Va faire un tour a C:\System Volume Information\_restore{0B1F9B2C-CB07-480A-B012-A7B5B153F693}\R­­P9\A0000437.exe
et regarde ce que c est dans proprièté ect
et recherche internet si il sert a rien suprime le
tu peux le suprimer directement et voir si ca va ou non ... -Pour se sentir intelligent il faut s'entourer de cons Mais ­pour croire que l'on est intelligent il faut être con
-Même au régime, on a le droit de regarder le menu ...

Hello,

Il faudra faire quelque chose que je t'indiquerai tout à l'heure, en attendant nous allons faire une vérification:


- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

-Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches) dans deux messages différents.

Merci ami voila ce que tu m'as demander

log.txt:

Logfile of random's system information tool 1.06 (written by random/random)
Run by winxp at 2009-06-15 01:17:51
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 6 GB (30%) free of 20 GB
Total RAM: 2047 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:18:23, on 15/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\CMMON32.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\winxp\שולחן העבודה\RSIT.exe
C:\Program Files\trend micro\winxp.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.kafe.co.il/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: עוזר הכניסה של Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &ייצוא אל Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: שלח אל OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: ש&לח אל OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {9E065E4A-BD9D-4547-8F90-985DC62A5591} (PlayerPT Control) - http://82.81.40.141:1024/PlayerPT.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{D7D964A0-EC08-42F9-A233-014483D1C5C7}: NameServer = 62.219.186.7 192.115.106.35
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SWIHPWMI - Sierra Wireless Inc. - C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
End of file - 9526 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1228632846.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2009-05-07 169392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
עוזר הכניסה של Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PTHOSTTR"=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2007-01-09 145184]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-04-01 7110656]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-04-01 86016]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2008-07-24 63048]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-02-02 342848]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-05-09 2807216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSPVideo9]
C:\Program Files\pspvideo9\pspVideo9.exe [2005-10-30 606208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl]
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-11-06 177456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe [2007-02-02 1116920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatchDog]
C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2007-05-23 192512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^תפריט התחלה^תוכניות^הפעלה^DVD Check.lnk]
C:\PROGRA~1\INTERV~1\DVDCHE~1\DVDCheck.exe [2007-05-23 192512]

C:\Documents and Settings\All Users\תפריט התחלה\תוכניות\הפעלה
hp psc 2000 Series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2008-10-16 87352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"D:\program files\eMule\emule.exe"="D:\program files\eMule\emule.exe:*:Enabled:eMule"
"D:\emule\emule.exe"="D:\emule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\TravManager\TravManager-Client.exe"="C:\Program Files\TravManager\TravManager-Client.exe:*:Enabled:TravManager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Program Files\Java\jre6\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Application de pilotage ? distance TeamViewer"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b435e377-4777-11dd-b8de-000ffe2be29b}]
shell\AutoRun\command - wd_windows_tools\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c6a76eec-fa86-11dd-b9b0-000ffe2be29b}]
shell\AutoRun\command - F:\WIN\setup.exe


======List of files/folders created in the last 1 months======

2009-06-15 01:17:51 ----D---- C:\rsit
2009-06-15 01:17:51 ----D---- C:\Program Files\trend micro
2009-06-13 15:14:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP
2009-06-13 14:54:36 ----SHD---- C:\RECYCLER
2009-06-10 11:36:58 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-06-10 11:36:57 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-06-10 11:36:57 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-06-10 11:36:54 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-06-06 01:15:41 ----D---- C:\WINDOWS\system32\anooki-v5-0 dir
2009-06-03 11:34:55 ----D---- C:\Documents and Settings\winxp\Application Data\PeaZip
2009-06-03 00:21:06 ----D---- C:\Program Files\Your Uninstaller 2008
2009-05-31 13:12:36 ----D---- C:\AmadisTMP
2009-05-31 13:11:41 ----D---- C:\Program Files\Amadis Software
2009-05-30 23:29:47 ----D---- C:\Documents and Settings\winxp\Application Data\AVI ReComp
2009-05-30 23:29:34 ----D---- C:\Program Files\Gabest
2009-05-30 23:29:27 ----D---- C:\Program Files\Xvid
2009-05-30 23:28:34 ----D---- C:\Program Files\AVI ReComp
2009-05-30 02:35:36 ----D---- C:\Documents and Settings\winxp\Application Data\Media Player Classic
2009-05-30 02:34:42 ----A---- C:\WINDOWS\avisplitter.ini
2009-05-30 02:34:40 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-05-30 02:34:39 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2009-05-30 02:34:39 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-05-30 02:34:39 ----A---- C:\WINDOWS\system32\divx.dll
2009-05-30 02:34:38 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-05-30 02:34:38 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-05-30 02:34:36 ----D---- C:\Program Files\K-Lite Codec Pack
2009-05-30 02:30:02 ----D---- C:\Documents and Settings\winxp\Application Data\TeamViewer
2009-05-30 02:29:58 ----D---- C:\Program Files\TeamViewer
2009-05-30 01:56:33 ----D---- C:\Documents and Settings\winxp\Application Data\Foxit
2009-05-30 01:56:17 ----D---- C:\Program Files\Foxit Software
2009-05-30 01:40:27 ----D---- C:\Documents and Settings\All Users\Application Data\Estsoft
2009-05-30 01:39:23 ----D---- C:\Program Files\ESTsoft
2009-05-27 12:41:32 ----D---- C:\Documents and Settings\winxp\Application Data\DivX
2009-05-27 12:40:52 ----D---- C:\WINDOWS\system32\QuickTime
2009-05-23 18:31:54 ----D---- C:\Program Files\URUSoft
2009-05-17 10:17:29 ----A---- C:\WINDOWS\system32\SpoonUninstall.exe
2009-05-17 10:17:25 ----D---- C:\Program Files\Illustrate

