Bonsoir

1- Télécharge et installe le logiciel HijackThis :

http://www.commentcamarche.net/telecharger/telecharger-159-h­ijackthis
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall­.exe
ou ici http://www.clubic.com/lancer-le-telechargement-51452-0-hijac­kthis.html

-->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

(Ne lance pas ce prg pour l'instant et fais la suite ... )


2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer.

Clic droit sous VISTA (exécuter en tant que…)

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...


-> laisse faire le scan et ne touche pas au PC ...


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ...
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

Merci


On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.

Merci Guillaume
voila le rapport du log :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-11-15 20:04:33
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 17 GB (33%) free of 52 GB
Total RAM: 1022 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:04:43, on 15/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
E:\Downloads\Programs\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
End of file - 5916 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{4791D8D8-3A25-4E33-B4C1-A4B82880BED4}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2009-09-09 173488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-12-01 344064]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-11-14 815104]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-10-19 202032]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"BigDog303"=C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-11-06 3118512]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
C:\WINDOWS\system32\antiwpa.dll [2009-10-19 60416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-12-01 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\CAPCOM\STREETFIGHTERIV\StreetFighterIV.exe"="C:\Program Files\CAPCOM\STREETFIGHTERIV\StreetFighterIV.exe:*:Enabled:STREET FIGHTER IV"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3da1f59-ca8b-11de-90b5-0014a56e38e6}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3da1f5b-ca8b-11de-90b5-0014a56e38e6}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f79ff8-d211-11de-90d9-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f79ff9-d211-11de-90d9-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe


======List of files/folders created in the last 2 months======

2009-11-15 20:03:41 ----D---- C:\rsit
2009-11-15 19:53:49 ----D---- C:\Program Files\Trend Micro
2009-11-15 18:09:26 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt
2009-11-15 16:31:50 ----D---- C:\Program Files\CCleaner
2009-11-15 16:18:27 ----D---- C:\Program Files\RegCleaner
2009-11-14 23:54:53 ----D---- C:\Documents and Settings\Administrateur\Application Data\Lavasoft
2009-11-14 23:54:34 ----D---- C:\Program Files\Lavasoft
2009-11-12 19:45:29 ----A---- C:\WINDOWS\avisplitter.INI
2009-11-12 18:30:37 ----D---- C:\Program Files\eMule
2009-11-10 17:02:23 ----D---- C:\Program Files\MSXML 4.0
2009-11-10 17:00:05 ----SHD---- C:\Config.Msi
2009-11-10 05:27:44 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-10 03:21:25 ----D---- C:\f02b7eb4d0219c88bc
2009-11-10 03:20:58 ----D---- C:\WINDOWS\SxsCaPendDel
2009-11-10 02:02:35 ----D---- C:\363e63322423d8936c840a6c199985
2009-11-10 01:41:34 ----D---- C:\Program Files\CAPCOM
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-11-10 01:41:09 ----D---- C:\WINDOWS\Logs
2009-11-10 01:40:16 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-11-10 01:38:09 ----D---- C:\Program Files\MSBuild
2009-11-10 01:31:23 ----D---- C:\WINDOWS\system32\XPSViewer
2009-11-10 01:31:18 ----D---- C:\WINDOWS\system32\en-us
2009-11-10 01:30:37 ----D---- C:\Program Files\Reference Assemblies
2009-11-10 01:30:09 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-11-10 01:26:20 ----RSD---- C:\WINDOWS\assembly
2009-11-10 01:25:32 ----D---- C:\WINDOWS\Microsoft.NET
2009-11-10 01:24:12 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-11-10 01:24:12 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-11-10 01:24:10 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-11-10 01:24:06 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-11-10 01:23:49 ----D---- C:\WINDOWS\system32\xlive
2009-11-10 01:23:49 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-11-10 01:10:11 ----D---- C:\Documents and Settings\All Users\Application Data\LightScribe
2009-11-10 01:10:06 ----D---- C:\Documents and Settings\Administrateur\Application Data\Nero
2009-11-10 01:02:58 ----D---- C:\Program Files\Windows Sidebar
2009-11-10 01:02:13 ----A---- C:\WINDOWS\Irremote.ini
2009-11-10 00:45:55 ----D---- C:\Program Files\Nero
2009-11-10 00:45:15 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2009-11-10 00:45:14 ----D---- C:\Program Files\Fichiers communs\Nero
2009-11-10 00:44:59 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-11-10 00:28:36 ----D---- C:\Program Files\Fichiers communs\LightScribe
2009-11-08 20:04:20 ----D---- C:\Program Files\Windows Live Safety Center
2009-11-07 23:41:55 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-11-07 23:38:54 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-11-07 23:38:49 ----D---- C:\Program Files\DAEMON Tools Lite
2009-11-07 23:29:03 ----D---- C:\Documents and Settings\Administrateur\Application Data\DAEMON Tools Lite
2009-11-07 23:08:19 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2009-11-07 16:02:59 ----D---- C:\Program Files\TrackMania Nations ESWC
2009-11-07 02:02:41 ----D---- C:\WINDOWS\ie8updates
2009-11-07 02:01:59 ----D---- C:\WINDOWS\WBEM
2009-11-07 02:00:51 ----HDC---- C:\WINDOWS\ie8
2009-11-07 01:51:47 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-06 16:54:15 ----D---- C:\WINDOWS\system32\QuickTime
2009-11-06 16:54:13 ----A---- C:\WINDOWS\system32\tsccvid.dll
2009-11-06 16:53:54 ----D---- C:\Program Files\TechSmith
2009-11-06 15:34:29 ----SHD---- C:\RECYCLER
2009-11-06 15:04:58 ----A---- C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
2009-11-06 15:02:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-11-06 15:01:40 ----D---- C:\Program Files\WinRAR
2009-11-06 14:35:25 ----A---- C:\WINDOWS\system32\unrar.dll
2009-11-06 14:35:19 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-11-06 14:35:18 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-11-06 14:35:18 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-11-06 14:35:17 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2009-11-06 14:35:17 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-11-06 14:35:16 ----A---- C:\WINDOWS\system32\divx.dll
2009-11-06 14:35:14 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-11-06 14:35:14 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-11-06 14:35:13 ----D---- C:\Program Files\K-Lite Codec Pack
2009-11-06 14:35:13 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-06 14:18:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\BitTorrent
2009-11-06 14:18:18 ----D---- C:\Program Files\DNA
2009-11-06 14:18:18 ----D---- C:\Documents and Settings\Administrateur\Application Data\DNA
2009-11-06 14:18:17 ----D---- C:\Program Files\BitTorrent
2009-11-06 14:17:50 ----D---- C:\Program Files\AskSearch
2009-11-06 14:12:28 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-11-06 14:03:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-11-06 13:46:16 ----D---- C:\WINDOWS\EffectResources
2009-11-06 13:46:13 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-11-06 13:26:17 ----D---- C:\Program Files\Full Tilt Poker
2009-11-06 13:15:46 ----A---- C:\WINDOWS\vmsnap3.exe
2009-11-06 13:15:46 ----A---- C:\WINDOWS\Domino.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\VM303Cap.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\system32\VM303STI.dll
2009-11-06 13:15:43 ----A---- C:\WINDOWS\system32\setupfilter.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\amcap.exe
2009-11-06 13:15:33 ----D---- C:\Program Files\Vimicro
2009-11-06 12:56:24 ----D---- C:\Documents and Settings\Administrateur\Application Data\IDM
2009-11-06 12:56:24 ----D---- C:\Documents and Settings\Administrateur\Application Data\DMCache
2009-11-06 12:56:06 ----D---- C:\Program Files\Internet Download Manager
2009-11-06 06:19:39 ----D---- C:\WINDOWS\system32\PreInstall
2009-11-06 06:19:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-06 06:13:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-11-06 06:05:52 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-06 06:05:52 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-06 05:57:32 ----D---- C:\Documents and Settings\Administrateur\Application Data\VSRevoGroup
2009-11-06 05:14:47 ----D---- C:\Program Files\VS Revo Group
2009-11-06 05:06:42 ----D---- C:\Program Files\ma-config.com
2009-11-06 05:06:42 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-11-06 05:03:12 ----D---- C:\Program Files\Microsoft
2009-11-06 05:02:34 ----D---- C:\Program Files\Windows Live
