| 20 vegamax, le 23 jun 2009 à 11:40:57Analyse USBFIX du portable.
Le programme s'installe comme sur le PC
Au moment où j'ai le message du style : "USBFIX va démarrer l'analyse", eh bien le petit écran noir se ferme et puis plus rien.
Sur le portable mon fils a installé l'antivirus AVG anti virus free. Répondre à vegamax | On laisse tomber le portable pour l'instant, ok?
On verra après.
Sur l'autre (Celui dont on s'occupe depuis le début), fais ceci:
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir
* Double clique sur le raccourci UsbFix présent sur ton bureau.
* choisi l'option 2 ( Suppression )
* Ton bureau disparaîtra et le pc redémarrera .
* Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
* Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau dans ton prochain message .
* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
Répondre à Trying2 | 22 vegamax, le 23 jun 2009 à 12:12:24Merci pour ton aide Trying2. OK on laisse de côté le portable pour l'instant.
ça mouline ; Usbfix en est au "nettoyage de disque" et ça m'a l'air long.
Entretemps, et pour ne pas mourir idiote, peux-tu me dire ce qui -dans les lignes suivantes du rapport USBFIX permet de reconnaitre un virus, une infection ? C'est le signe d'une infection spécifique ? S'agit-il de l'infection initiale d'advanced virus remover + winupdate.exe ?
################## [ Registre # Clés Run infectieuses ]
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "UpdatesDisableNotify" ( 0x1 )
################## [ Registre # Mountpoints2 ]
HKCU\...\Explorer\MountPoints2\{92e3de8d-1019-11dc-9f3c-00116736db24}\Shell\Auto\Command
HKCU\...\Explorer\MountPoints2\{92e3de8d-1019-11dc-9f3c-00116736db24}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{ec6748f7-9e94-11dc-a03b-00173178f91a}\Shell\AutoRun\Command Répondre à vegamax | 24 vegamax, le 23 jun 2009 à 12:24:53Voici le rapport USBFIX après la suppression :
############################## [ UsbFix V3.033 ]
# User : Yvette (Administrateurs) # HOME-6A46B3B516
# Update on 15/06/09 by C_XX
# Start at: 11:59:53 | 23/06/2009
# Website : http://pagesperso-orange.fr/NosTools/usbfix.html
# Intel(R) Pentium(R) 4 CPU 3.06GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Disabled
# AV : Antivirus BitDefender 12.0 [ Enabled | Updated ]
# AV : Sophos Anti-Virus [ (!) Disabled | Updated ]
# FW : Pare-feu BitDefender [ Enabled ]12.0
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 74.52 Go (10.09 Go free) # NTFS
# D:\ # Disque fixe local # 74.51 Go (19.19 Go free) # FAT32
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# V:\ # Disque fixe local # 160 Go (20.01 Go free) # NTFS
# W:\ # Disque fixe local # 40 Go (31.36 Go free) # NTFS
# X:\ # Disque fixe local # 32.88 Go (23 Go free) # NTFS
# Y:\ # Disque amovible # 3.76 Go (1.58 Go free) [CLE YVETTE] # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Joomla_et_autres\xampplite\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
################## [ Fichiers # Dossiers infectieux ]
################## [ Registre # Clés Run infectieuses ]
# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !
# HKLM\software\microsoft\security center "UpdatesDisableNotify" # -> Reset sucessfully !
################## [ Registre # Mountpoints2 ]
Supprimé ! HKCU\...\Explorer\MountPoints2\{92e3de8d-1019-11dc-9f3c-00116736db24}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{ec6748f7-9e94-11dc-a03b-00173178f91a}\Shell\AutoRun\Command
################## [ Listing des fichiers présent ]
[20/06/2009 16:24|--a------|16] - C:\asdict.dat
[01/11/2006 08:05|---------|0] - C:\AUTOEXEC.BAT
[22/06/2009 22:11|---hs----|212] - C:\boot.ini
[05/08/2004 14:00|-r-hs----|4952] - C:\Bootfont.bin
[02/04/2009 15:51|--a------|379] - C:\colorbox.log
[01/11/2006 08:05|---------|0] - C:\CONFIG.SYS
[20/06/2009 18:03|--a------|141] - C:\dwl.dat
[20/06/2009 18:03|--a------|132] - C:\httpdwl.dat
[01/11/2006 08:05|-r-hs----|0] - C:\IO.SYS
[19/06/2009 16:09|--a------|297140] - C:\mombi.log
[01/11/2006 08:05|-r-hs----|0] - C:\MSDOS.SYS
[05/08/2004 14:00|-r-hs----|47564] - C:\NTDETECT.COM
[24/10/2008 18:44|-r-hs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[20/06/2009 18:03|--a------|815] - C:\rtsr_eml_sr.dat
[25/11/2008 07:10|---------|536] - C:\updatedatfix.log
[23/06/2009 12:04|--a------|3743] - C:\UsbFix.txt
[16/01/2008 12:48|--a------|12246] - D:\eula.1036.txt
[29/03/2005 22:53|--a------|10] - D:\TESTDRV.PIO
[28/02/2006 20:29|--ah-----|0] - D:\hpothb07.tif
[28/02/2006 20:29|--ah-----|0] - D:\hpothb07.dat
[28/01/2004 15:57|---------|4900968] - D:\WinRAR.zip
[26/01/2004 18:23|--a------|988398] - D:\wrar320.exe
[31/01/2008 09:54|--a------|318] - D:\Raccourci vers Dreamweaver4 et 8.lnk
[31/01/2008 11:01|--a------|288] - D:\Raccourci vers Illustrator.lnk
[03/05/2008 21:42|--a------|24064] - D:\conseils pour recup.doc
[16/01/2008 12:48|--a------|5686] - D:\vcredist.bmp
[16/01/2008 12:58|--a------|1442522] - D:\VC_RED.cab
[04/11/2006 12:56|--a------|328] - D:\Raccourci vers Sauvegardes Outlook.lnk
[03/05/2008 17:46|--a------|24064] - V:\conseils pour recup.doc
[23/06/2009 11:04|--a------|5567] - X:\Log1_PC_UsbFix.txt
[23/06/2009 10:25|--a------|717521] - X:\UsbFix.exe
[23/06/2009 09:23|--a------|781909] - Y:\RSIT.exe
[23/06/2009 08:28|--a------|12219] - Y:\Bonjour.docx
[23/06/2009 09:49|--a------|401720] - Y:\HiJackThis.exe
[16/03/2009 16:27|--a------|24064] - Y:\MO Live small bus.doc
################## [ Vaccination ]
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# V:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# W:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# X:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# Y:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## [ ! Fin du rapport # UsbFix V3.033 ! ] Répondre à vegamax |
| Merci Chimay8, ça me fera l'économie d'une explication...