======List of files/folders modified in the last 1 months======

2009-06-15 01:17:51 ----RD---- C:\Program Files
2009-06-15 01:17:50 ----D---- C:\WINDOWS\Prefetch
2009-06-15 01:15:39 ----D---- C:\Program Files\Mozilla Firefox
2009-06-15 01:10:39 ----D---- C:\Documents and Settings\winxp\Application Data\DMCache
2009-06-15 01:10:36 ----D---- C:\WINDOWS\Temp
2009-06-15 01:10:34 ----D---- C:\Program Files\DNA
2009-06-15 01:10:34 ----D---- C:\Documents and Settings\winxp\Application Data\DNA
2009-06-15 01:10:09 ----D---- C:\Program Files\LogMeIn
2009-06-14 11:27:52 ----D---- C:\WINDOWS\system32
2009-06-14 11:23:56 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-14 01:58:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-13 15:10:22 ----D---- C:\WINDOWS
2009-06-13 15:08:33 ----A---- C:\WINDOWS\system32\pgdfgsvc.exe
2009-06-13 15:07:54 ----D---- C:\WINDOWS\system32\drivers
2009-06-13 14:55:43 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-13 14:51:51 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-13 14:48:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-13 14:48:23 ----D---- C:\WINDOWS\Debug
2009-06-13 14:48:00 ----D---- C:\Program Files\Internet Download Manager
2009-06-13 14:47:56 ----D---- C:\Documents and Settings\winxp\Application Data\uTorrent
2009-06-13 01:24:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-12 23:26:27 ----D---- C:\Documents and Settings\winxp\Application Data\Vso
2009-06-10 22:38:44 ----HD---- C:\WINDOWS\inf
2009-06-10 22:38:23 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 22:38:21 ----SHD---- C:\WINDOWS\Installer
2009-06-10 22:38:17 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-06-10 11:58:33 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-10 11:44:42 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-06-10 11:37:00 ----D---- C:\WINDOWS\system32\DirectX
2009-06-10 10:01:39 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-08 19:48:57 ----D---- C:\Documents and Settings\winxp\Application Data\Skype
2009-06-08 19:44:28 ----D---- C:\Documents and Settings\winxp\Application Data\skypePM
2009-06-08 12:24:09 ----D---- C:\Program Files\Raptor
2009-06-08 12:14:36 ----D---- C:\Program Files\WinRAR
2009-06-06 00:40:13 ----SHD---- C:\System Volume Information
2009-06-06 00:40:13 ----D---- C:\WINDOWS\system32\Restore
2009-06-03 11:30:22 ----D---- C:\Documents and Settings\winxp\Application Data\ESTsoft
2009-06-03 00:21:16 ----D---- C:\Documents and Settings\winxp\Application Data\URSoft
2009-06-01 19:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-31 14:30:55 ----D---- C:\Documents and Settings\winxp\Application Data\IDM
2009-05-30 23:29:05 ----D---- C:\Program Files\AviSynth 2.5
2009-05-30 01:54:33 ----D---- C:\Program Files\Common Files\Adobe
2009-05-23 19:42:20 ----D---- C:\Program Files\TravManager