2009-11-06 04:58:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-11-06 04:52:34 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-11-06 04:51:22 ----D---- C:\Program Files\VideoLAN
2009-11-06 04:49:58 ----D---- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2009-11-06 04:49:08 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-06 04:49:05 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-11-06 04:48:52 ----D---- C:\Program Files\Windows Media Connect 2
2009-11-06 04:48:42 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-11-06 04:47:56 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-11-06 04:47:29 ----D---- C:\WINDOWS\system32\LogFiles
2009-11-06 04:47:22 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-11-06 04:46:47 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-11-06 04:42:56 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2009-11-06 04:42:49 ----D---- C:\Program Files\Mozilla Firefox
2009-11-06 04:29:18 ----D---- C:\Program Files\Avira
2009-11-06 04:29:18 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-11-06 04:27:15 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2009-11-06 04:25:58 ----D---- C:\Program Files\Huawei technologies
2009-11-06 04:16:59 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-06 04:16:12 ----D---- C:\W309BF54
2009-11-06 04:14:01 ----D---- C:\Program Files\DIFX
2009-11-06 04:13:07 ----D---- C:\WINDOWS\Modio
2009-11-06 04:12:10 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2009-11-06 04:12:09 ----D---- C:\Program Files\Realtek
2009-11-06 04:11:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-11-06 04:11:15 ----D---- C:\Program Files\AMD
2009-11-06 04:10:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-06 04:10:19 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2009-11-06 04:10:02 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2009-11-06 04:10:02 ----A---- C:\WINDOWS\system32\BttnCmns_64.dll
2009-11-06 04:10:01 ----D---- C:\Program Files\Hewlett-Packard
2009-11-06 04:10:01 ----A---- C:\WINDOWS\system32\BttnCmns.dll
2009-11-06 04:10:01 ----A---- C:\WINDOWS\system32\BttnCmn.dll
2009-11-06 04:09:57 ----D---- C:\Documents and Settings\Administrateur\Application Data\InstallShield
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynCOM.dll
2009-11-06 04:09:21 ----D---- C:\Program Files\Synaptics
2009-11-06 04:08:16 ----D---- C:\Program Files\Broadcom
2009-11-06 04:08:16 ----A---- C:\WINDOWS\BCMWLU00.txt
2009-11-06 04:07:45 ----D---- C:\Program Files\NetWaiting
2009-11-06 04:07:38 ----D---- C:\Program Files\CONEXANT
2009-11-06 03:53:07 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-06 03:48:00 ----D---- C:\Program Files\ATI Technologies
2009-11-06 03:47:58 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-06 03:47:07 ----N---- C:\WINDOWS\system32\bcmwlu00.EXE
2009-11-06 03:47:01 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-11-06 03:46:00 ----D---- C:\Program Files\WIDCOMM
2009-11-06 03:45:41 ----D---- C:\SWSetup
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\WgaTray.exe
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2009-11-06 03:39:13 ----RA---- C:\WINDOWS\system32\antiwpa.dll
2009-11-06 03:38:08 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2009-11-06 03:38:07 ----HD---- C:\Program Files\Uninstall Information
2009-11-06 03:38:00 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-11-06 03:38:00 ----ASH---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2009-11-06 03:37:31 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-06 03:37:29 ----D---- C:\WINDOWS\Prefetch
2009-11-06 03:37:28 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-06 03:37:28 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-06 03:33:00 ----D---- C:\WINDOWS\system32\xircom
2009-11-06 03:33:00 ----D---- C:\Program Files\xerox
2009-11-06 03:33:00 ----D---- C:\Program Files\microsoft frontpage
2009-11-06 03:32:34 ----A---- C:\WINDOWS\control.ini
2009-11-06 03:32:34 ----A---- C:\AUTOEXEC.BAT
2009-11-06 03:32:13 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-06 03:30:07 ----D---- C:\WINDOWS\Registration
2009-11-06 03:25:42 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-11-06 03:25:10 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-06 03:19:14 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-06 03:19:14 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-06 03:19:13 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-06 03:19:08 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-06 03:19:04 ----HD---- C:\Program Files\WindowsUpdate
2009-11-06 03:18:59 ----D---- C:\Program Files\Services en ligne
2009-11-06 03:18:42 ----D---- C:\WINDOWS\system32\DirectX
2009-11-06 03:18:35 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-06 03:18:31 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-06 03:18:31 ----A---- C:\WINDOWS\desktop.ini
2009-11-06 03:18:23 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-06 03:18:21 ----D---- C:\Program Files\Fichiers communs\Services
2009-11-06 03:18:21 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-06 03:18:18 ----SD---- C:\WINDOWS\Tasks
2009-11-06 03:18:18 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-06 03:18:17 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-11-06 03:18:12 ----D---- C:\WINDOWS\srchasst
2009-11-06 03:18:11 ----D---- C:\WINDOWS\system32\Macromed
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-06 03:18:01 ----D---- C:\Program Files\Movie Maker
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-06 03:17:37 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-11-06 03:17:37 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-06 03:17:36 ----D---- C:\WINDOWS\system32\Restore
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-06 03:17:32 ----D---- C:\Program Files\NetMeeting
2009-11-06 03:17:32 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-06 03:17:31 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-06 03:17:30 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-06 03:17:30 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-06 03:17:28 ----D---- C:\Program Files\Outlook Express
2009-11-06 03:17:28 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-11-06 03:17:28 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-06 03:17:20 ----D---- C:\Program Files\Fichiers communs\System
2009-11-06 03:17:16 ----D---- C:\Program Files\Internet Explorer
2009-11-06 03:16:38 ----D---- C:\Program Files\ComPlus Applications
2009-11-06 03:16:35 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-06 03:16:35 ----A---- C:\WINDOWS\vb.ini
2009-11-06 03:16:20 ----D---- C:\Program Files\Windows Media Player
2009-11-06 03:16:20 ----D---- C:\Program Files\Online Services