J'ai eu du mal à trouver des infos spécifiques sur : virus remover + winupdate.exe
Donc tout ce que je peux te garantir c'est qu'en général quand cela se passe comme ça, par exemple, c'est mauvais signe :)
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "UpdatesDisableNotify" ( 0x1 )
Ici on peut voir que des paramètres du centre de sécu Windows ont été modifiés. Répondre à Trying2 | 27 vegamax, le 23 jun 2009 à 12:34:55Merci pour ces explications. Mais est-ce que cela ne peut pas être les traces que j'aurais laissées moi en supprimant les différentes clés de registre dont je parlais dans mon message initial ?
Suite à cette dernière manip de suppression, qu'est-ce que je dois faire maintenant ?? Répondre à vegamax | Suite à cette dernière manip de suppression, qu'est-ce que je dois faire maintenant ?
Rien USBfix s'en est chargé.
# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !
# HKLM\software\microsoft\security center "UpdatesDisableNotify" # -> Reset sucessfully ! Répondre à Trying2 | 36 vegamax, le 23 jun 2009 à 13:38:42Donc penses-tu que l'attaque virale est vaincue ?!
Puis-je reconnecter mon PC à Internet ?
(sachant que je suis morte de trouille car hier matin, dès le branchement du câble, l'écran bleu est revenu....)
J'attends ton conseil avec impatience (:_) Répondre à vegamax | Attend un peu, je suis sur autre chose...
Je crois qu'il y aurait 2,3 trucs à faire analyser sur Virus total.
Je repasse plus tard, Si Chimay8 ou Archet9 (ou Armay10:) a une suggestion...
En attendant petite vérif pour te faire patienter:
Télécharge Malwarebytes' Anti-Malware (MBAM)
* Double clique sur le fichier téléchargé pour lancer le processus d'installation.
* Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
* Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
* Sélectionne "Exécuter un examen rapide"
* Clique sur "Rechercher"
* L'analyse démarre, le scan est relativement long, c'est normal.
* A la fin de l'analyse, un message s'affiche :
"L'examen s'est terminé normalement. "
Clique sur "Afficher les résultats" pour afficher tous les objets trouvés.
Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
* Ferme tes navigateurs. (Internet Explorer/ Firefox...)
* Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
* MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.
@+ Répondre à Trying2 | 38 vegamax, le 23 jun 2009 à 14:37:04Voici le rapport MBAM sur le PC ; c'est édifiant !! =>
Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2297
Windows 5.1.2600 Service Pack 3
23/06/2009 14:21:58
mbam-log-2009-06-23 (14-21-58).txt
Type de recherche: Examen rapide
Eléments examinés: 96871
Temps écoulé: 6 minute(s), 37 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 4
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 3
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{01e69986-a054-4c52-abe8-ef63df1c5211} (Adware.SoftMate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\luckytender (Adware.LuckyTender) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AVR (Rogue.AdvancedVirusRemover) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\network (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\LuckyTender (Adware.LuckyTender) -> Quarantined and deleted successfully.
c:\program files\luckytender\1.3.0 (Adware.LuckyTender) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
c:\program files\luckytender\uninst.exe (Adware.LuckyTender) -> Quarantined and deleted successfully.
c:\documents and settings\Yvette\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system\services.exe (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully. Répondre à vegamax | 39 vegamax, le 23 jun 2009 à 14:57:56Ce que j'ai oublié de dire c'est que les propriétés de l'affichage ont été rétablies... Youpi !
J'attends donc le retour de Trying2 pour voir s'il y a autre chose à faire ou si je peux reconnecter mon PC au Net :) Répondre à vegamax |
| Je préfère y voir plus clair.
Pc sous XP:
Vide la quarantaine d'MBAM.
Supprime ce dossier (en gras) C:/Rsit
Relance Rsit en faisant un double clic dessus.
Poste moi les deux rapports (log et info) dans deux messages différents stp. Répondre à Trying2 | 44 vegamax, le 23 jun 2009 à 16:51:12Enfin j'ai fini par comprendre et j'ai retrouvé RSI...
Voici le fichier INFO :
info.txt logfile of random's system information tool 1.06 2009-06-23 16:46:45
======Uninstall list======
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\InstallShield Installation Information\{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
32 Bit HP CIO Components Installer-->MsiExec.exe /I{47ECCB1F-2811-49C0-B6A7-26778639ABA0}
7-Zip 4.57-->"C:\Program Files\7-Zip\Uninstall.exe"
AAA Logo 1.22-->"C:\Program Files\AAALOGO\unins000.exe"
AAA Logo 2009 Home Edition 3.0 Free Trial-->"C:\Program Files\AAALOGO2009\unins000.exe"
ABBYY PDF Transformer 1.0-->MsiExec.exe /I{4837718C-5B6E-4496-B283-FFFB5A937825}
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Acrobat 9 Pro Extended - English, Français, Deutsch-->msiexec /I {AC76BA86-1033-F400-7761-000000000004}
Adobe Color Common Settings-->C:\Program Files\Fichiers communs\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}
Adobe Dreamweaver CS3-->MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
Adobe Illustrator 10-->"C:\Program Files\InstallShield Installation Information\{412033BC-44CF-48D9-B813-4B835101F4D3}\setup.exe"
Adobe Photoshop CS-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x40c
Adobe Photoshop Elements-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements\Uninst.dll"
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe SVG Viewer-->C:\WINDOWS\IsUn040c.exe -f"C:\WINDOWS\System32\Adobe\SVG Viewer\Uninst.isu"
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
ANPSEDIC-->MsiExec.exe /X{5A682D37-E093-40A0-BF74-A4A6D1861B92}
Apple Software Update-->MsiExec.exe /I{55FA89BD-21D3-42F7-9249-C94C0094A83C}
ArcSoft Panorama Maker 3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CABB679-3958-44AA-BFFF-4E68A2684255}\Setup.exe" -l0x40c -uninst
Assistant de traduction IdiomaX-->"C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOnLine.exe" /UNINSTALL /LOG=C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOnLine.log
Audacity 1.3.7 (Unicode)-->"C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
Avanquest update-->C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe -runfromtemp -l0x0009 -removeonly
BitDefender Internet Security 2009-->MsiExec.exe /X{27148014-3B0A-402B-8130-6B056357D12D}
BitTorrent 5.0.9-->"C:\Program Files\BitTorrent\uninstall.exe"
BlueSoleil-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}\Setup.exe" -l0x40c
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Client Windows Rights Management avec Service Pack 2-->MsiExec.exe /X{1D13221B-42DE-4B3C-A43F-0F6AF3CF3DA2}
Cobian Backup 9-->C:\Program Files\Cobian Backup 9\cbUninstall.exe
Combined Community Codec Pack 2007-07-22-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Complément Microsoft Enregistrer en tant que PDF ou XPS pour programmes Microsoft Office 2007-->MsiExec.exe /X{90120000-00B2-040C-0000-0000000FF1CE}
Contact-Express-->"C:\Program Files\ContactExpress\unins000.exe"
Cram Toolbar-->regsvr32 /u /s "C:\Program Files\Cram Toolbar\untitled.dll"
Dictionnaire Le Littré 1.0-->"C:\Program Files\Dictionnaire Le Littré\unins000.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DPM Player-->MsiExec.exe /I{BA495217-1475-47A8-AB83-B7DC2A59B49E}
Dragon NaturallySpeaking 9-->MsiExec.exe /I{DDDD90B2-80F2-413A-8A8E-38C5076A7DBA}