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2007-02-08 12856]
R1 DLARTL_M;DLARTL_M; C:\WINDOWS\System32\Drivers\DLARTL_M.SYS [2007-02-08 28120]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 39936]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 DLABMFSM;DLABMFSM; C:\WINDOWS\System32\DLA\DLABMFSM.SYS [2006-10-26 35096]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2006-10-26 32472]
R2 DLADResM;DLADResM; C:\WINDOWS\System32\DLA\DLADResM.SYS [2006-10-26 9400]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2006-10-26 104536]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2006-10-26 26296]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2006-10-26 14520]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2006-10-26 97848]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2006-10-26 94648]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2007-02-09 51768]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2006-04-01 100384]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-01-07 1202560]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2006-04-01 134272]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2008-07-24 10144]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-18 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-04-01 3198368]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-28 47360]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2006-04-01 612416]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 HP24X;HP PC Card Smart Card Reader; C:\WINDOWS\system32\DRIVERS\HP24X.sys [2006-10-19 33024]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2007-11-29 16896]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2007-11-29 19328]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2007-11-29 8064]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-10-01 32000]
S3 usbser;Nokia USB Serial Port; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2007-11-29 8064]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []
S4 WS2IFSL;סביבת תמיכה של ספק שירות Windows Socket 2.0 Non-IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-27 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2007-12-11 12800]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2007-12-05 144688]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2008-10-16 116032]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2008-07-24 63040]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-04-01 127043]
R2 SWIHPWMI;SWIHPWMI; C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe [2006-12-04 292384]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-03-09 65795]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-08-29 33752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-06 887544]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-29 572928]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 73728]
S3 usnjsvc;שירות Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-12-01 908800]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]

-----------------EOF-----------------

2 eme message

info.txt:


