| 2 sKe69, le 16 jun 2009 à 16:39:38Salut,
fais ceci pour plus d'info :
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
-> http://images.malwareremoval.com/random/RSIT.exe
! Ferme bien toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
( Note : Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.)
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante ... si tu essaies de poster les deux en même temps,
cela risque d'être trop long pour le forum ...
Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ...
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
"Baby, I'm going on an airplane, And I don't know if I'll be back again"
IMPORTANT : ne vous croyez pas tiré d'affaire tant qu'on ne
vous l'a pas dit ! | Oula, effectivement c'est bien long. Voici la 1ère partie du log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Propriétaire at 2009-06-16 17:21:11
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 11 GB (5%) free of 234 GB
Total RAM: 2047 MB (80% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:21:30, on 16/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\WINDOWS\system32\fsproflt.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\HP_Propriétaire.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O4 - HKLM\..\Run: [Recguard] "C:\WINDOWS\SMINST\RECGUARD.EXE"
O4 - HKLM\..\Run: [SiSPower] "C:\WINDOWS\system32\Rundll32.exe" SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [PS2] "C:\WINDOWS\system32\ps2.exe"
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] "C:\WINDOWS\RTHDCPL.EXE"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Actual Window Minimizer] "C:\Program Files\Actual Window Minimizer\ActualWindowMinimizerCenter.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=24931
O20 - AppInit_DLLs: C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: CachemanXP (CachemanXPService) - Unknown owner - C:\PROGRA~1\CACHEM~1\CachemanXP.exe (file missing)
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\WINDOWS\system32\fsproflt.exe
O23 - Service: Service Google Update (gupdate1c9bc7fc11dcc16) (gupdate1c9bc7fc11dcc16) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
End of file - 10737 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\shutdown.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{8E7D7EBD-2C95-4A23-92C0-EC4AA0CC55B6}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-06-08 312928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-03-13 62728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-06-05 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}]
Babylon IE plugin - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll [2009-05-24 252304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-04-13 668656]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-05 41368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-05 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{32099AAC-C132-4136-9E9A-4E364A424E17} - []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Recguard"=C:\WINDOWS\SMINST\RECGUARD.EXE [2004-04-14 233472]
"SiSPower"=SiSPower.dll,ModeAgent []
"PS2"=C:\WINDOWS\system32\ps2.exe [2004-10-25 90112]
"DrvIcon"=C:\Program Files\Vista Drive Icon\DrvIcon.exe [2008-04-13 49152]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-05-21 17881600]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2008-03-13 197896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Actual Window Minimizer"=C:\Program Files\Actual Window Minimizer\ActualWindowMinimizerCenter.exe [2009-03-31 792064]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2009-03-02 57344]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FFM.exe]
C:\Documents and Settings\HP_Propriétaire\Bureau\FFM.exe [2008-03-12 246272]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
c:\windows\system\hpsysdrv.exe [1998-05-07 52736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryDoktorFrNET]
C:\Program Files\Registry Doktor 4.0\RegistryDoktor.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock]
C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoftwareHelper]
C:\Documents and Settings\HP_Propriétaire\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe /startintray []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TuneUp MemOptimizer]
[]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll,C:\PROGRA~1\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-07-18 86016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-08-20 344064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2008-03-13 206088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SetVisualStyle"=C:\WINDOWS\Resources\Themes\Crystal Clear Aero\Crystal Clear Aero.msstyles
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSMConfigurePrograms"=1
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoSMConfigurePrograms"=
"NoResolveSearch"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Safari\Safari.exe"="C:\Program Files\Safari\Safari.exe:*:Disabled:Safari Web Browser"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\iTunes\iTunes.exe"="%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4f1765d8-2c05-11dd-a3a1-0011d86a1c18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{853f240a-21cf-11dd-a38d-0011d86a1c18}]
shell\AutoRun\command - K:\autorunner.exe "www.CCE-ADECCO.com"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{acdd92dc-5739-11dd-a412-0011d86a1c18}]