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
eMule2-->"C:\Program Files\eMule\uninstall.exe"
Etats Et Requêtes-->"C:\Program Files\PC SOFT\Etats Et Requêtes 11\WDUninst.exe" /REG="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Etats Et Requêtes"
eXPert PDF 4-->MsiExec.exe /X{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}
Express Dictate-->C:\Program Files\NCH Swift Sound\Express\uninst.exe
Express Scribe-->C:\Program Files\NCH Swift Sound\Scribe\uninst.exe
FileZilla (remove only)-->"C:\Program Files\FileZilla\uninstall.exe"
Fish Aquarium 3D Screensaver 1.2-->"C:\Program Files\Astro Gemini Software\Fish Aquarium 3D Screensaver\unins000.exe"
Gadwin PrintScreen-->C:\Program Files\Gadwin Systems\PrintScreen\Uninstall.exe
Gamesurround Muse 5.1 DVD - Manuel de l’Utilisateur-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6F41FEAB-A3F4-49E0-9EB5-BCF11EB5B205}\setup.exe"
getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
Google Video Uploader-->"C:\Program Files\Google Video\Uninstall.exe"
GUIPDFTK-->C:\Program Files\GUIPDFTK\uninstall.exe
HijackThis 2.0.2-->"Y:\HijackThis.exe" /uninstall
HP Customer Participation Program 12.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Document Manager 2.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\DocumentManager\hpzscr01.exe -datfile hpqbud18.dat
HP Document Viewer 7.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Imaging Device Functions 12.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Premier Software 6.5-->C:\Program Files\Hewlett-Packard\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\Hewlett-Packard\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
HP Print Diagnostic Utility-->MsiExec.exe /I{E14B8A08-42B3-4676-9E91-1D39F8158DA1}
HP Smart Web Printing-->C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 12.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
Htmledit v2.6.3-->"C:\Program Files\Htmledit\unins000.exe"
IMAPSize 0.3.6-->"C:\Program Files\IMAPSize\unins000.exe"
J2SE Runtime Environment 5.0 Update 12-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150120}
Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
La boite a couleurs version 1.6.15-->"C:\Program Files\LaBoiteACouleurs\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Macromedia Dreamweaver 2-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Macromedia\Dreamweaver 2\Uninst.isu"
Magic ISO Maker v5.4 (build 0251)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Matroska Pack - Lazy Man's MKV 0.9.9-->"C:\Program Files\LD-Anime\unins000.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ Run Time Lib Setup-->MsiExec.exe /X{AAF4238F-7C29-451D-9925-C753271A5728}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Montpellier Business Plan Classic-->MsiExec.exe /I{EDA1C1F7-F27E-4B20-B9BC-39964452DBB1}
Motorola Driver Installation 3.2.0-->MsiExec.exe /I{D6A1E429-CCE1-4140-A615-710B806D12BA}
Motorola Phone Tools-->C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}\setup.exe -runfromtemp -l0x040c -removeonly
Moyea PPT to Video Converter version 1.6.0.40-->"C:\Program Files\Moyea\PPT to Video Converter\unins000.exe"
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.17)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MPM-->MsiExec.exe /X{CD8C5C7F-7C58-4F85-8977-A6C08C087912}
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
NCH Toolbox-->C:\Program Files\NCH Swift Sound\ToolBox\uninst.exe
Nero 7 Demo-->MsiExec.exe /I{C985153C-3801-EB63-1432-088E71801036}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OCR Software by I.R.I.S. 12.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
Officejet Pro 8500 A909 Series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\setup\hpzscr01.exe -datfile hpwscr22.dat -forcereboot
oggcodecs 0.71.0946-->C:\Program Files\illiminable\oggcodecs\uninst.exe
OxiMailing-->MsiExec.exe /I{B4712E9C-E0C2-45E0-826C-FEEDD5F62E78}
PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PCI Audio Driver-->cmuninst.exe
PDFCreator Toolbar-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_5218.exe" _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_5218.exe" -hu _?=C:\Program Files\PDFCreator Toolbar
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
Picture Package Music Transfer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2121C6-C94D-4A73-8EA4-6943F33EE335}\setup.exe" -l0x40c -removeonly
PowerDVD-->C:\WINDOWS\uninst.exe -f"C:\Program Files\CyberLink\PowerDVD\DeIsL1.isu"
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
Prism Video Converter-->C:\Program Files\NCH Software\Prism\uninst.exe
QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
Radio Fr Solo 2.1-->C:\Program Files\Radio Fr Solo\Uninstall.exe
Radio Media Player-->C:\Program Files\Windows Media Player\Plugins\Radios Media Player\uninst.exe
Readiris 7.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9BFFB382-0B2C-11D6-AB3E-000102B0F79A}\setup.exe" -l0x40c
Real Alternative 1.9.0-->"C:\Program Files\Real Alternative\unins000.exe"
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly
Sauvegarde des Dossiers personnels Microsoft Outlook-->MsiExec.exe /X{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Security Update for Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Shop for HP Supplies-->C:\Program Files\Hewlett-Packard\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Solar System 3D Screensaver 1.4-->"C:\Program Files\Astro Gemini Software\Solar System 3D Screensaver\unins000.exe"
Sony Picture Utility-->C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe -runfromtemp -l0x040c -removeonly
Sony Player Plug-in for Windows Media Player-->C:\PROGRA~1\Sony\PLAYER~1\UNINST.EXE
Sony USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\setup.exe" -l0x40c UNINSTALL -removeonly
Sophos Anti-Virus-->MsiExec.exe /X{034759DA-E21A-4795-BFB3-C66D17FAD183}
Sophos AutoUpdate-->MsiExec.exe /X{15C418EB-7675-42be-B2B3-281952DA014D}
Sothink Tree Menu-->"C:\Program Files\SourceTec\Sothink Tree Menu\unins000.exe"
SP2 de compatibilité descendante du client Windows Rights Management-->MsiExec.exe /X{EC905264-BCFE-423B-9C42-C3A106266790}
Spybot - Search & Destroy 1.5.2.20-->"C:\WINDOWS\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
SUPER © Version 2007.bld.23 (July 4, 2007)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Switch Sound File Converter-->C:\Program Files\NCH Swift Sound\Switch\uninst.exe
Tonka à la rescousse-->C:\HASBRO\TK_SR_FR\SR_DEL95.EXE
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb970012)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {DC4A962B-9EC2-469C-BC9C-87312ADAEE81}
USB Dual Vibration Joystick - Twin-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{21A6E85C-0310-4623-BE61-35DFE2F9AA88}\setup.exe" -l0x9
UsbFix-->C:\UsbFix\Uninstal.exe
VIA Platform Device Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
VIA Rhine-Family Fast Ethernet Adapter-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
Votre site Web 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{155D9248-A524-42D9-B255-D8308F3BF15C}\setup.exe" -l0x40c -removeonly
WampServer 2.0-->"c:\wamp\unins000.exe"
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live Sign-in Assistant-->MsiExec.exe /I{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======Security center information======
AV: Antivirus BitDefender
AV: Sophos Anti-Virus (disabled)
FW: Pare-feu BitDefender
======System event log======
Computer Name: HOME-6A46B3B516
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.
