146}"=WebReg
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}"=Assistant de connexion Windows Live
"{DE66E6E1-BFBC-4586-A03C-686598F4CA3C}"=1400Trb
"{E780E536-16CE-4CD1-8FE0-2D5E52FAA65B}"=Ma-Config.com
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}"=Samsung PC Studio 3 USB Driver Installer
"{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}"=VirginMega.Fr Premium
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}"=Realtek High Definition Audio Driver
"{FD4FE0F7-91FC-43A2-9C3A-187553991FFF}"=Hercules Classic Silver Webcam
"{FE57DE70-95DE-4B64-9266-84DA811053DB}"=HP Update
"{FE6397C1-CECA-4EC3-B064-42AED7676898}"=Sony Ericsson PC Suite
"956bb211-d156-4122-fade-6d7bdc1448e8"=Contextual Platform Blueskyadagency
"Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin
"Adobe Shockwave Player"=Adobe Shockwave Player
"Ask Toolbar_is1"=Ask Toolbar
"ATI Display Driver"=ATI Display Driver
"AVS Update Manager_is1"=AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1"=AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1"=AVS Video Converter 6
"EVEREST Ultimate Edition_is1"=EVEREST Ultimate Edition v5.01
"gvadogbrvmop"=Performance Solution Blueskyadagency
"HP Photo & Imaging"=HP Image Zone 4.7
"HPExtendedCapabilities"=HP Extended Capabilities 4.7
"IDNMitigationAPIs"=Microsoft Internationalized Domain Names Mitigation APIs
"ie7"=Windows Internet Explorer 7
"Lame MP3 Codec (for the ACM)"=Lame ACM MP3 Codec
"LimeWire"=LimeWire 4.18.8
"Mozilla Firefox (3.0.10)"=Mozilla Firefox (3.0.10)
"MSC"=McAfee SecurityCenter
"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping"=Microsoft National Language Support Downlevel APIs
"PhotoFiltre Studio"=PhotoFiltre Studio
"RealPlayer 6.0"=RealPlayer
"runit"=Run It
"SAMSUNG Mobile Composite Device"=SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem"=SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver"=Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem"=SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0"=SAMSUNG Mobile USB Modem 1.0 Software
"TBSB05288.TBSB05288Toolbar"=ECO Bar
"Windows Media Format Runtime"=Windows Media Format 11 runtime
"Windows Media Player"=Lecteur Windows Media 11
"WinLiveSuite_Wave3"=Installation Windows Live
"WinRAR archiver"=WinRAR archiver
"WMFDist11"=Windows Media Format 11 runtime
"wmp11"=Windows Media Player 11
"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0
"XviD_is1"=XviD MPEG-4 Video Codec

[color=orange]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 08/05/2009 07:15:36 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (1904) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 08/05/2009 07:38:09 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (2456) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 08/05/2009 08:05:09 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (3344) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 08/05/2009 08:22:15 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (432) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 08/05/2009 09:07:37 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (2480) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 08/05/2009 09:40:36 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (768) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 09/05/2009 08:08:26 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (1832) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 09/05/2009 14:41:46 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Application défaillante syncmldesktopserver.exe, version 0.0.0.0,
module défaillant unknown, version 0.0.0.0, adresse de défaillance 0x00a4028a.

Error - 09/05/2009 16:04:52 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (2148) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

Error - 09/05/2009 16:14:42 | Computer Name = HOME | Source = ESENT | ID = 447
Description = wlcomm (760) Un lien de page incorrect (erreur -327) a été détecté
dans un arbre B (ObjectId : 88, PgnoRoot : 214) de la base de données C:\Documents
and Settings\Lokmane\Local Settings\Application Data\Microsoft\Windows Live Contacts\{b6ac9f0a-a45e-4bf8-8ffa-a97d0b33fa92}\DBStore\contacts.edb
(570 => 956, 557).

[ System Events ]
Error - 03/05/2009 02:33:28 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {0002DF01-0000-0000-C000-000000000046} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.

Error - 06/05/2009 06:13:30 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.

Error - 08/05/2009 15:18:54 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.

Error - 08/05/2009 15:43:51 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.

Error - 09/05/2009 06:31:26 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.