2009-11-06 03:16:13 ----D---- C:\Program Files\Messenger
2009-11-06 03:16:08 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-06 03:16:08 ----A---- C:\WINDOWS\system32\write.exe
2009-11-06 03:16:00 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-06 03:15:58 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\winmine.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-06 03:15:49 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-06 03:15:43 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-06 03:15:25 ----D---- C:\Program Files\MSN
2009-11-06 03:15:24 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-06 03:15:24 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-06 03:15:23 ----D---- C:\Program Files\Windows NT
2009-11-06 03:15:23 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-06 03:15:23 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-11-06 03:15:19 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-06 03:15:19 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-06 03:15:17 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-06 03:15:15 ----D---- C:\WINDOWS\system32\Com
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-06 03:15:12 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-11-06 03:14:04 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-06 03:13:41 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-11-06 03:11:59 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-06 03:10:35 ----SHD---- C:\WINDOWS\Installer
2009-11-06 03:10:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-06 03:10:34 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-11-06 03:10:34 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-06 03:10:30 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-11-06 03:10:29 ----RD---- C:\Program Files
2009-11-06 03:10:29 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-11-06 03:10:29 ----D---- C:\Program Files\Fichiers communs
2009-11-06 03:10:29 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2009-11-06 03:10:28 ----A---- C:\WINDOWS\system32\c_iscii.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda3.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda1.dll
2009-11-06 03:10:26 ----A---- C:\WINDOWS\system32\kbdusa.dll
2009-11-06 03:10:23 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2009-11-06 03:10:18 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-11-06 03:10:13 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-11-06 03:10:13 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-06 03:10:06 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-06 03:10:06 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-06 03:10:04 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-06 03:10:03 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-06 03:10:03 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-11-06 03:10:02 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-06 03:09:38 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-06 03:09:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-06 03:09:06 ----D---- C:\Documents and Settings
2009-11-06 03:09:05 ----SHD---- C:\System Volume Information
2009-11-06 03:08:11 ----RSH---- C:\boot.ini
2009-11-06 02:56:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-06 02:56:08 ----RSD---- C:\WINDOWS\Fonts
2009-11-06 02:56:08 ----RD---- C:\WINDOWS\Web
2009-11-06 02:56:08 ----HD---- C:\WINDOWS\inf
2009-11-06 02:56:08 ----D---- C:\WINDOWS\WinSxS
2009-11-06 02:56:08 ----D---- C:\WINDOWS\twain_32
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Temp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\wins
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\wbem
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\usmt
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\spool
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\Setup
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ras
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\oobe
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\npp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\mui
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\IME
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\icsxml
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ias
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\fr-fr
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\fr
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\export
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\drivers
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\dhcp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\config
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\3076
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\2052
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1054
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1042
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1041
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1037
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1036
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1033
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1031
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1028
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1025
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system
2009-11-06 02:56:08 ----D---- C:\WINDOWS\security
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Resources
2009-11-06 02:56:08 ----D---- C:\WINDOWS\repair
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Provisioning
2009-11-06 02:56:08 ----D---- C:\WINDOWS\PeerNet
2009-11-06 02:56:08 ----D---- C:\WINDOWS\pchealth
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Network Diagnostic
2009-11-06 02:56:08 ----D---- C:\WINDOWS\mui
2009-11-06 02:56:08 ----D---- C:\WINDOWS\msapps
2009-11-06 02:56:08 ----D---- C:\WINDOWS\msagent
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Media
2009-11-06 02:56:08 ----D---- C:\WINDOWS\L2Schemas
2009-11-06 02:56:08 ----D---- C:\WINDOWS\java
2009-11-06 02:56:08 ----D---- C:\WINDOWS\ime
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Help
2009-11-06 02:56:08 ----D---- C:\WINDOWS\ehome
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Driver Cache
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Debug
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Cursors
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Connection Wizard
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Config
2009-11-06 02:56:08 ----D---- C:\WINDOWS\AppPatch
2009-11-06 02:56:08 ----D---- C:\WINDOWS\addins
2009-11-06 02:56:08 ----D---- C:\WINDOWS
2009-09-16 12:26:27 ----A---- C:\WINDOWS\system32\idmmbc.dll