Record Number: 277772
Source Name: Service Control Manager
Time Written: 20090616145445.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.
Record Number: 277771
Source Name: Service Control Manager
Time Written: 20090616145440.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.
Record Number: 277770
Source Name: Service Control Manager
Time Written: 20090616145434.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 7036
Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.
Record Number: 277769
Source Name: Service Control Manager
Time Written: 20090616145430.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.
Record Number: 277768
Source Name: Service Control Manager
Time Written: 20090616145429.000000+120
Event Type: Informations
User: HOME-6A46B3B516\Yvette
=====Application event log=====
Computer Name: HOME-6A46B3B516
Event Code: 100
Message: SearchIndexer (1404) Le moteur de base de données 5.01.2600.5512 est démarré.
Record Number: 16495
Source Name: ESENT
Time Written: 20090606214315.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 100
Message: C:\Joomla_et_autres\xampplite\mysql\bin\mysqld-nt.exe: ready for connections.
Version: '5.0.51b-community-nt' socket: '' port: 3306 MySQL Community Edition (GPL)
For more information, see Help and Support Center at http://www.mysql.com.
Record Number: 16494
Source Name: MySQL
Time Written: 20090606214306.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 11707
Message: Product: HP Print Diagnostic Utility -- Installation operation completed successfully.
Record Number: 16493
Source Name: MsiInstaller
Time Written: 20090606212325.000000+120
Event Type: Informations
User: HOME-6A46B3B516\Yvette
Computer Name: HOME-6A46B3B516
Event Code: 32
Message: Le magasin C:\Documents and Settings\Yvette\Local Settings\Application Data\Microsoft\Outlook\contact_altenaconseils.ost a détecté un point de contrôle.
Record Number: 16492
Source Name: Outlook
Time Written: 20090606212035.000000+120
Event Type: Informations
User:
Computer Name: HOME-6A46B3B516
Event Code: 32
Message: Le magasin C:\Documents and Settings\Yvette\Local Settings\Application Data\Microsoft\Outlook\yvergerdelbove_hotmail.ost a détecté un point de contrôle.
Record Number: 16491
Source Name: Outlook
Time Written: 20090606212034.000000+120
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\Fichiers communs\HP\Digital Imaging\bin;C:\Program Files\Hewlett-Packard\Digital Imaging\bin\;C:\Program Files\Hewlett-Packard\Digital Imaging\bin\Qt\Qt 4.3.3;
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\j2re1.4.2_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\j2re1.4.2_05\lib\ext\QTJava.zip Répondre à vegamax |
| 45 vegamax, le 23 jun 2009 à 16:52:48Et maintenant, voici le fichier LOG :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Yvette at 2009-06-23 16:46:23
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 10 GB (14%) free of 76 GB
Total RAM: 1023 MB (51% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:40, on 23/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Joomla_et_autres\xampplite\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Yvette\Bureau\Anti-virus, nettoyage, récup de données\RSI\RSIT.exe
Y:\Yvette.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadwin PrintScreen] "C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe" /nosplash
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/50.14/uploader2.cab
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} (Java Plug-in 1.6.0_11) -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: mysql - Unknown owner - C:\Joomla_et_autres\xampplite\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Créateur de rapports d'état Sophos Anti-Virus (SAVAdminService) - Sophos Plc - c:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe
End of file - 9601 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\NatSpeak_Optimizer_9_51_12BED703-629C-42EC-9B59-FF4E3F99DCA.job
C:\WINDOWS\tasks\WGASetup.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2008-10-16 322864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2007-10-07 757760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2009-03-24 95536]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll [2007-10-07 757760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-08-02 7110656]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-09-22 90112]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-08-02 86016]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"C-Media Mixer"=Mixer.exe /startup []
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2009-02-23 69632]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2009-03-19 778240]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 172544]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Gadwin PrintScreen"=C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe [2008-12-09 495616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2005-02-16 221184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2005-02-16 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-04-16 24264488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vspdfprsrv.exe]
C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe [2006-05-04 998912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk]
C:\PROGRA~1\FICHIE~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2000-08-24 110592]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Assistant de traduction IdiomaX.lnk]
C:\PROGRA~1\IdiomaX\TRANSL~1.0\TrasWord.exe [2007-01-18 410160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoUpdate Monitor.lnk]
C:\PROGRA~1\Sophos\AUTOUP~1\ALMon.exe [2007-06-21 245760]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk]
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Sophos AutoUpdate Service"=2
"SAVService"=2
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Démarrage rapide de HP Photosmart Premier.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SAVService]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableProfileQuota"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoActiveDesktopChanges"=0
"NoFind"=0
"NoFolderOptions"=0
"NoRun"=0
"NoDrives"=0
"NoDriveAutoRun"=FFFFFFFF
"HonorAutoRunSetting"=1
"NoSetActiveDesktop"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoSetActiveDesktop"=
"NoActiveDesktopChanges"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Sauvegarde 29-10-2006\pro_files\eMule .047a\emule.exe"="D:\Sauvegarde 29-10-2006\pro_files\eMule .047a\emule.exe:*:Enabled:eMule"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Documents and Settings\Yvette\Bureau\emule.exe"="C:\Documents and Settings\Yvette\Bureau\emule.exe:*:Enabled:eMule"