info.txt logfile of random's system information tool 1.06 2009-06-15 01:18:25

======Uninstall list======

-->C:\Program Files\InstallShield Installation Information\{69333A04-5134-40A5-A055-9166A7AA1EC8}\setup.exe -runfromtemp -l0x0009 -removeonly
-->MsiExec.exe /I{70989FB7-3ADD-3C69-A8C8-43D484FBE958}
-->MsiExec.exe /I{81D294B4-57F3-3EC0-93B3-9B1BD9DB6C83}
-->MsiExec.exe /I{977FBE6C-AE9A-4429-B249-814F0B3A4CB1}
-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Download Manager 2.0 (הסרה בלבד)-->"C:\Program Files\Common Files\Adobe\ESD\uninst.exe"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Agere Systems PCI Soft Modem-->agrsmdel
Amadis AVI/DIVX/WMV/MPEG/MOV/SWF/FLV/MKV/RM/RMVB Video Converte-->"C:\Program Files\Amadis Software\Amadis Video Converter\unins000.exe"
Animal World-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4B2503DF-A0C4-422E-AE6C-8F92AE1FD931}\setup.exe" -l0x9 -removeonly
anooki-v5-0 Screen Saver-->C:\WINDOWS\system32\anooki-v5-0.scr /u
Apple Mobile Device Support-->MsiExec.exe /I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
AVI ReComp 1.4.5-->C:\Program Files\AVI ReComp\Uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Company of Heroes-->MsiExec.exe /X{51D718D1-DA81-4FAD-919F-5C1CE3C33379}
ConvertXtoDVD 2.2.3.258f-->"C:\Program Files\VSO\ConvertXtoDVD\unins000.exe"
dBpowerAMP DirectShow Decoder Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP DirectShow Decoder Codec.dat
dBPowerAMP Mp2 and BwfMp2 codec r4-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP Mp2 and BwfMp2 codec r4.dat
dBpowerAMP Mp4 & AAC Decode Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Mp4 & AAC Decode Codec.dat
dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
dBpowerAMP WMA V9 Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9 Codec.dat
eMule-->"d:\Program Files\eMule\Uninstall.exe"
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Free Window Registry Repair-->C:\PROGRA~1\FREEWI~1\UNWISE.EXE C:\PROGRA~1\FREEWI~1\INSTALL.LOG
getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HP Broadband Wireless Modules-->MsiExec.exe /X{E0742446-2B18-4204-8A46-DA70BB003318}
HP PCMCIA Smart Card Reader-->MsiExec.exe /I{24B3DF86-75B9-4DBD-AC39-C0C041583E6F}
HP Photo and Imaging 2.0 - All-in-One Drivers-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
HP Photo and Imaging 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
HP Photo and Imaging 2.0 - hp psc 2200 series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
HP ProtectTools Security Manager-->MsiExec.exe /I{2DB165DC-DDB4-403F-B985-19F3EC7D0357}
hp psc 2200 series-->MsiExec.exe /X{913DA816-E8E4-4467-8D22-E2DF5DBF04E4}
HP Quick Launch Buttons 6.40 B2-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe -runfromtemp -l0x0009 uninst
Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
InterVideo DVD Check-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5D97A4A7-C274-4B63-86D9-07A33435F505}\setup.exe" REMOVEALL
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{DDDE0BE3-0CBE-4BF6-B75A-E3F69C947843}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
K-Lite Codec Pack 4.8.5 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
LogMeIn-->MsiExec.exe /I{7F831576-6246-42C7-B523-55B3F96509CC}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - heb-->MsiExec.exe /I{70C5C0CE-4D42-3667-AB4D-774AAFE9DB48}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Office Access MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0015-040D-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISER /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{91120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0016-040D-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}
Microsoft Office Groove Setup Metadata MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0114-040D-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0044-040D-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-00A1-040D-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-001A-040D-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0018-040D-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Hebrew) 2007-->MsiExec.exe /X{90120000-001F-040D-0000-0000000FF1CE}
Microsoft Office Proof (Russian) 2007-->MsiExec.exe /X{90120000-001F-0419-0000-0000000FF1CE}
Microsoft Office Proofing (Hebrew) 2007-->MsiExec.exe /X{90120000-002C-040D-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-0019-040D-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-006E-040D-0000-0000000FF1CE}
Microsoft Office Word MUI (Hebrew) 2007-->MsiExec.exe /X{90120000-001B-040D-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
MV2Player (remove only)-->C:\Program Files\Mv2Player\uninst.exe
My Neighborhood-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{694B776D-1EFB-490D-89B4-A1704654ED11}\setup.exe" -l0x9 -removeonly
Nero Lite 7.8.5.0-->"C:\Program Files\Nero\unins000.exe"
Nokia Connectivity Cable Driver-->MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{5AFEABF5-7411-4C29-9FA9-71ABE880662D}\Nokia_PC_Suite_rel_6_86_9_4_he.exe
Nokia PC Suite-->MsiExec.exe /I{5AFEABF5-7411-4C29-9FA9-71ABE880662D}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OGA Notifier 1.7.0105.35.0-->MsiExec.exe /I{92030EBB-D9DE-4246-9F4D-27DFD29654F9}
PC Connectivity Solution-->MsiExec.exe /I{E9BC886E-0D8A-4EF5-B793-30DB776C6E2C}
PSP ISO Compressor-->MsiExec.exe /X{D47087E7-AA15-4D1D-8C0A-60F7E446D597}
PSP Video 9 1.74-->C:\Program Files\pspvideo9\uninst.exe
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
Roxio Creator Basic v9-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
Roxio Drag-to-Disc-->MsiExec.exe /I{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}
Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD Basic v9-->MsiExec.exe /I{33C65B6A-5D73-4E3E-A1F9-127C27BD3F72}
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Subtitle Workshop 2.51-->"C:\Program Files\URUSoft\Subtitle Workshop\uninstall.exe"
TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Time Travel-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{581ECF29-3BB4-43F8-815D-ACC3758AAE22}\setup.exe" -l0x9 -removeonly
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Outlook 2007 Junk Email Filter (kb970012)-->msiexec /package {91120000-0030-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VobSub 2.23-->C:\Program Files\Gabest\VobSub\uninstall.exe
Windows Live installer-->MsiExec.exe /X{7C33D050-120F-4B90-BB95-7E80450854CF}
Windows Live Mail-->MsiExec.exe /I{5DA5A65C-8612-47B4-B146-4B958A87A6E5}
Windows Live Messenger-->MsiExec.exe /X{51B0647D-4E04-437E-A117-C15996EFB8B3}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Xvid 1.2.1-->C:\Program Files\Xvid\unins000.exe
Your Uninstaller! 2008 Version 6.2-->"C:\Program Files\Your Uninstaller 2008\unins000.exe"
גלריית התמונות של Windows Live-->MsiExec.exe /X{83225CB4-0AC5-45D9-B860-87B1AAD92BEF}
חבילת התקני Windows. - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
חבילת התקני Windows. - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
חבילת התקני Windows. - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
יש לי סוד אני קורא - מתחילים-->C:\CETLB\SOD_A\Uninst\Uncet.exe
מסייע הכניסה של Windows Live-->MsiExec.exe /I{DA4A04D5-92D8-4A67-B018-77E6DDCB2184}
עדכון אבטחה עבור Windows XP (KB923789)‎-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
ערכת שפה של Microsoft .NET Framework 3.5 - HEB-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - heb\setup.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: WINXP-594B566BC
Event Code: 4226
Message: ‏‏TCP/IP הגיע למגבלת האבטחה שנכפתה לגבי מספר הנסיונות לחיבור TCP בו-זמנית.