======List of files/folders modified in the last 2 months======

2009-11-15 14:48:17 ----A---- C:\WINDOWS\win.ini
2009-11-06 03:25:50 ----A---- C:\WINDOWS\system.ini
2009-10-22 09:17:28 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-09-25 05:36:34 ----A---- C:\WINDOWS\system32\shdocvw.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43520]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-11-06 96104]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-11-06 28520]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-06 55656]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-01 1412608]
R3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2005-08-16 30363]
R3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-08-16 1341466]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-16 56648]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-08-01 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-08-01 349312]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-08-22 1035008]
R3 HSFHWATI;HSFHWATI; C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 231424]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-05-14 100992]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2009-03-25 130432]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-11-14 199040]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 vmfilter303;vmfilter303; C:\WINDOWS\system32\drivers\vmfilter303.sys [2006-04-25 428160]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-08-22 718464]
R3 ZSMC303;A4 TECH PC Camera H; C:\WINDOWS\System32\Drivers\usbVM303.sys [2006-12-01 392122]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS []
S3 atfh18jz;atfh18jz; C:\WINDOWS\system32\drivers\atfh18jz.sys []
S3 ATICDSDr;ATICDSDr; \??\c:\swsetup\SP32048\bin\atiicdxx.sys []
S3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2006-04-28 429184]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-11-06 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-11-06 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-12-01 393216]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe [2005-08-16 258103]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-09-23 238960]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Voila le rapport info :
info.txt logfile of random's system information tool 1.06 2009-11-15 20:03:59