"C:\Valve\Steam\steamapps\jbzaure\condition zero\hl.exe"="C:\Valve\Steam\steamapps\jbzaure\condition zero\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Valve\Steam\steamapps\kaiser93\condition zero\hl.exe"="C:\Valve\Steam\steamapps\kaiser93\condition zero\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Conference\Conference.dll"="C:\Program Files\Conference\Conference.dll:*:Enabled:Audio/Video Conference"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Disabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Disabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImApp.exe"="C:\Program Files\IncrediMail\bin\ImApp.exe:*:Disabled:IncrediMail"
"C:\Documents and Settings\Yvette\Bureau\incredimail_install.exe"="C:\Documents and Settings\Yvette\Bureau\incredimail_install.exe:*:Disabled:IncrediMail Installer"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\EA SPORTS\NBA LIVE 08\nbalive08.exe"="C:\Program Files\EA SPORTS\NBA LIVE 08\nbalive08.exe:*:Enabled:NBA LIVE 08"
"C:\Program Files\WDGold Lite\WDGold Lite.exe"="C:\Program Files\WDGold Lite\WDGold Lite.exe:*:Enabled:Gestion des contacts"
"J:\DisquePortable\Program Files\Maple 8\bin.win\mserver.exe"="J:\DisquePortable\Program Files\Maple 8\bin.win\mserver.exe:*:Enabled:mserver"
"C:\Program Files\Maple 8\bin.win\mserver.exe"="C:\Program Files\Maple 8\bin.win\mserver.exe:*:Enabled:mserver"
"C:\wamp\bin\apache\apache2.2.8\bin\httpd.exe"="C:\wamp\bin\apache\apache2.2.8\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\Valve\Steam\steamapps\jbzaure\counter-strike\hl.exe"="C:\Valve\Steam\steamapps\jbzaure\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Joomla_et_autres\xampplite\apache\bin\apache.exe"="C:\Joomla_et_autres\xampplite\apache\bin\apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Documents and Settings\Yvette\Application Data\Facebook\facebook.exe"="C:\Documents and Settings\Yvette\Application Data\Facebook\facebook.exe:127.0.0.1/255.255.255.255:Enabled:Facebook"
"C:\Program Files\Real Alternative\Media Player Classic\mplayerc.exe"="C:\Program Files\Real Alternative\Media Player Classic\mplayerc.exe:*:Enabled:Media Player Classic"
"C:\Program Files\Fichiers communs\XPressUpdate\XPressUpdate.exe"="C:\Program Files\Fichiers communs\XPressUpdate\XPressUpdate.exe:*:Enabled:XPressUpdate"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Disabled:Exécuter une DLL en tant qu'application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\mssetup.exe"="C:\WINDOWS\system32\mssetup.exe:*:Enabled:Microsoft Internet Sharing"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
======List of files/folders created in the last 1 months======
2009-06-23 16:46:23 ----D---- C:\rsit
2009-06-23 16:31:15 ----A---- C:\UsbFix8PC_16h30.txt
2009-06-23 16:30:48 ----D---- C:\UsbFix
2009-06-23 14:03:24 ----D---- C:\Documents and Settings\Yvette\Application Data\Malwarebytes
2009-06-23 14:03:17 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-23 14:03:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-23 12:04:36 ----RASHD---- C:\autorun.inf
2009-06-23 11:59:13 ----A---- C:\Log2_PC_UsbFix.txt
2009-06-23 09:29:06 ----D---- C:\Program Files\trend micro
2009-06-22 06:30:23 ----A---- C:\WINDOWS\system32\sdccoinstaller.dll
2009-06-22 06:29:42 ----D---- C:\Program Files\Fichiers communs\Cisco Systems
2009-06-22 06:29:07 ----A---- C:\WINDOWS\system32\SophosBootTasks.exe
2009-06-22 06:28:55 ----D---- C:\Program Files\Sophos
2009-06-22 06:28:55 ----D---- C:\Documents and Settings\All Users\Application Data\Sophos
2009-06-22 06:24:19 ----D---- C:\stdtsa
2009-06-21 09:21:39 ----D---- C:\Documents and Settings\Yvette\Application Data\HPAppData
2009-06-20 17:37:40 ----D---- C:\Documents and Settings\All Users\Application Data\WEBREG
2009-06-20 17:06:02 ----D---- C:\Documents and Settings\All Users\Application Data\HP Product Assistant
2009-06-20 17:02:20 ----D---- C:\WINDOWS\hpojp8500a909
2009-06-20 15:25:26 ----D---- C:\Documents and Settings\All Users\Application Data\ABBYY
2009-06-20 15:23:09 ----D---- C:\temp
2009-06-19 13:34:17 ----A---- C:\WINDOWS\bdagent.INI
2009-06-19 09:00:45 ----D---- C:\Documents and Settings\Yvette\Application Data\BitDefender
2009-06-19 09:00:05 ----D---- C:\Documents and Settings\All Users\Application Data\BitDefender
2009-06-19 08:58:22 ----D---- C:\Program Files\Fichiers communs\BitDefender
2009-06-18 22:12:14 ----D---- C:\Program Files\BitDefender
2009-06-12 07:23:17 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-06-11 01:33:14 ----D---- C:\Program Files\AAALOGO2009
2009-06-10 18:36:33 ----D---- C:\Documents and Settings\Yvette\Application Data\Moyea
2009-06-10 18:35:46 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-06-10 18:35:38 ----D---- C:\Program Files\Moyea
2009-06-09 19:39:09 ----D---- C:\WINDOWS\system32\DRM
2009-06-07 19:13:42 ----D---- C:\Program Files\Fichiers communs\Sonic Shared
2009-06-07 19:10:23 ----D---- C:\Program Files\Fichiers communs\HP
2009-06-07 18:18:53 ----A---- C:\WINDOWS\system32\reboot.txt
2009-06-07 09:21:30 ----D---- C:\Program Files\WinMerge
2009-06-07 07:08:44 ----D---- C:\Documents and Settings\Yvette\Application Data\Image Zone Express
2009-06-05 18:30:05 ----D---- C:\Program Files\Audacity 1.3 Beta (Unicode)
2009-06-05 17:51:55 ----D---- C:\Documents and Settings\Yvette\Application Data\Audacity
2009-06-05 01:32:32 ----A---- C:\WINDOWS\TUTORI~1.INI
2009-06-04 21:55:18 ----DC---- C:\Documents and Settings\All Users\Application Data\{92E7A367-8E12-4830-AA70-29C32E331A81}
2009-06-02 17:11:22 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-02 17:10:04 ----D---- C:\Program Files\Fichiers communs\SourceTec
2009-06-02 17:10:01 ----D---- C:\Program Files\SourceTec
2009-06-02 17:10:01 ----A---- C:\WINDOWS\system32\msxml4a.dll
2009-06-01 19:38:03 ----D---- C:\Program Files\Fichiers communs\Skype
2009-06-01 18:58:26 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-06-01 18:58:11 ----D---- C:\WINDOWS\Logs
2009-06-01 09:11:03 ----D---- C:\WINDOWS\system32\IOSUBSYS
2009-06-01 09:10:40 ----D---- C:\Program Files\Google
======List of files/folders modified in the last 1 months======
2009-06-23 16:46:37 ----D---- C:\WINDOWS\Prefetch
2009-06-23 16:32:51 ----D---- C:\WINDOWS\Temp
2009-06-23 14:25:27 ----D---- C:\WINDOWS\system32
2009-06-23 14:24:36 ----D---- C:\WINDOWS
2009-06-23 14:23:35 ----D---- C:\WINDOWS\system32\drivers
2009-06-23 14:22:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-23 14:21:58 ----RD---- C:\Program Files
2009-06-23 14:21:58 ----D---- C:\WINDOWS\system
2009-06-23 13:43:42 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-23 12:08:04 ----SHD---- C:\RECYCLER
2009-06-22 22:11:12 ----SH---- C:\boot.ini
2009-06-22 22:11:12 ----A---- C:\WINDOWS\win.ini
2009-06-22 22:11:12 ----A---- C:\WINDOWS\system.ini
2009-06-22 20:28:49 ----D---- C:\WINDOWS\pss
2009-06-22 17:51:00 ----D---- C:\Program Files\Mozilla Firefox
2009-06-22 13:32:17 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-22 06:31:37 ----SHD---- C:\WINDOWS\Installer
2009-06-22 06:31:33 ----D---- C:\Config.Msi