Record Number: 10326
Source Name: Tcpip
Time Written: 20090325121536.000000+120
Event Type: warning
User:

Computer Name: WINXP-594B566BC
Event Code: 36
Message: The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Record Number: 10325
Source Name: W32Time
Time Written: 20090324073834.000000+120
Event Type: warning
User:

Computer Name: WINXP-594B566BC
Event Code: 1003
Message: Your computer was not able to renew its address from the network (from the
DHCP Server) for the Network Card with network address 000FFE2BE29B. The following
error occurred:
‏‏הפעולה בוטלה על-ידי המשתמש.
.
Your computer will continue to try and obtain an address on its own from
the network address (DHCP) server.

Record Number: 10289
Source Name: Dhcp
Time Written: 20090323160803.000000+120
Event Type: warning
User:

Computer Name: WINXP-594B566BC
Event Code: 4
Message: Broadcom NetXtreme Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Record Number: 10286
Source Name: b57w2k
Time Written: 20090323160801.000000+120
Event Type: warning
User:

Computer Name: WINXP-594B566BC
Event Code: 4
Message: Broadcom NetXtreme Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Record Number: 10283
Source Name: b57w2k
Time Written: 20090323160757.000000+120
Event Type: warning
User:

=====Application event log=====

Computer Name: WINXP-594B566BC
Event Code: 60
Message: ‏‏ל- WMI ADAP לא היתה אפשרות לעבד את ספריות הביצועים: 0x80041001

Record Number: 3031
Source Name: WinMgmt
Time Written: 20090302123525.000000+120
Event Type: warning
User:

Computer Name: WINXP-594B566BC
Event Code: 1517
Message: ‏‏מערכת ‏Windows שמרה את מערכת הרישום של המשתמש WINXP-594B566BC\winxp, כאשר יישום או שירות אחר עדיין השתמש במערכת הרישום במהלך ההתנתקות. הזיכרון ששימש את מערכת הרישום של המשתמש טרם התפנה. טעינת מערכת הרישום תוסר, כאשר לא יהיה בה עוד צורך.


הדבר נגרם לעתים קרובות על-ידי שירותים שפועלים כחשבון משתמש. נסה להגדיר את תצורת השירותים כך שיפעלו כחשבון LocalService או NetworkService.

Record Number: 3010
Source Name: Userenv
Time Written: 20090302123007.000000+120
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: WINXP-594B566BC
Event Code: 0
Message:
Record Number: 2997
Source Name: Lavasoft Ad-Aware Service
Time Written: 20090302101345.000000+120
Event Type: error
User:

Computer Name: WINXP-594B566BC
Event Code: 0
Message:
Record Number: 2994
Source Name: pctsSvc.exe
Time Written: 20090302100335.000000+120
Event Type: error
User:

Computer Name: WINXP-594B566BC
Event Code: 60
Message: ‏‏ל- WMI ADAP לא היתה אפשרות לעבד את ספריות הביצועים: 0x80041001

Record Number: 2985
Source Name: WinMgmt
Time Written: 20090302082831.000000+120
Event Type: warning
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

Bon, il y a deux trois trucs à faire dessus...

Mais avant tout:
Es tu le propriétaire de ce pc?(appartient il à tes parents, frère, ami?)
T'arrives -t-il de te connecter à distance dessus?
Bref utilises tu ce logiciel?



Répond à mes questions stp et exécute ceci:

Télécharge Toolbar-S&D (Merci eric 71) sur ton Bureau:
http://eric.71.mespages.googlepages.com/ToolBarSD.exe

Lance l'installation du programme en double cliquant sur le fichier téléchargé.
Double-clique sur le raccourci de Toolbar-S&D.
Choisi la langue souhaitée en tapant la lettre "F" puis en validant avec la touche Entrée.
Choisi maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
Poste un copier/coller du rapport généré.

Oui je suis le proprietere de ce pc
oui je me connect a distance dessus
j'utilise regulierement logmein

et voici ce que tu m'as demander merci encore de ton aide


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.06GHz )
BIOS : Default System BIOS
USER : winxp ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)
D:\ (Local Disk) - NTFS - Total:129 Go (Free:59 Go)
E:\ (CD or DVD)
G:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( Mon 06/15/2009| 1:39 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(winxp) - {64161300-e22b-11db-8314-0800200c9a66} => speeddial
(winxp) - {a6e4a4eb-d169-4e99-8988-250fcbafe767} => isohunt
(winxp) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus
(winxp) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.kafe.co.il/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvיe !


1 - "C:\ToolBar SD\TB_1.txt" - Mon 06/15/2009| 1:39 - Option : [1]

-----------\\ Fin du rapport a 1:39:48.75

Est-ce que tu es gêné par des redirections vers ask.com ou par la toolbar Ask?
Car on voit que cette toolbar est présente dans ton rapport Rsit, mais toolbarSD ne la détecte pas.