shell\Auto\command - K:\Start.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae01665d-5db0-11dd-a427-0011d86a1c18}]
shell\Auto\command - L:\Start.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bcea2bb2-a687-11dc-a26d-0011d86a1c18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bec5ca10-6957-11dd-a43a-0012bf00a54e}]
shell\Auto\command - K:\Start.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c296d01a-1954-11dd-a378-0011d86a1c18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c96c4bdf-29d7-11de-8960-0012bf00a54e}]
shell\AutoRun\command - L:\setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd9c0828-ad93-11dc-a280-0011d86a1c18}]
shell\Auto\command - K:\Start.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eda30c36-9d2b-11dc-a250-806d6172696f}]
shell\AutoRun\command - E:\Autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f8876d02-91b3-11dd-a480-0011d86a1c18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe |
| Voici la 2ème partie :
======List of files/folders created in the last 2 months======
2009-06-16 17:21:11 ----DC---- C:\rsit
2009-06-16 12:18:04 ----DC---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-06-16 12:18:04 ----D---- C:\Program Files\Kaspersky Lab
2009-06-16 02:26:09 ----A---- C:\WINDOWS\ntbtlog.txt
2009-06-15 21:11:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-15 20:09:13 ----DC---- C:\Documents and Settings\All Users\Application Data\ESET
2009-06-15 18:44:46 ----A---- C:\WINDOWS\MaxTV Uninstall Log.txt
2009-06-15 12:30:15 ----DC---- C:\Binaries
2009-06-15 12:11:03 ----D---- C:\WINDOWS\system32\RTCOM
2009-06-15 12:10:46 ----A---- C:\WINDOWS\RtlUpd.exe
2009-06-15 12:10:44 ----A---- C:\WINDOWS\RTHDCPL.EXE
2009-06-15 12:10:44 ----A---- C:\WINDOWS\MicCal.exe
2009-06-15 12:10:42 ----D---- C:\Program Files\Realtek
2009-06-15 12:10:33 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-06-15 10:35:44 ----D---- C:\Program Files\Panda Security
2009-06-14 11:43:27 ----D---- C:\Program Files\Black Isle
2009-06-13 18:41:17 ----D---- C:\Program Files\CCleaner
2009-06-13 18:37:56 ----D---- C:\Program Files\Fichiers communs\InterVideo
2009-06-13 18:37:29 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\InterTrust
2009-06-13 18:37:21 ----D---- C:\My Video
2009-06-13 18:37:21 ----D---- C:\My Lockbox
2009-06-13 18:37:21 ----D---- C:\Downloads
2009-06-13 13:41:12 ----D---- C:\Program Files\Ad-remover
2009-06-13 11:18:18 ----A---- C:\WINDOWS\explorer.exe
2009-06-12 02:07:58 ----HDC---- C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
2009-06-12 01:00:04 ----A---- C:\WINDOWS\system32\lsdelete.exe
2009-06-11 23:57:19 ----D---- C:\Program Files\iPod
2009-06-11 23:57:15 ----DC---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-06-11 17:23:03 ----HDC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-06-10 16:55:55 ----HDC---- C:\RD4B335D2AF9F44185AFC417F8D8D4B473DR(2)
2009-06-10 10:44:11 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2009-06-10 08:19:30 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\IObit
2009-06-10 08:19:28 ----D---- C:\Program Files\IObit
2009-06-10 06:41:42 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Malwarebytes
2009-06-10 06:41:35 ----DC---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-10 06:41:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-10 04:44:16 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\DMV Technologies
2009-06-10 04:43:47 ----D---- C:\WINDOWS\MaxTV
2009-06-10 04:43:47 ----D---- C:\Program Files\DMV
2009-06-10 04:28:18 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Pouchin TV Mod
2009-06-10 04:11:42 ----D---- C:\Program Files\JlgSolera
2009-06-08 10:06:49 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\GetRight Pro
2009-06-08 10:06:26 ----D---- C:\Program Files\GetRight
2009-06-08 09:01:59 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-06-08 09:01:54 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-06-08 09:01:42 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-06-08 09:01:42 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-06-08 09:01:39 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-06-08 09:01:37 ----D---- C:\Program Files\Fichiers communs\Real
2009-06-08 09:01:35 ----D---- C:\Program Files\Real
2009-06-08 09:00:35 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Real
2009-06-07 19:13:08 ----D---- C:\Program Files\MozBackup
2009-06-07 06:52:44 ----D---- C:\Program Files\Babylon
2009-06-07 06:52:16 ----DC---- C:\Documents and Settings\All Users\Application Data\Babylon
2009-06-07 06:52:16 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Babylon
2009-06-07 03:47:49 ----D---- C:\Program Files\IRS
2009-06-06 22:04:00 ----D---- C:\Program Files\Folder Marker
2009-06-06 20:58:33 ----D---- C:\Program Files\LSI SoftModem
2009-06-06 17:41:15 ----N---- C:\WINDOWS\system32\agrsmdel.exe
2009-06-05 20:30:31 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\RobinsonCrusoe
2009-06-05 20:06:05 ----D---- C:\Program Files\Les Aventures de Robinson Crusoe
2009-06-05 19:42:03 ----D---- C:\Program Files\Mozilla Firefox 3.5 Beta 4
2009-06-05 19:30:44 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-05 19:30:43 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-05 19:30:43 ----A---- C:\WINDOWS\system32\java.exe