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
A4 TECH PC Camera H-->C:\Program Files\InstallShield Installation Information\{CE3B8E96-B0AF-4871-9178-1519B58E3A93}\setup.exe -runfromtemp -l0x040c -removeonly
Ad-Aware SE Professional-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Advertising Center-->MsiExec.exe /X{b2ec4a38-b545-4a00-8214-13fe0e915e6d}
AMD Processor Driver-->C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe -runfromtemp -l0x040c -removeonly
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Broadcom 802.11 Wireless LAN Adapter-->"C:\Program Files\Broadcom\Broadcom 802.11\Driver\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Broadcom\Broadcom 802.11\Driver"
Camtasia Studio 2-->C:\Program Files\TechSmith\Camtasia Studio 2\CSuninst.EXE
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Conexant AC-Link Audio-->C:\Program Files\CONEXANT\CNXT_AUDIO\UIU32a.exe -U -ICPL309BA.INF
DolbyFiles-->MsiExec.exe /X{b1adf008-e898-4fe2-8a1f-690d9a06acaf}
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Full Tilt Poker-->"C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Integrated Module with Bluetooth wireless technology-->MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
HP Quick Launch Buttons 6.30 J1-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\Setup.exe -runfromtemp -l0x040c -removeonly uninst
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
K-Lite Codec Pack 3.9.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{425FFD94-36BD-4933-881B-FE0B9DADF2B7}
Menu Templates - Starter Kit-->MsiExec.exe /X{b78120a0-cf84-4366-a393-4d0a59bc546c}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mobile Connect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EAAC5FD-E209-4856-8C49-D4EA40F85032}\setup.exe" -l0x9 -removeonly
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Movie Templates - Starter Kit-->MsiExec.exe /X{e498385e-1c51-459a-b45f-1721e37aa1a0}
Mozilla Firefox (3.0.15)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero BurnRights-->MsiExec.exe /X{7829db6f-a066-4e40-8912-cb07887c20bb}
Nero ControlCenter-->MsiExec.exe /X{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
Nero CoverDesigner-->MsiExec.exe /X{62ac81f6-bdd3-4110-9d36-3e9eaab40999}
Nero DiscSpeed-->MsiExec.exe /X{869200db-287a-4dc0-b02b-2b6787fbcd4c}
Nero DriveSpeed-->MsiExec.exe /X{33cf58f5-48d8-4575-83d6-96f574e4d83a}
Nero InfoTool-->MsiExec.exe /X{fbcdfd61-7dcf-4e71-9226-873ba0053139}
Nero Installer-->MsiExec.exe /X{e8a80433-302b-4ff1-815d-fcc8eac482ff}
Nero Live-->MsiExec.exe /X{df6a95f5-adc1-406a-bdc6-2aa7cc0182aa}
Nero PhotoSnap-->MsiExec.exe /X{9e82b934-9a25-445b-b8df-8012808074ac}
Nero Recode-->MsiExec.exe /X{359cfc0a-beb1-440d-95ba-cf63a86da34f}
Nero Rescue Agent-->MsiExec.exe /X{368ba326-73ad-4351-84ed-3c0a7a52cc53}
Nero ShowTime-->MsiExec.exe /X{d9dcf92e-72eb-412d-ac71-3b01276e5f8b}
Nero StartSmart-->MsiExec.exe /X{7748ac8c-18e3-43bb-959b-088faea16fb2}
Nero Vision-->MsiExec.exe /X{43e39830-1826-415d-8bae-86845787b54b}
Nero WaveEditor-->MsiExec.exe /X{a209525b-3377-43f4-b886-32f6b6e7356f}
NeroBurningROM-->MsiExec.exe /X{d025a639-b9c9-417d-8531-208859000af8}
NeroExpress-->MsiExec.exe /X{595a3116-40bb-4e0f-a2e8-d7951da56270}
NeroLiveGadget-->MsiExec.exe /X{9e9fdde6-2c26-492a-85a0-05646b3f2795}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_C7A451815AD6A55564D6F47B5A12C61D8B4DCFD1\amdk8.inf
Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -removeonly
Revo Uninstaller 1.83-->C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf
SoundTrax-->MsiExec.exe /X{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
STREET FIGHTER IV-->MsiExec.exe /X{59ABBDF0-E1E5-48AF-85FB-F523A08C3490}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TrackMania Nations ESWC 0.1.7.5-->"C:\Program Files\TrackMania Nations ESWC\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: PC-DEADPOOL
Event Code: 15007
Message: La réservation de l'espace de nom identifié par le préfixe d'URL http://*:2869/ a été correctement ajoutée.