Sinon:

*Télécharge et installe UsbFix de C_XX & Chiquitine29.

*Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir.

*Double-clique sur le raccourci UsbFix présent sur ton bureau.

*Choisi l'option 1 ( Recherche )

*Laisse travailler l'outil.

*Ensuite poste le rapport UsbFix.txt qui apparaîtra dans ton prochain message.

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Salut Trying2,
defois j'ai eu des redirections vers ask.com mais j'ai tous effacer ce qui apartient a ask.com aussi le fichier dans program files

voici le rapport UsbFix.txt :

############################## [ UsbFix V3.031 ]

# User : winxp (Administrators) # WINXP-594B566BC
# Update on 13/06/09 by Chiquitine29
# Start at: 11:31:56 | 15/06/2009
# Website : http://pagesperso-orange.fr/NosTools/usbfix.html

# Intel(R) Pentium(R) 4 CPU 3.06GHz
# Microsoft Windows XP Home Edition (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]

# A:\ # כונן תקליטונים ‎3 1/2 אינץ'
# C:\ # דיסק קבוע מקומי # 19.53 Go (5.75 Go free) # NTFS
# D:\ # דיסק קבוע מקומי # 129.51 Go (58.77 Go free) [New Volume] # NTFS
# E:\ # תקליטור
# F:\ # דיסק קבוע מקומי # 74.53 Go (19.58 Go free) [yacov] # NTFS
# G:\ # דיסק הניתן להסרה
# H:\ # דיסק קבוע מקומי # 465.65 Go (295.92 Go free) [My Book] # FAT32

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\CMMON32.EXE
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Program Files\Nero\Nero Core\nero.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Registre Startup ]

HKCU_Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
HKCU_Main: "Start Page"="http://www.kafe.co.il/"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="winxp"
HKLM_logon: "AltDefaultUserName"="winxp"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: PTHOSTTR=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM_Run: nwiz=nwiz.exe /install
HKLM_Run: NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM_Run: LogMeIn GUI="C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: avgnt="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM_Run: GrooveMonitor="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: BitTorrent DNA="C:\Program Files\DNA\btdna.exe"
HKCU_Run: IDMan=C:\Program Files\Internet Download Manager\IDMan.exe /onboot

################## [ Fichiers # Dossiers infectieux ]

Prיsent ! H:\autorun.inf

################## [ Registre # Clיs Run infectieuses ]


################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{b435e377-4777-11dd-b8de-000ffe2be29b}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{c6a76eec-fa86-11dd-b9b0-000ffe2be29b}\Shell\AutoRun\Command

################## [ ! Fin du rapport # UsbFix V3.031 ! ]

Ok pas probleme sa seras le dernier contact en mp :)

voici le raport demander:


############################## [ UsbFix V3.031 ]

# User : winxp (Administrators) # WINXP-594B566BC
# Update on 13/06/09 by Chiquitine29
# Start at: 11:51:00 | 15/06/2009
# Website : http://pagesperso-orange.fr/NosTools/usbfix.html

# Intel(R) Pentium(R) 4 CPU 3.06GHz
# Microsoft Windows XP Home Edition (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]

# A:\ # כונן תקליטונים ‎3 1/2 אינץ'
# C:\ # דיסק קבוע מקומי # 19.53 Go (5.76 Go free) # NTFS
# D:\ # דיסק קבוע מקומי # 129.51 Go (58.74 Go free) [New Volume] # NTFS
# E:\ # תקליטור
# F:\ # דיסק קבוע מקומי # 74.53 Go (19.58 Go free) [yacov] # NTFS
# G:\ # דיסק הניתן להסרה
# H:\ # דיסק קבוע מקומי # 465.65 Go (295.92 Go free) [My Book] # FAT32

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers # Dossiers infectieux ]

Supprimי ! H:\autorun.inf

################## [ Registre # Clיs Run infectieuses ]


################## [ Registre # Mountpoints2 ]

Supprimי ! HKCU\...\Explorer\MountPoints2\{c6a76eec-fa86-11dd-b9b0-000ffe2be29b}\Shell\AutoRun\Command

################## [ Listing des fichiers prיsent ]