2009-06-05 19:00:32 ----D---- C:\Program Files\filehippo.com
2009-06-05 18:18:42 ----DC---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-06-05 18:18:42 ----D---- C:\Program Files\ma-config.com
2009-06-05 00:42:26 ----D---- C:\Program Files\Smart Projects
2009-06-04 21:23:26 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\ATI
2009-06-04 20:42:17 ----A---- C:\WINDOWS\system32\agrsmsvc.exe
2009-06-04 20:42:17 ----A---- C:\WINDOWS\system32\agrscoin.dll
2009-06-04 20:37:58 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-06-04 19:36:13 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-06-04 19:36:13 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-06-04 19:36:12 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-06-04 19:36:11 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-06-04 19:36:11 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-06-04 19:36:11 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-06-04 19:36:10 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-06-04 19:36:10 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-06-04 19:36:10 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-06-04 19:36:09 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-06-04 19:36:08 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-06-04 19:36:08 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-06-04 19:36:08 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-06-04 19:36:08 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-06-04 19:36:07 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-06-04 19:36:07 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-06-04 19:36:07 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-06-04 19:36:06 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-06-04 19:36:06 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-06-04 19:36:05 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-06-04 19:36:05 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-06-04 19:36:05 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-06-04 19:36:04 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-06-04 19:36:04 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-06-04 19:36:03 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-06-04 19:36:03 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-06-04 19:36:02 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-06-04 19:36:01 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-06-04 19:36:01 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-06-04 19:36:00 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-06-04 19:35:59 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-06-04 19:35:59 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-06-04 19:35:59 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-06-04 19:35:58 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-06-04 19:35:57 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-06-04 19:35:57 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-06-04 19:35:56 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-06-04 19:34:53 ----D---- C:\WINDOWS\Logs
2009-06-04 17:00:43 ----D---- C:\Program Files\Radio Fr Solo
2009-06-04 15:02:00 ----HDC---- C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}
2009-06-04 00:06:02 ----DC---- C:\Documents and Settings\All Users\Application Data\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
2009-06-03 22:06:33 ----D---- C:\Program Files\FDRLab
2009-06-03 22:06:33 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\FDRLab
2009-06-03 20:10:34 ----DC---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-06-03 20:10:34 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Spyware Terminator
2009-06-03 20:10:31 ----D---- C:\Program Files\Spyware Terminator
2009-06-03 19:34:57 ----D---- C:\Program Files\Super Internet TV
2009-06-03 19:29:59 ----DC---- C:\Documents and Settings\All Users\Application Data\Avira
2009-06-03 17:38:38 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\ArcticLine
2009-06-03 17:32:39 ----D---- C:\Program Files\Total Video Converter
2009-06-03 16:48:26 ----DC---- C:\Documents and Settings\All Users\Application Data\DriverScanner
2009-06-03 16:47:05 ----HDC---- C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2009-06-03 16:36:16 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Uniblue
2009-06-03 16:36:02 ----D---- C:\Program Files\Uniblue
2009-06-03 16:08:59 ----D---- C:\Program Files\AusLogics Registry Defrag
2009-06-03 15:36:40 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2009-05-30 18:26:09 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-05-29 02:37:06 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-05-29 02:36:32 ----SHDC---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-05-28 21:42:48 ----A---- C:\WINDOWS\Radio_Fr.ini
2009-05-28 21:27:27 ----DC---- C:\Documents and Settings\All Users\Application Data\Mushroom Age
2009-05-26 23:05:29 ----D---- C:\Program Files\LocalCooling
2009-05-26 20:43:16 ----D---- C:\Program Files\DAP
2009-05-26 20:17:39 ----A---- C:\WINDOWS\MegaManager.INI
2009-05-26 17:53:08 ----D---- C:\Program Files\Lavalys
2009-05-25 22:30:58 ----D---- C:\Program Files\Yahoo!
2009-05-25 20:17:33 ----A---- C:\WINDOWS\BricoPackFoldersDelete.cmd