2009-06-22 06:31:10 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-22 06:29:42 ----D---- C:\Program Files\Fichiers communs
2009-06-22 06:29:18 ----HD---- C:\WINDOWS\inf
2009-06-21 15:30:02 ----D---- C:\DOSSIERS PARTAGES
2009-06-21 14:03:18 ----D---- C:\WINDOWS\Minidump
2009-06-21 13:32:43 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-06-21 10:10:10 ----D---- C:\WINDOWS\Debug
2009-06-21 09:17:59 ----D---- C:\WINDOWS\system32\wbem
2009-06-20 17:33:49 ----RSD---- C:\WINDOWS\assembly
2009-06-20 17:32:26 ----RSD---- C:\WINDOWS\Fonts
2009-06-20 17:27:04 ----D---- C:\WINDOWS\twain_32
2009-06-20 17:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\HP
2009-06-20 17:05:37 ----D---- C:\Program Files\HP
2009-06-20 17:03:57 ----D---- C:\WINDOWS\WinSxS
2009-06-20 17:02:25 ----D---- C:\Program Files\Hewlett-Packard
2009-06-20 16:50:41 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-19 13:22:07 ----D---- C:\WINDOWS\Help
2009-06-19 12:40:37 ----D---- C:\Documents and Settings\Yvette\Application Data\Adobe
2009-06-19 06:54:39 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-17 10:34:47 ----D---- C:\WINDOWS\system32\NtmsData
2009-06-16 19:02:28 ----D---- C:\Documents and Settings\Yvette\Application Data\Skype
2009-06-16 16:03:16 ----D---- C:\Documents and Settings\Yvette\Application Data\skypePM
2009-06-15 09:34:03 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-06-12 07:25:16 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-06-11 14:57:01 ----SD---- C:\WINDOWS\Tasks
2009-06-10 07:41:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-10 07:41:42 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 07:41:30 ----D---- C:\Program Files\Windows Desktop Search
2009-06-10 07:35:50 ----D---- C:\WINDOWS\system32\fr-FR
2009-06-10 07:35:50 ----D---- C:\Program Files\Internet Explorer
2009-06-10 07:35:38 ----D---- C:\WINDOWS\ie7updates
2009-06-09 19:46:26 ----D---- C:\Program Files\Mozilla Thunderbird
2009-06-09 19:39:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-06-07 09:22:40 ----D---- C:\WINDOWS\system32\config
2009-06-07 09:22:12 ----D---- C:\WINDOWS\Registration
2009-06-06 17:35:43 ----A---- C:\WINDOWS\Radio_Fr.ini
2009-06-03 19:29:55 ----SD---- C:\Documents and Settings\Yvette\Application Data\Microsoft
2009-06-01 19:38:03 ----RD---- C:\Program Files\Skype
2009-06-01 19:38:03 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-06-01 18:58:28 ----D---- C:\WINDOWS\system32\DirectX
2009-06-01 18:57:31 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-01 14:05:42 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-05-25 00:24:06 ----N---- C:\WINDOWS\system32\mssph.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 bdftdif;bdftdif; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 SAVOnAccessControl;SAVOnAccessControl; C:\WINDOWS\system32\DRIVERS\savonaccesscontrol.sys [2008-07-18 104704]
R1 SAVOnAccessFilter;SAVOnAccessFilter; C:\WINDOWS\system32\DRIVERS\savonaccessfilter.sys [2008-07-18 35584]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 BDVEDISK;BDVEDISK; \??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-09-22 3727680]
R3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys [2008-09-18 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\bdfndisf.sys [2009-02-12 104328]
R3 bdfsfltr;bdfsfltr; C:\WINDOWS\system32\drivers\bdfsfltr.sys [2008-12-10 242184]
R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys []
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-01-13 12500]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-11-18 377358]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2005-10-17 42496]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-08-02 3198560]
R3 PhilCam8116;Logitech QuickCam Pro 3000(PID_08B0); C:\WINDOWS\system32\DRIVERS\CamDrL21.sys [2002-12-10 236121]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys []
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys []
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys []
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys []
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-07-09 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-07-09 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-07-09 21568]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
S3 Laxsmirn;Laxsmirn; C:\WINDOWS\system32\drivers\Laxsmirn.sys []
S3 motmodem;Motorola USB CDC ACM Driver; C:\WINDOWS\system32\DRIVERS\motmodem.sys [2007-06-18 23680]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Profos;Profos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-05 5888]
S3 rspSanity;rspSanity; C:\WINDOWS\system32\DRIVERS\rspSanity32.sys [2008-12-15 23992]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 SophosBootDriver;SophosBootDriver; C:\WINDOWS\system32\DRIVERS\SophosBootDriver.sys [2008-05-23 14976]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [2005-01-27 106496]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe [2009-03-24 415024]
R2 mysql;mysql; C:\Joomla_et_autres\xampplite\mysql\bin\mysqld-nt.exe [2008-04-17 5750784]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-08-02 127043]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SAVAdminService;Créateur de rapports d'état Sophos Anti-Virus; c:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [2008-12-09 69632]
R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2009-03-27 1626112]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2007-10-20 72704]
S3 Arrakis3;BitDefender Arrakis Server; C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2009-01-20 172032]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-05-15 651720]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2009-03-03 33176]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE [2005-05-20 81920]
S3 HP Status Server;HP Status Server; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE [2004-10-16 73728]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 scan;BitDefender Threat Scanner; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe [2008-04-17 5750784]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 Apache2.2;Apache2.2; C:\Joomla_et_autres\xampplite\apache\bin\apache.exe [2008-06-14 17408]
S4 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe []
S4 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe []
S4 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]
S4 SAVService;Sophos Anti-Virus; c:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [2008-12-09 98304]
S4 Sophos AutoUpdate Service;Sophos AutoUpdate Service; c:\Program Files\Sophos\AutoUpdate\ALsvc.exe [2008-06-26 172032]
S4 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe [2008-01-18 24635]
-----------------EOF----------------- Répondre à vegamax |
| Donc sur le pc sous XP:
Tu ouvres MBAM, tu vas dans l'onglet quarantaine et tu choisis "tout supprimer".