Record Number: 5
Source Name: HTTP
Time Written: 20091106033110.000000+000
Event Type: Informations
User:

Computer Name: PC-DEADPOOL
Event Code: 3260
Message: Cet ordinateur a correctement été joint au workgroup 'WORKGROUP'.

Record Number: 4
Source Name: Workstation
Time Written: 20091106032926.000000+000
Event Type: Informations
User:

Computer Name: PC-DEADPOOL
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers PC-DEADPOOL.

Record Number: 3
Source Name: EventLog
Time Written: 20091106032835.000000+000
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20091106032449.000000+000
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20091106032449.000000+000
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACHARAT
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 231
Source Name: LoadPerf
Time Written: 20091108162115.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 230
Source Name: LoadPerf
Time Written: 20091108162115.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 4096
Message: The AntiVir service has been started successfully!

Record Number: 229
Source Name: Avira AntiVir
Time Written: 20091108161717.000000+000
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACHARAT
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 228
Source Name: SecurityCenter
Time Written: 20091108161712.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 0
Message:
Record Number: 227
Source Name: btwdins
Time Written: 20091108161711.000000+000
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 36 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2402
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

J'ai essayé de le telecharger mais ca me donne ca :
The bandwidth or page view limit for this site has been exceeded and the page cannot be viewed at this time. Once the site is below the limit, it will once again begin serving as normal.

Desole si ca a tarde voila le rapport :
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3176
Windows 5.1.2600 Service Pack 3

15/11/2009 21:16:44
mbam-log-2009-11-15 (21-16-44).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 139156
Temps écoulé: 34 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Delete on reboot.

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\antiwpa.dll (Trojan.I.Stole.Windows) -> Delete on reboot.

Sais pas si t'es encore là Guillaume ... seulement pour te dire que même apres la suppression des deux infections le fichier torrent est toujours indéracinable et Killbox quand je veux l'installer ,me dit que mscomctl.ocx manque

Toujours impossible de telecharger Toolbar-S&D (Team IDN) à chaque tentative d'y accéder au download comme si le site est surchargé en ce moment le fichier est : [Torrentsworld.net] - Scale Bustin Babes 35.Torrent


@+

Enfin c'est fait voila le rapport :


-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Turion(tm) 64 Mobile Technology ML-37 )
BIOS : Ver 1.00PARTTBL
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
C:\ (Local Disk) - NTFS - Total:50 Go (Free:14 Go)
D:\ (Local Disk) - NTFS - Total:74 Go (Free:16 Go)
E:\ (Local Disk) - NTFS - Total:23 Go (Free:6 Go)
F:\ (CD or DVD)
G:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [1] ( 16/11/2009|18:29 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar

-----------\\ Extensions

(Administrateur) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ADMINI~1\Recent\Nero 9.4.13.2 Ultra Edition 2009 + Working Keygen [h33t].lnk



1 - "C:\ToolBar SD\TB_1.txt" - 16/11/2009|18:30 - Option : [1]

-----------\\ Fin du rapport a 18:30:08,98

Salut voila pour Toolbar SD :


-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Turion(tm) 64 Mobile Technology ML-37 )
BIOS : Ver 1.00PARTTBL
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
C:\ (Local Disk) - NTFS - Total:50 Go (Free:14 Go)
D:\ (Local Disk) - NTFS - Total:74 Go (Free:16 Go)
E:\ (Local Disk) - NTFS - Total:23 Go (Free:6 Go)
F:\ (CD or DVD)
G:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 16/11/2009|18:50 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\DAEMON Tools Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Administrateur) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ADMINI~1\Recent\Nero 9.4.13.2 Ultra Edition 2009 + Working Keygen [h33t].lnk