2009-05-25 04:48:25 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Any Video Converter Professional
2009-05-25 04:46:55 ----D---- C:\Program Files\Any Video Converter Professional
2009-05-25 04:25:54 ----A---- C:\WINDOWS\hlp-fastvid.dll
2009-05-25 03:53:41 ----A---- C:\WINDOWS\system32\Smab.dll
2009-05-25 03:53:40 ----A---- C:\WINDOWS\system32\devil.dll
2009-05-25 03:53:39 ----A---- C:\WINDOWS\system32\avisynth.dll
2009-05-25 03:53:37 ----A---- C:\WINDOWS\system32\AVSredirect.dll
2009-05-25 03:53:37 ----A---- C:\WINDOWS\MOTA113.exe
2009-05-25 03:53:36 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-05-25 03:53:36 ----A---- C:\WINDOWS\system32\x.264.exe
2009-05-25 03:53:36 ----A---- C:\WINDOWS\system32\i420vfw.dll
2009-05-25 03:53:35 ----A---- C:\WINDOWS\x2.64.exe
2009-05-25 03:53:35 ----A---- C:\WINDOWS\meta4.exe
2009-05-25 01:19:14 ----D---- C:\Program Files\RaPiZ PSP Software
2009-05-25 01:06:48 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\OpenCandy
2009-05-25 01:06:03 ----D---- C:\Program Files\AviSynth 2.5
2009-05-25 00:59:52 ----DC---- C:\Temp
2009-05-25 00:54:55 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\ImTOO Software Studio
2009-05-24 20:39:32 ----A---- C:\WINDOWS\system32\fsproflt.exe
2009-05-24 20:39:26 ----D---- C:\Program Files\My Lockbox
2009-05-21 02:52:31 ----D---- C:\Program Files\Stardock
2009-05-20 22:03:55 ----D---- C:\Program Files\Trend Micro
2009-05-19 18:09:59 ----D---- C:\Program Files\RocketDock
2009-05-19 17:08:50 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\CursorArts
2009-05-19 17:08:39 ----D---- C:\Program Files\ActivIcons
2009-05-19 16:39:23 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Bump Technologies, Inc
2009-05-19 16:38:40 ----D---- C:\Program Files\BumpTop
2009-05-19 05:40:44 ----A---- C:\WINDOWS\IFinst27.exe
2009-05-19 05:28:19 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Change Folder Icons
2009-05-19 03:45:21 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Actual Tools
2009-05-19 03:45:18 ----D---- C:\Program Files\Actual Window Minimizer
2009-05-19 02:01:26 ----D---- C:\Program Files\Zeb-Utility
2009-05-18 20:03:48 ----DC---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-05-18 19:47:35 ----DC---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2009-05-18 19:47:35 ----D---- C:\Program Files\Lavasoft
2009-05-18 19:14:58 ----D---- C:\Program Files\msn gaming zone
2009-05-18 02:40:14 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla
2009-05-18 02:02:30 ----D---- C:\Program Files\Mozilla Firefox
2009-05-18 01:50:58 ----D---- C:\Program Files\Messenger Plus! Live
2009-05-18 00:29:28 ----DC---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-05-18 00:08:40 ----D---- C:\WINDOWS\system32\appmgmt
2009-05-18 00:08:11 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\MSNInstaller
2009-05-17 16:39:07 ----D---- C:\Program Files\MobeeSoft
2009-05-16 21:40:12 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\vlc
2009-05-16 03:00:48 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-05-06 23:43:09 ----D---- C:\Program Files\CachemanXP
2009-05-06 18:52:12 ----D---- C:\Program Files\xerox
2009-05-06 01:21:36 ----A---- C:\WINDOWS\system32\mcoinstall.exe
2009-05-05 22:51:33 ----RA---- C:\WINDOWS\settings.ini
2009-05-05 22:51:32 ----RA---- C:\WINDOWS\SoundCon.INI
2009-05-05 22:51:32 ----RA---- C:\WINDOWS\fwupgrade.ini
2009-05-05 22:51:32 ----RA---- C:\WINDOWS\Disktool.INI
2009-05-05 22:51:32 ----RA---- C:\WINDOWS\AmvTransform.ini
2009-05-05 22:51:32 ----RA---- C:\WINDOWS\AmvPlayer.ini
2009-05-05 06:21:07 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\WinRAR
2009-05-05 02:27:11 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Opera
2009-05-05 02:26:58 ----D---- C:\Program Files\Opera
2009-05-05 01:03:23 ----A---- C:\WINDOWS\system32\pywintypes25.dll
2009-05-05 01:03:23 ----A---- C:\WINDOWS\system32\pythoncom25.dll
2009-05-05 01:03:22 ----A---- C:\WINDOWS\system32\python25.dll
2009-05-05 01:01:42 ----D---- C:\Program Files\AGI
2009-05-04 01:09:47 ----HD---- C:\WINDOWS\system32\GroupPolicy
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\gptext.dll
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\gpedit.msc
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\gpedit.dll
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\fdeploy.dll
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\fde.dll
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\appmgr.dll
2009-05-04 01:09:47 ----A---- C:\WINDOWS\system32\appmgmts.dll
2009-05-03 16:59:08 ----D---- C:\Program Files\Vista Drive Icon
2009-05-03 16:13:25 ----D---- C:\Program Files\AbiSuite2
2009-05-01 22:11:20 ----D---- C:\Program Files\AusLogics Disk Defrag
2009-04-24 18:39:19 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\EoRezo
======List of files/folders modified in the last 2 months======
2009-06-16 17:13:22 ----D---- C:\WINDOWS\Temp
2009-06-16 13:52:06 ----D---- C:\WINDOWS\system32\drivers
2009-06-16 13:16:07 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-16 12:26:21 ----D---- C:\WINDOWS
2009-06-16 12:18:58 ----SHD---- C:\WINDOWS\Installer
2009-06-16 12:18:31 ----HD---- C:\WINDOWS\inf
2009-06-16 12:18:16 ----D---- C:\WINDOWS\system32
2009-06-16 12:18:04 ----D---- C:\Program Files
2009-06-16 11:38:37 ----DC---- C:\Documents and Settings