Ensuite dans poste de travail, double clique sur lecteur C:/
Tu as un dossier dedans qui s'appelle Rsit, tu fais un clic droit dessus et tu choisis supprimer.
Ensuite, dans ta clé USB Y:/ tu dois avoir Rsit.exe double clique dessus.
DEUX rapports s'afficheront, poste les mois dans DEUX messages différents stp.
Utilises la fonction "répondre à" en dessous de ce message histoire de ne pas se disperser. Répondre à Trying2 |
| 48 vegamax, le 23 jun 2009 à 17:04:14En post 44 et 45 tu as le log et l'info
J'avais fini par trouver que RSI était sur Y.... Répondre à vegamax |
| 49 vegamax, le 23 jun 2009 à 18:10:25Allôôô ? (:
Est ce que quelqu'un a pu voir le log.txt et l'info.txt du dernier scan RSI ? Répondre à vegamax |
| Oui Yvette, vu, pris en compte et en cours d'analyse depuis un moment ;) Répondre à Trying2 |
| 51 vegamax, le 23 jun 2009 à 18:25:08Désolée... je ne voulais pas te harceler... Mais je dois partir à une réunion vers 19h30 et égoïstement je me disais que si j'avais pu avoir une bonne nouvelle, j'aurais été plus tranquille...
C'est si grave que ça, Docteur ?? (:
Prends ton temps et merci de te pencher aussi consciencieusement sur mon problème (:
Allez je vais arroser mon jardin comme ça je te lâche un peu les baskets (comme diraient mes fils... !) Répondre à vegamax |
| C'est si grave que ça?
Non, ne t'inquiète pas tout va rentrer dans l'ordre.
On s'occupera du portable plus tard (demain, après-demain)
Tu peux suivre ces instructions, pour installer et exécuter ccleaner.
En résumé:
Ne pas installer le yahoo toolbar.
Il faut cocher ces deux cases avant le nettoyage:
* clique sur "Options", "Avancé" et décoche la case: "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
*Dans Nettoyeur/Windows /avancé il faut cocher la case vieilles données du prefetch.
Et fais ensuite ces deux procédures:
1/Nettoyage classique
2/Recherche des erreurs .--> Tu peux effectuer 3 fois la recherche des erreurs de registre.(en n'oubliant pas à chaque fois comme proposé de faire une sauvegarde dans mes documents)
CCleaner ne génère pas de rapports: ne perd pas ton temps à en chercher un. :) Répondre à Trying2 |
| 53 vegamax, le 23 jun 2009 à 19:07:01J'ai nettoyé plusieurs fois depuis dimanche avec CCleaner mais là je viens de cocher d'enlever les temp de moins de 48h
Par contre, pour le nettoyage du registre, j'ai pu enlever un certain nb de choses depuis dimanche mais là il reste des choses que je ne comprends pas/connais pas.... et je ne sais pas quoi faire... J'ai notamment du mal à enlever des trucs concernant HP (imprimante) et bitdefender.Voilà le détail :
(au fait, merci de l'info concernant le fait que CCleaner ne génère pas de rapport... Je l'ai cherché lgtps !!
Rapport :
DLL partagées manquantes C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RedistList\FrameworkList.xml HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\Adobe\TypeSpt\AdobeFnt.lst HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BlueSquad\demos\UNWISE.EXE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_adg.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\aphblack.ias HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\aphwhite.ias HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\aphblack.cas HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\aphwhite.cas HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\bdc.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\bdupd.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\avxt.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\avxdisk.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\libfn.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\avxs.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\bdc.ini HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\bdcore.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\aspdict.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\prlblk.cas HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\bayescsf.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\prlwht.cas HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2himgdb.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2urldbi.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2nndata.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2std.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\asnnmap.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2wl.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2sign.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2urldbc.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2nn.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2more.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_ipx.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\asversion.txt HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_mdo.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\spoofcsf.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_nmd.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_bgu.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_fun.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2knn.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_vda.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\clusters.knn HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2_adn.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2neunet.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2neunet.slf HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
DLL partagées manquantes C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000\as2nnmap.dat HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
Extension de fichiers inutilisée .DS_STORE HKCR\.DS_STORE
Extension de fichiers inutilisée .HDR HKCR\.HDR
Extension de fichiers inutilisée .PLH HKCR\.PLH
Extension de fichiers inutilisée .TRASHES HKCR\.TRASHES
ActiveX/COM inexistant JavaPlugin.FamilyVersionSupport - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} HKCR\JavaPlugin.FamilyVersionSupport
ActiveX/COM inexistant MSSMO.ISoapMessagePart - {9C2A7669-AB3C-44D8-9F0D-172E1F920970} HKCR\MSSMO.ISoapMessagePart
ActiveX/COM inexistant MSSMO.SoapFault - {7289DDBC-FD74-4C15-A226-5D9941B59DB7} HKCR\MSSMO.SoapFault
ActiveX/COM inexistant MSSMO.SoapMessage - {B7DB7E93-CA1A-41AB-AA2E-ACD8B13C80ED} HKCR\MSSMO.SoapMessage
ActiveX/COM inexistant PdfGrabber.IPdfGrabberApp - {B8553C12-4E64-4DE9-A19F-A9F9E681B412} HKCR\PdfGrabber.IPdfGrabberApp
ActiveX/COM inexistant SSPDFSMT.OpenInWord - {4B70681D-F707-41C7-96F3-5C6105CD5C61} HKCR\SSPDFSMT.OpenInWord
ActiveX/COM inexistant SSPDFSMT.OpenInWord.1 - {4B70681D-F707-41C7-96F3-5C6105CD5C61} HKCR\SSPDFSMT.OpenInWord.1