Error - 09/05/2009 15:18:37 | Computer Name = HOME | Source = DCOM | ID = 10010
Description = Le serveur {97B72AC1-FC81-11D2-813D-00500403AC07} ne s'est pas enregistré
sur DCOM avant la fin du temps imparti.


< End of report >
0
OK, merci de ton aide :)
0
-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Lokmane ( Administrator )
BOOT : Normal boot
Antivirus : McAfee VirusScan (Activated)
Firewall : McAfee Personal Firewall (Activated)
C:\ (Local Disk) - NTFS - Total:186 Go (Free:167 Go)
D:\ (USB)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 09/05/2009|23:36 )

-----------\\ Recherche de Fichiers / Dossiers ...

[Service] ASKUpgrade
C:\Program Files\AskBarDis
C:\Program Files\AskBarDis\bar
C:\Program Files\AskBarDis\unins00.exe
C:\Program Files\AskBarDis\unins000.dat
C:\Program Files\AskBarDis\unins000.exe
C:\Program Files\AskBarDis\bar\bin
C:\Program Files\AskBarDis\bar\Cache
C:\Program Files\AskBarDis\bar\History
C:\Program Files\AskBarDis\bar\Settings
C:\Program Files\AskBarDis\bar\bin\askBar.dll
C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
C:\Program Files\AskBarDis\bar\bin\AskSplash.exe
C:\Program Files\AskBarDis\bar\bin\AskTBApp.exe
C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
C:\Program Files\AskBarDis\bar\bin\psvince.dll
C:\Program Files\AskBarDis\bar\Cache\000CED53
C:\Program Files\AskBarDis\bar\Cache\000CFB4D.bin
C:\Program Files\AskBarDis\bar\Cache\000CFDED.bin
C:\Program Files\AskBarDis\bar\Cache\000CFF54.bin
C:\Program Files\AskBarDis\bar\Cache\000D78AB.bin
C:\Program Files\AskBarDis\bar\Cache\000D7BA9.bin
C:\Program Files\AskBarDis\bar\Cache\000D7E97.bin
C:\Program Files\AskBarDis\bar\Cache\0017276D
C:\Program Files\AskBarDis\bar\Cache\001AF3D7
C:\Program Files\AskBarDis\bar\Cache\files.ini
C:\Program Files\AskBarDis\bar\History\search
C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
C:\Program Files\AskBarDis\bar\Settings\config.dat
C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
C:\Program Files\AskBarDis\bar\Settings\prevCfg2.htm

-----------\\ Extensions

(Imane) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

(Lokmane) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(TITI) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(TITI) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://moteur.chat-land.org/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lokmane\Mes documents\LimeWire\Saved\Windows Media Player 11 Crack.zip



1 - "C:\ToolBar SD\TB_1.txt" - 09/05/2009|23:39 - Option : [1]

-----------\\ Fin du rapport a 23:39:31,76
0
-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Lokmane ( Administrator )
BOOT : Normal boot
Antivirus : McAfee VirusScan (Activated)
Firewall : McAfee Personal Firewall (Activated)
C:\ (Local Disk) - NTFS - Total:186 Go (Free:167 Go)
D:\ (USB)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 10/05/2009| 0:02 )

-----------\\ SUPPRESSION

Supprime! - [Service] ASKUpgrade
Supprime! - C:\Program Files\AskBarDis\bar
Supprime! - C:\Program Files\AskBarDis\unins00.exe
Supprime! - C:\Program Files\AskBarDis\unins000.dat
Supprime! - C:\Program Files\AskBarDis\unins000.exe
Supprime! - C:\Program Files\AskBarDis

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Imane) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

(Lokmane) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(TITI) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(TITI) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://moteur.chat-land.org/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Lokmane\Mes documents\LimeWire\Saved\Windows Media Player 11 Crack.zip



1 - "C:\ToolBar SD\TB_1.txt" - 09/05/2009|23:39 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 10/05/2009| 0:05 - Option : [2]

-----------\\ Fin du rapport a 0:05:58,70
0
Utilisateur anonyme
10 mai 2009 à 02:05
Re,

Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte

Mets le à jour

▶ Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.

▶ Sélectionne Exécuter un examen COMPLET si ce n'est pas déjà fait

▶ clique sur Rechercher

▶ Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Tutoriel pour MalwareByte's

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
0