[03/10/2009 03:53 PM|--a------|1024] - C:\.rnd
[05/02/2009 12:09 AM|--a------|10567] - C:\aaw7boot.log
[07/01/2008 01:50 PM|--a------|0] - C:\AUTOEXEC.BAT
[05/12/2009 07:57 PM|--a------|48] - C:\boot.ini
[07/01/2008 02:02 PM|--a------|197] - C:\Ciam_LogFile.log
[07/01/2008 01:50 PM|--a------|0] - C:\CONFIG.SYS
[07/01/2008 02:04 PM|--a------|161] - C:\esuinst.log
[07/01/2008 01:59 PM|--a------|198] - C:\esu_xpsp2.log
[06/13/2009 06:00 PM|--a------|488] - C:\hpfr5550.xml
[07/01/2008 02:05 PM|--a------|87] - C:\hpmdp.log
[07/01/2008 01:50 PM|-rahs----|0] - C:\IO.SYS
[07/01/2008 01:50 PM|-rahs----|0] - C:\MSDOS.SYS
[?|?|?] - C:\pagefile.sys
[07/01/2008 02:04 PM|--a------|227] - C:\sedinst2.log
[07/01/2008 02:19 PM|--a------|185] - C:\setup.log
[11/08/2008 12:01 AM|--ah-----|268] - C:\sqmdata00.sqm
[11/08/2008 12:10 AM|--ah-----|268] - C:\sqmdata01.sqm
[11/08/2008 11:39 PM|--ah-----|268] - C:\sqmdata02.sqm
[11/09/2008 02:45 PM|--ah-----|268] - C:\sqmdata03.sqm
[11/10/2008 10:33 AM|--ah-----|268] - C:\sqmdata04.sqm
[11/11/2008 12:04 AM|--ah-----|268] - C:\sqmdata05.sqm
[10/26/2008 02:14 PM|--ah-----|268] - C:\sqmdata06.sqm
[10/26/2008 05:25 PM|--ah-----|268] - C:\sqmdata07.sqm
[10/26/2008 07:57 PM|--ah-----|268] - C:\sqmdata08.sqm
[10/27/2008 08:16 PM|--ah-----|268] - C:\sqmdata09.sqm
[10/27/2008 08:18 PM|--ah-----|268] - C:\sqmdata10.sqm
[10/28/2008 11:38 AM|--ah-----|268] - C:\sqmdata11.sqm
[10/29/2008 01:38 PM|--ah-----|268] - C:\sqmdata12.sqm
[10/30/2008 09:16 PM|--ah-----|268] - C:\sqmdata13.sqm
[10/31/2008 08:40 PM|--ah-----|268] - C:\sqmdata14.sqm
[11/01/2008 12:18 AM|--ah-----|268] - C:\sqmdata15.sqm
[11/01/2008 05:56 PM|--ah-----|268] - C:\sqmdata16.sqm
[11/02/2008 03:00 PM|--ah-----|268] - C:\sqmdata17.sqm
[11/03/2008 07:48 PM|--ah-----|268] - C:\sqmdata18.sqm
[11/06/2008 09:03 PM|--ah-----|268] - C:\sqmdata19.sqm
[11/08/2008 12:01 AM|--ah-----|244] - C:\sqmnoopt00.sqm
[11/08/2008 12:10 AM|--ah-----|244] - C:\sqmnoopt01.sqm
[11/08/2008 11:39 PM|--ah-----|244] - C:\sqmnoopt02.sqm
[11/09/2008 02:45 PM|--ah-----|244] - C:\sqmnoopt03.sqm
[11/10/2008 10:33 AM|--ah-----|244] - C:\sqmnoopt04.sqm
[11/11/2008 12:04 AM|--ah-----|244] - C:\sqmnoopt05.sqm
[10/26/2008 02:14 PM|--ah-----|244] - C:\sqmnoopt06.sqm
[10/26/2008 05:25 PM|--ah-----|244] - C:\sqmnoopt07.sqm
[10/26/2008 07:57 PM|--ah-----|244] - C:\sqmnoopt08.sqm
[10/27/2008 08:16 PM|--ah-----|244] - C:\sqmnoopt09.sqm
[10/27/2008 08:18 PM|--ah-----|244] - C:\sqmnoopt10.sqm
[10/28/2008 11:38 AM|--ah-----|244] - C:\sqmnoopt11.sqm
[10/29/2008 01:38 PM|--ah-----|244] - C:\sqmnoopt12.sqm
[10/30/2008 09:16 PM|--ah-----|244] - C:\sqmnoopt13.sqm
[10/31/2008 08:40 PM|--ah-----|244] - C:\sqmnoopt14.sqm
[11/01/2008 12:18 AM|--ah-----|244] - C:\sqmnoopt15.sqm
[11/01/2008 05:56 PM|--ah-----|244] - C:\sqmnoopt16.sqm
[11/02/2008 03:00 PM|--ah-----|244] - C:\sqmnoopt17.sqm
[11/03/2008 07:48 PM|--ah-----|244] - C:\sqmnoopt18.sqm
[11/06/2008 09:03 PM|--ah-----|244] - C:\sqmnoopt19.sqm
[07/01/2008 02:07 PM|--a------|21690] - C:\sunjava.log
[07/01/2008 02:05 PM|--a------|187] - C:\syntpad.log
[06/15/2009 01:39 AM|--a------|1877] - C:\TB.txt
[06/15/2009 11:52 AM|--a------|5835] - C:\UsbFix.txt
[07/01/2008 03:37 PM|-rahs----|210] - D:\boot.ini
[08/27/2004 03:00 PM|-rahs----|47564] - D:\NTDETECT.COM
[02/15/2009 06:18 PM|-rahs----|250048] - D:\ntldr
[03/23/2009 08:52 PM|--ahs----|6144] - D:\Thumbs.db
[06/06/2009 01:00 AM|--a------|459202] - D:\V_For_Vendetta__by_skidu.jpg
[07/21/2007 08:57 PM|--a------|2058] - D:\€š˜‰�.rtf
[10/02/2008 10:27 AM|--a------|41] - F:\pmp_usb.ini
[10/02/2008 10:27 AM|-r-h-----|474] - F:\winamp_cache_0001.xml