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{1E807E5C-521F-465E-AF4E-267AAD50B3AC}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{294E9835-D0F1-4815-8C52-3C08FBB1403E}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\HPCommunication.dll HKCR\CLSID\{29A296F0-F0B9-4A6F-A9BE-F647A394849F}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\InternetUtil.dll HKCR\CLSID\{36385AE6-F389-41E3-97DF-7412F61418F8}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{372E5402-BDA5-428d-88CE-187BCF91A343}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{3F156A66-3796-4043-96A7-F3423B81C86D}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{42C419BE-9376-4b71-B8B3-335507A52569}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{51B3B655-7E45-4494-9983-4BACF0E0A834}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPeSupport.dll HKCR\CLSID\{59B15028-399E-4B6D-A5F3-A8D7BFE17E1B}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{5A494E87-262C-4340-A539-2FAC0A85D935}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPeSupport.dll HKCR\CLSID\{63B3EC14-9F70-4129-B935-46EFB37013E8}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{684E4896-6EFC-4A3D-B967-6105894A6796}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\InternetUtil.dll HKCR\CLSID\{6D84BC07-7979-4E59-9589-17E1E5A8FF55}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{7172D604-32E2-41d5-ABA0-6533DF0BD3D9}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\HPCommunication.dll HKCR\CLSID\{7B72AF68-E985-4136-A325-D1BC8326DFE4}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{7BDC31F1-FF5D-4F00-AD3B-30A8C37C435B}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{7CB9D4F5-C492-42A4-93B1-3F7D6946470D}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\InternetUtil.dll HKCR\CLSID\{7DB9052D-4CDD-45F7-9EDF-8FE44F19678B}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\bin\hpqSonWr.dll HKCR\CLSID\{81F0237C-E2FD-49E6-8E99-1434D6E13375}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{9986CC36-7FA8-4E9A-ADE1-E197FCC5484B}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{A4B8F47D-E9CF-4C79-AC36-383C940D9FBC}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{ABC0DABE-565B-4a71-BB5D-B8D1CE1F8981}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{B4E721A0-6AC4-40E6-94FC-CBD0D4279B5E}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{B63C249D-7FA4-42a6-8AF1-D83AB0CE00B3}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\RulesEngine.dll HKCR\CLSID\{BE65189A-4770-47A0-9B7B-68827DB1C317}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{CA1F27DD-4AF0-46c1-8CE5-54DEB2F8CF19}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\HPCommunication.dll HKCR\CLSID\{D9406D30-E93B-4EB5-97BA-4DE352A5C22E}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{E9348280-2D74-4933-BE25-73D946926795}
ActiveX/COM inexistant InProcServer32\C:\Program Files\Hewlett-Packard\eSupportDiags\HPBasicDetection3.dll HKCR\CLSID\{EA084E0F-B62E-406E-B672-CE909626918B}
ActiveX/COM inexistant InProcServer32\C:\DOCUME~1\Yvette\LOCALS~1\Temp\hp_webrelease\setup\HPCommunication.dll HKCR\CLSID\{FDAD9D00-18C0-4578-9305-D711951FDF00}
Référence d'installation invalide C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders
Référence d'installation invalide C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\av32bit_000\Plugins HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders
Référence d'installation invalide C:\Program Files\BitDefender\BitDefender 2009\as2core\antispam_sig_000 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders
Référence de désinstallation invalide LuckyTender HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LuckyTender
Référence de désinstallation invalide {125F0ACC-D3FC-402B-8D96-27F6E46D00D5} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{125F0ACC-D3FC-402B-8D96-27F6E46D00D5}
Référence de désinstallation invalide {45D68F08-56A0-4412-BB0F-8492BE978AC7} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{45D68F08-56A0-4412-BB0F-8492BE978AC7}
Référence de désinstallation invalide {558CD0A7-0548-4220-88FE-01CC1477DF61} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{558CD0A7-0548-4220-88FE-01CC1477DF61}
Référence de désinstallation invalide {5AC9F44E-06C7-41E3-A464-37177AB9105D} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5AC9F44E-06C7-41E3-A464-37177AB9105D}
Référence de désinstallation invalide {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Référence de désinstallation invalide {5F7F6FFF-395D-480E-8450-64F385D82C5F} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5F7F6FFF-395D-480E-8450-64F385D82C5F}
Référence de désinstallation invalide {797AE457-BA17-4BBC-B501-25FB3A0103C7} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{797AE457-BA17-4BBC-B501-25FB3A0103C7}
Référence de désinstallation invalide {7C3E3706-8FBD-4169-9726-0A47FBF9D32A} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7C3E3706-8FBD-4169-9726-0A47FBF9D32A}
Référence de désinstallation invalide {901C63FD-6673-47A6-9B5F-B13E3EBFA470} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{901C63FD-6673-47A6-9B5F-B13E3EBFA470}
Référence de désinstallation invalide {AC76BA86-1033-0000-7760-100000000004} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-1033-0000-7760-100000000004}
Référence de désinstallation invalide {B243E9A5-ED77-4F1B-B338-2486FD82DC85} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Référence de désinstallation invalide {C3CE4CED-46B0-407E-A703-7A83AAE02A36} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3CE4CED-46B0-407E-A703-7A83AAE02A36}
Référence de désinstallation invalide {C66E4A6C-6E07-4C63-8CCD-2493B5087C73} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Référence de désinstallation invalide {D2F3957E-AD54-4614-8E48-8E234F0B4053} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{D2F3957E-AD54-4614-8E48-8E234F0B4053}
Référence de désinstallation invalide {DBE84DB2-1794-4244-9859-9B720CA89B4D} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{DBE84DB2-1794-4244-9859-9B720CA89B4D}
Référence de désinstallation invalide {E2F06614-9C1E-407C-B963-02DC339F7A0A} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E2F06614-9C1E-407C-B963-02DC339F7A0A}
Référence de désinstallation invalide {F68E3631-68ED-4970-8D77-B81FE83AA6A1} HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{F68E3631-68ED-4970-8D77-B81FE83AA6A1}
Référence MUI manquante C:\DOCUME~1\Yvette\LOCALS~1\Temp\is-SEQPA.tmp\mbam-setup.tmp HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache Répondre à vegamax |
| 54 vegamax, le 24 jun 2009 à 00:12:01Bonsoir,
J'ai profité de ma réunion qui m'a tenue éloignée de mon PC (!) pour lancer une analyse complète de MBAM => il a trouvé un fichier infecté, que j'ai supprimé et qui est encore dans la quarantaine. Je te joins le rapport ci-dessous :
Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2297
Windows 5.1.2600 Service Pack 3
23/06/2009 23:57:10
mbam-log-2009-06-23 (23-57-10).txt
Type de recherche: Examen complet (C:\|D:\|V:\|W:\|X:\|Y:\|)
Eléments examinés: 564541
Temps écoulé: 4 hour(s), 4 minute(s), 41 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
c:\documents and settings\Yvette\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully. Répondre à vegamax |
| 55 vegamax, le 24 jun 2009 à 07:43:34Bonjour !
Juste pour me permettre de m'organiser, peux-tu me dire quand il te sera possible de m'apporter d'autres éléments ? Merci (-: Répondre à vegamax |
|
|
|
|
|
|
|
|
|
|