2009-06-16 11:24:16 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-16 02:09:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-16 02:09:38 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-16 00:41:41 ----DC---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-15 20:00:23 ----D---- C:\WINDOWS\Prefetch
2009-06-15 13:53:22 ----D---- C:\Program Files\SpeedFan
2009-06-15 13:31:19 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\dvdcss
2009-06-15 12:30:55 ----A---- C:\WINDOWS\win.ini
2009-06-15 12:10:42 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-15 10:42:54 ----D---- C:\Program Files\The Koran
2009-06-15 10:42:50 ----D---- C:\Program Files\Windows Media Connect 2
2009-06-15 10:06:48 ----ASHC---- C:\boot.ini
2009-06-15 10:06:48 ----A---- C:\WINDOWS\system.ini
2009-06-15 00:03:54 ----AC---- C:\WINDOWS\wininit.ini
2009-06-13 18:41:25 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-13 18:41:07 ----D---- C:\Program Files\Islam
2009-06-13 18:41:07 ----D---- C:\Program Files\Ahead
2009-06-13 18:40:53 ----D---- C:\Program Files\iTunes
2009-06-13 18:40:28 ----D---- C:\Program Files\Fichiers communs\Apple
2009-06-13 18:39:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-13 18:39:27 ----D---- C:\Program Files\QuickTime
2009-06-13 18:39:04 ----D---- C:\Program Files\Apple Software Update
2009-06-13 18:38:28 ----D---- C:\Program Files\Fichiers communs
2009-06-13 18:38:07 ----RSD---- C:\WINDOWS\Fonts
2009-06-13 18:37:45 ----D---- C:\Program Files\InterVideo
2009-06-13 18:37:29 ----D---- C:\WINDOWS\Profiles
2009-06-13 18:37:29 ----D---- C:\Menu
2009-06-13 18:37:29 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\Adobe
2009-06-13 18:34:40 ----D---- C:\WINDOWS\system32\Adobe
2009-06-13 18:34:39 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-06-13 18:30:16 ----D---- C:\Documents and Settings\HP_Propriétaire\Application Data\uTorrent
2009-06-13 00:52:05 ----SD---- C:\WINDOWS\Tasks
2009-06-13 00:51:55 ----D---- C:\WINDOWS\Registration
2009-06-12 01:55:19 ----ADC---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-11 14:28:33 ----D---- C:\WINDOWS\system32\config
2009-06-11 14:27:20 ----D---- C:\WINDOWS\system32\wbem
2009-06-10 15:49:54 ----D---- C:\Program Files\Falco Chess
2009-06-10 15:03:40 ----SHD---- C:\RECYCLER
2009-06-10 14:15:34 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-06-10 10:39:04 ----D---- C:\WINDOWS\Debug
2009-06-10 09:45:18 ----D---- C:\Program Files\Internet Explorer
2009-06-10 09:45:12 ----D---- C:\WINDOWS\ie8updates
2009-06-10 09:45:08 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 08:26:03 ----SHD---- C:\System Volume Information
2009-06-10 08:26:03 ----D---- C:\WINDOWS\system32\Restore
2009-06-08 09:01:40 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-06-07 19:17:44 ----D---- C:\Program Files\LimeWire
2009-06-07 19:17:44 ----D---- C:\Program Files\CDBurnerXP
2009-06-07 19:17:37 ----D---- C:\Program Files\Picture It! Premium 10
2009-06-07 19:17:36 ----D---- C:\Program Files\PC-Doctor for Windows
2009-06-07 19:17:35 ----D---- C:\Program Files\Java Web Start
2009-06-07 19:17:33 ----D---- C:\Program Files\Easy Internet signup
2009-06-06 18:48:10 ----AC---- C:\WINDOWS\softapdiagnostics.txt
2009-06-06 17:41:55 ----D---- C:\WINDOWS\Driver Cache
2009-06-06 17:40:26 ----SD---- C:\Documents and Settings\HP_Propriétaire\Application Data\Microsoft
2009-06-05 19:30:29 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-06-04 20:38:48 ----D---- C:\Program Files\ATI Technologies
2009-06-04 19:36:15 ----D---- C:\WINDOWS\system32\DirectX
2009-06-04 19:35:37 ----RSD---- C:\WINDOWS\assembly
2009-06-03 19:27:40 ----D---- C:\WINDOWS\WinSxS
2009-06-02 20:12:19 ----DC---- C:\Documents and Settings\All Users\Application Data\Google
2009-06-02 20:12:19 ----D---- C:\Program Files\Google
2009-06-02 19:05:58 ----D---- C:\Program Files\TuneUp Utilities 2008
2009-06-02 18:44:14 ----D---- C:\WINDOWS\Minidump
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-25 22:41:10 ----D---- C:\WINDOWS\pss
2009-05-25 22:38:47 ----D---- C:\Program Files\Outlook Express
2009-05-25 22:38:47 ----D---- C:\Program Files\Movie Maker
2009-05-25 22:38:46 ----D---- C:\WINDOWS\system32\usmt
2009-05-25 20:21:40 ----AC---- C:\WINDOWS\BricoPackUninst.txt
2009-05-25 20:21:40 ----AC---- C:\WINDOWS\BricoPackUninst.cmd
2009-05-25 20:21:39 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-05-25 20:19:40 ----D---- C:\WINDOWS\Cursors
2009-05-25 20:16:17 ----D---- C:\WINDOWS\BricoPacks
2009-05-21 06:00:19 ----DC---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-05-21 06:00:12 ----D---- C:\Program Files\Adobe
2009-05-21 03:41:32 ----AC---- C:\WINDOWS\_MSRSTRT.EXE
2009-05-19 19:43:18 ----D---- C:\WINDOWS\system32\trayres
2009-05-19 17:10:03 ----D---- C:\WINDOWS\Help
2009-05-19 02:48:48 ----D---- C:\WINDOWS\system32\ShellExt
2009-05-18 23:38:04 ----D---- C:\Program Files\uTorrent
2009-05-18 10:09:33 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-05-16 03:01:54 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-16 02:59:55 ----D---- C:\Program Files\Windows Media Player
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\wininet.dll
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-05-07 17:33:02 ----A---- C:\WINDOWS\system32\localspl.dll
2009-05-07 16:09:58 ----D---- C:\WINDOWS\system32\LogFiles
2009-05-07 03:43:36 ----A---- C:\AUTOEXEC.BAT