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# H:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## [ ! Fin du rapport # UsbFix V3.031 ! ]

Encore salut
j'ai fait ce que tu m'as dit a la lettre :)

Malwarebytes' Anti-Malware : MBAM n'a rien trouvé

CCleaner: fait a la lettre sans probleme

j'attend tes derniere instruction (surtout celle qui t'a amené ici avec ton souci de détection d'Antivir)

pour ta question si je souhaite booster sa veux dire au demarrage la rapiditer ????

merci

Il y a toujours le message d'avira :(

Dans le fichier 'C:\System Volume Information\_restore{0B1F9B2C-CB07-480A-B012-A7B5B153F693}\R­P9\A0000437.exe'
un virus ou un programme indésirable 'WORM/Agent.143872' [worm] a été détecté.
Action exécutée : Refuser l'accès


j'attend ta reponse merci

Salut a tous
pour ceux qui on le meme probleme que moi j'ai trouver ce qui faux faire
faites comme ca :

http://www.libellules.ch/desactiver_restauration.php

merci a tous

Tu es un as
merci beaucoup je vais faire imediatement ce que tu as ecrit

Raport TCleaner.txt:


[ Rapport ToolsCleaner version 2.3.6 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\TB.txt: trouvי !
C:\UsbFix.txt: trouvי !
C:\Toolbar SD: trouvי !
C:\UsbFix: trouvי !
C:\Rsit: trouvי !
C:\Documents and Settings\winxp\שולחן העבודה\ToolBarSD.exe: trouvי !
C:\Documents and Settings\winxp\שולחן העבודה\UsbFix.exe: trouvי !
C:\Documents and Settings\winxp\שולחן העבודה\Rsit.exe: trouvי !
C:\Documents and Settings\winxp\תפריט התחלה\תוכניות\UsbFix: trouvי !
C:\Program Files\trend micro\HijackThis.exe: trouvי !
C:\Program Files\trend micro\hijackthis.log: trouvי !

---------------------------------
--> Suppression:

C:\Documents and Settings\winxp\שולחן העבודה\ToolBarSD.exe: supprimי !
C:\Program Files\trend micro\HijackThis.exe: supprimי !
C:\TB.txt: supprimי !
C:\UsbFix.txt: supprimי !
C:\Documents and Settings\winxp\שולחן העבודה\UsbFix.exe: supprimי !
C:\Documents and Settings\winxp\שולחן העבודה\Rsit.exe: supprimי !
C:\Program Files\trend micro\hijackthis.log: supprimי !
C:\Toolbar SD: supprimי !
C:\UsbFix: supprimי !
C:\Rsit: supprimי !
C:\Documents and Settings\winxp\תפריט התחלה\תוכניות\UsbFix: supprimי !

Comment je peux booster plus vite ?
et quoid enlever au demarrage
merci d'avance de ta reponse

Ouvre CCleaner, va dans cet onglet, et clique sur chaque programme ci dessous en choisissant ensuite désactiver.


Tu devais
"C:\Program Files\Java\jre6\bin\jusched.exe"
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
C:\WINDOWS\system32\ctfmon.exe
"C:\Program Files\DNA\btdna.exe"
C:\Program Files\Internet Download Manager\IDMan.exe /onboot
[CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
[CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
[CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
[CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Je t'ai laissé ce qu'il fallait, tu peux virer tout cela sans souci.

Encore merci :)