2009-05-05 16:56:18 ----D---- C:\Program Files\WinRAR
2009-05-05 06:53:13 ----RD---- C:\Musique
2009-05-05 06:53:11 ----D---- C:\Program Files\AtomixMP3
2009-05-05 06:53:10 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-05-05 06:53:08 ----D---- C:\Program Files\Help and Support Additions
2009-05-05 06:53:07 ----D---- C:\Program Files\magicpic
2009-05-05 06:53:06 ----HD---- C:\Python22
2009-05-05 01:01:15 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-05-03 18:20:56 ----D---- C:\Program Files\Motherboard Monitor 5
2009-05-03 17:44:57 ----D---- C:\Program Files\Microsoft
2009-05-03 16:57:18 ----D---- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
2009-05-03 16:57:17 ----D---- C:\Program Files\HP
2009-05-03 16:20:05 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-03 16:19:20 ----D---- C:\WINDOWS\ShellNew
2009-05-01 22:30:04 ----D---- C:\Program Files\Micro Application
2009-04-30 23:16:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-04-30 23:16:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-04-30 23:16:11 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-04-30 23:16:10 ----A---- C:\WINDOWS\system32\jsproxy.dll
2009-04-30 23:16:09 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2009-04-30 13:21:08 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2009-04-29 16:56:04 ----D---- C:\WINDOWS\network diagnostic
2009-04-24 21:29:01 ----DC---- C:\Documents and Settings\All Users\Application Data\SystemExplorer
2009-04-24 18:31:23 ----D---- C:\Program Files\Windows Live
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 cpuidlep;CpuIdle Pro System Driver; C:\WINDOWS\system32\drivers\cpuidlep.sys [2009-05-26 4484]
R1 Dev_UNIDRV;Dev_UNIDRV; \??\C:\WINDOWS\system32\Drivers\UNIDRV.SYS []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-06-16 175632]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2004-09-24 12928]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2007-03-28 266552]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
R2 Nsynas32;Nsynas32; C:\WINDOWS\system32\drivers\Nsynas32.sys [2001-04-09 17784]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-10-29 1204128]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-18 1675776]
R3 Cap7134;ASUS TV7134 WDM Video Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2004-10-27 335360]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-06-02 5085184]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-02-05 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 24592]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 PhTVTune;ASUS WDM TV Tuner; C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2004-10-24 24544]
R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2001-06-04 14112]
R3 rtl8139;Realtek RTL8139/810x Family Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\R8139n51.SYS [2002-10-04 46976]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41856]
S1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys []
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S1 ntiomin;ntiomin; C:\WINDOWS\system32\drivers\ntiomin.sys []
S3 ac068c2h;ac068c2h; C:\WINDOWS\system32\drivers\ac068c2h.sys []
S3 Arcadyan;Arcadyan NDIS Protocol Driver; \??\C:\PROGRA~1\PC-DOC~1\DIAGNO~1\Arcadyan.SYS []
S3 auojenok;auojenok; C:\WINDOWS\system32\drivers\auojenok.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-08-21 737874]
S3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2003-09-11 21060]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PCASp50.sys [2005-11-19 20096]
S3 PCTINDIS5;PCTINDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCTINDIS5.SYS []
S3 Pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys []
S3 PRISM_A00;Intersil PRISM 802.11a/g Driver; C:\WINDOWS\system32\DRIVERS\PCTELSAP.SYS [2004-01-29 350282]
S3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-09-29 229888]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2007-03-28 11480]
S3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
S3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2007-03-28 171928]
S3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2007-03-28 37016]
S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\IDS-DI~1\20071220.001\symidsco.sys []
S3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2007-03-28 47192]
S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2007-03-28 18904]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2004-09-23 173312]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
R2 fsproflt;FSPro Filter Service; C:\WINDOWS\system32\fsproflt.exe [2008-10-23 73344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-05 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
S2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe []
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-07-18 520192]
S2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2008-03-13 197896]
S2 CachemanXPService;CachemanXP; C:\PROGRA~1\CACHEM~1\CachemanXP.exe []
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 183280]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-06-11 1005904]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-06-05 487424]
S2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-05-30 604416]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-04-28 72704]
S3 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe []
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 gupdate1c9bc7fc11dcc16;Service Google Update (gupdate1c9bc7fc11dcc16); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2007-11-12 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-05-30 541992]
S3 LPDSVC;Serveur d'impression TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2004-08-05 19456]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-05-29 234864]
S3 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
S3 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
S3 SNMPTRAP;Service d'interruption SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-03 361216]
S3 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-18 401408]
S4 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2004-09-23 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-04-16 66872]
S4 ServiceLayer;ServiceLayer; C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe [2007-11-12 176640]
S4 SNDSrvc;Symantec Network Drivers Service; c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2007-03-28 206552]
S4 SNMP;Service SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 33280]
-----------------EOF-----------------
|
| Et pour finir, le fichier info:
info.txt logfile of random's system information tool 1.06 2009-06-16 17:21:38
======Uninstall list======
-->"C:\Program Files\InstallShield Installation Information\{1A91D1FA-B9B3-4556-9878-5C61059A19B2}\setup.exe" REMOVEALL
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->c:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{89AD2814-AFA2-46AF-AE53-C27196D9FBE6}\setup.exe" REMOVEALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAA4CCCE-78DB-47B0-A651-68270D838BD4}\setup.exe" REMOVEALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}\setup.exe" -l0x40c -uninst
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AbiWord 2.6.8-->C:\Program Files\AbiSuite2\UninstallAbiWord2.exe
Actual Window Minimizer 5.3-->"C:\Program Files\Actual Window Minimizer\unins000.exe"
Ad-Aware-->"C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Shockwave Player 11.5-->C:\WINDOWS\system32\Adobe\uninstaller.exe
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Advanced SystemCare 3-->"C:\Program Files\IObit\Advanced SystemCare 3\unins000.exe"
Agere Systems PCI Soft Modem-->agrsmdel
AnglaisFacile.com - Planet English-->"C:\Program Files\AnglaisFacile.com\Planet English\uninstall.exe"
Any Video Converter Professional 2.7.3-->"C:\Program Files\Any Video Converter Professional\unins000.exe"
AnyTV Pro Trial 4.26-->"C:\Program Files\FDRLab\AnyTV\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{B8981722-D963-4D2C-86AD-3EC4BF241C33}
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
AusLogics Disk Defrag 1.4-->"C:\Program Files\AusLogics Disk Defrag\unins000.exe"
AusLogics Registry Defrag-->"C:\Program Files\AusLogics Registry Defrag\unins000.exe"
AVS4YOU Software Navigator 1.2-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
Babylon-->C:\Program Files\Babylon\Babylon-Pro\Utils\uninstbb.exe
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Code de la Route Pratic-->MsiExec.exe /X{D374F8CD-E0F3-4810-A48F-3C96E86AF6B4}
Connexion Facile à Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1036
EAX4 Unified Redist-->MsiExec.exe /X{89661B04-C646-4412-B6D3-5E19F02F1F37}
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Falco Chess 1.5-->"C:\Program Files\Falco Chess\unins000.exe"
filehippo.com Update Checker-->"C:\Program Files\filehippo.com\uninstall.exe"
Folder Marker Pro v 3.0-->"C:\Program Files\Folder Marker\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GetRight-->"C:\Program Files\GetRight\unins000.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{548EAC70-EE00-11DD-908C-005056806466}
HijackThis 2.0.2-->"C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
InterVideo DiscLabel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3F058C0-A21C-452D-8D99-95B1A45F417D}\setup.exe" REMOVEALL
InterVideo Home Theater-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7514465-E5F3-48E9-A952-327DAEF33DE6}\setup.exe" REMOVEALL
Islam-->C:\Program files\Islam\uninstall.exe
IsoBuster 2.5-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
iTunes-->MsiExec.exe /I{C26B06A9-27BB-45B0-9873-9C623EC2BA38}
iTunes-->MsiExec.exe /I{CC5702D7-86E2-45A8-99D7-E8B976ADCC56}
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java(TM) 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Kaspersky Internet Security 2009 Beta-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kaspersky Internet Security 2009 Beta-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Le corps humain 6.0-->C:\WINDOWS\bw6uinst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Aventures de Robinson Crusoé-->"C:\Program Files\Les Aventures de Robinson Crusoe\Uninstall.exe"
LimeWire PRO 4.12.3-->"C:\Program Files\LimeWire\uninstall.exe"
LocalCooling 1.04-->"C:\Program Files\LocalCooling\unins000.exe"
Ma-Config.com-->MsiExec.exe /X{6C4D4FC0-467B-4BD7-8D11-50E49B2770D2}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\WINDOWS\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
MozBackup 1.4.9-->C:\Program Files\MozBackup\Uninstall.exe
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Firefox (3.5b4)-->C:\Program Files\Mozilla Firefox 3.5 Beta 4\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 and SOAP Toolkit 3.0-->MsiExec.exe /I{32343DB6-9A52-40C9-87E4-5E7C79791C87}
My Lockbox 1.3 for Windows 2000/XP-->"C:\Program Files\My Lockbox\unins000.exe"
Nokia Nseries Skin for Microsoft Windows Media Player-->MsiExec.exe /I{73E30715-9EC4-4DAE-BE67-64500AEB8012}
Nokia themes for your device-->MsiExec.exe /I{77F5816C-64A6-4FBE-BBE5-52EFE5EB84E8}
Opera 9.64-->MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C679F9B9-C65D-4C65-BD6C-BF90B859E281}\setup.exe" -l0x9 -removeonly
PC-Doctor for Windows-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA} /l1036
Planescape - Torment-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Black Isle\Torment\Uninst.isu"
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 combined Win32 extensions-->C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Radio Fr Solo 2.1-->C:\Program Files\Radio Fr Solo\Uninstall.exe
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
RocketDock 1.3.5-->"C:\Program Files\RocketDock\unins000.exe"
Safari-->MsiExec.exe /I{D90AFDE3-3E67-407A-ACA8-F0BAAD012F08}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SpeedFan (remove only)-->"C:\Program Files\SpeedFan\uninstall.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Super Internet TV v7.4-->"C:\Program Files\Super Internet TV\unins000.exe"
Supprimer cible dans le clic droit-->RunDll32.exe syssetup.dll,SetupInfObjectInstallAction Target_remove 4 C:\WINDOWS\system32\ShellExt\target.inf
SweetIM for Messenger 2.6-->MsiExec.exe /X{023EC958-023C-42D1-B2A4-E9E4BEF599FC}
System Explorer 1.5-->"C:\Program Files\System Explorer\unins000.exe"
The Koran-->C:\Program files\The Koran\uninstall.exe
Total Video Converter 3.14 080930-->"C:\Program Files\Total Video Converter\unins000.exe"
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Uniblue DriverScanner 2009-->"C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\DriverScanner_Setup.exe" REMOVE=TRUE MODIFY=FALSE
Uniblue DriverScanner 2009-->C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\DriverScanner_Setup.exe
Uniblue RegistryBooster 2009-->"C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\Uniblue RegistryBooster.exe" REMOVE=TRUE MODIFY=FALSE
Uniblue RegistryBooster 2009-->C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\Uniblue RegistryBooster.exe
Uniblue SpeedUpMyPC 2009-->"C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\speedupmypc2009.exe" REMOVE=TRUE MODIFY=FALSE
Uniblue SpeedUpMyPC 2009-->C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\speedupmypc2009.exe
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Vista Drive Icon 1.4-->C:\Program Files\Vista Drive Icon\uninst.exe
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Zeb-Utility 1.2-->C:\Program Files\Zeb-Utility\Uninstal.exe
=====HijackThis Backups=====
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file) [2009-06-16]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trooner.com/ [2009-06-16]
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab [2009-06-16]
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file) [2009-06-16]
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - (no file) [2009-06-16]
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe [2009-06-16]
Hosts File Missing
======Security center information======
AV: Lavasoft Ad-Watch Live! AntiVirus (disabled)
AV: Kaspersky Internet Security (disabled)
FW: Kaspersky Internet Security (disabled)
======System event log======
Computer Name: RAMSES
Event Code: 62486
Message:
Record Number: 179758
Source Name: ati2mtag
Time Written: 20090613222042.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 62486
Message:
Record Number: 179757
Source Name: ati2mtag
Time Written: 20090613222042.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 62486
Message:
Record Number: 179756
Source Name: ati2mtag
Time Written: 20090613222042.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 62486
Message:
Record Number: 179755
Source Name: ati2mtag
Time Written: 20090613222042.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 62486
Message:
Record Number: 179754
Source Name: ati2mtag
Time Written: 20090613222042.000000+120
Event Type: Informations
User:
=====Application event log=====
Computer Name: RAMSES
Event Code: 1000
Message: Application défaillante ps2.exe, version 1.0.2.2, module défaillant ps2.exe, version 1.0.2.2, adresse de défaillance 0x000030b3.
Record Number: 78308
Source Name: Application Error
Time Written: 20090416220400.000000+120
Event Type: erreur
User:
Computer Name: RAMSES
Event Code: 1002
Message: L'environnement s'est arrêté de façon inattendue et Explorer.exe a redémarré.
Record Number: 78307
Source Name: Winlogon
Time Written: 20090416211834.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 0
Message:
Record Number: 78306
Source Name: iPod Service
Time Written: 20090416203106.000000+120
Event Type: Informations
User:
Computer Name: RAMSES
Event Code: 101
Message:
Record Number: 78305
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20090416203038.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: RAMSES
Event Code: 101
Message:
Record Number: 78304
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20090416203038.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
-----------------EOF----------------- |
|
Bluetooth pc