1 - "C:\ToolBar SD\TB_1.txt" - 16/11/2009|18:30 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 16/11/2009|18:49 - Option : [1]
3 - "C:\ToolBar SD\TB_3.txt" - 16/11/2009|18:51 - Option : [2]


et voila pour OAD :

16/11/2009 ---- 19:02:23,12

----------------------------------
§§§§§§ [[Torrentsworld.net] - Scale Bustin Babes 35.torrent] §§§§§§
----------------------------------
[X] Registre
[ ] Fichier (rapide)
[ ] Fichier (disque systeme)
[X] Fichier (complete)




********************
[Registre]
********************

Aucune entrée détectée

*******************
[Fichier]
*******************

d:\T‚l‚chargements\Downloads\[Torrentsworld.net] - Scale Bustin Babes 35.torrent
d:\T‚l‚chargements\Downloads\[Torrentsworld.net] - Scale Bustin Babes 35.torrent


*********************
[Même date]
*********************

C:\WINDOWS\$hf_mig$
C:\WINDOWS\system32\FNTCACHE.DAT



----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------


le dernier scan je l'ai fait à trois reprises mais le fichier est comme inexistant

J'ai refais la même chose avec d:\Téléchargements\Downloads\[Torrentsworld.net] - Scale Bustin Babes 35.torrent

voila :

16/11/2009 ---- 19:44:59,87

----------------------------------
§§§§§§ [d:\T‚l‚chargements\Downloads\[Torrentsworld.net] - Scale Bustin Babes 35.torrent ] §§§§§§
----------------------------------
[X] Registre
[ ] Fichier (rapide)
[ ] Fichier (disque systeme)
[X] Fichier (complete)




********************
[Registre]
********************

Aucune entrée détectée

*******************
[Fichier]
*******************



*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté


----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------

Désolé Guillaume si j'ai pas vu ton poste à temps .. sais pas si ca a un rapport mais à la suite d'un scan ces deux derniers jours aprés redémarrage mon windows (craqué) me lance une alerte que je dois activer mon windows sous un délai sinon je pourrais plus l'utiliser :(

voila le rapport :

All processes killed
Error: Unable to interpret <Services> in the current context!
========== REGISTRY ==========
========== FILES ==========
d:\Téléchargements\Downloads\[Torrentsworld.net] - Scale Bustin Babes 35.torrent moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: -2097114026 bytes
->Temporary Internet Files folder emptied: 8200012 bytes
->FireFox cache emptied: 72992668 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = -1922,47 mb


OTM by OldTimer - Version 3.1.2.0 log created on 11172009_194709

Files moved on Reboot...

Registry entries deleted on Reboot...

Salut voilà j'ai craqué de nouveau le windows apparemment ca marché l'alerte a disparu

@+

Je sais pas pourquoi le post du scan ne réaparrait pas on me dit qu'il a été modéré ?

C'est fait merci guillaume pour le media player il fonctionne bien quoique parfois mais rarement je dois dire au lieu de se lancer bitorrent s'éxecute la dernière fois y a trois jours ...

voilà le lien du scan : http://www.cijoint.fr/cjlink.php?file=cj200911/cij6QhCxHO.do­c

Media player marche bien mnt la dernière fois ca fait trois jours qu'il a lancé bitorrent au lieu de s'executer voila le lien : http://www.cijoint.fr/cjlink.php?file=cj200911/cij6QhCxHO.do­c

Je crois que j'ai déja fais ca c'est pour ca le fichier info est le même voila le log :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-11-19 19:36:10
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 17 GB (32%) free of 52 GB
Total RAM: 1022 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:36:28, on 19/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
End of file - 6121 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{4791D8D8-3A25-4E33-B4C1-A4B82880BED4}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2009-09-09 173488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-12-01 344064]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-11-14 815104]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-10-19 202032]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"VMSnap3"=C:\WINDOWS\VMSnap3.EXE [2006-08-30 49152]
"Domino"=C:\WINDOWS\Domino.EXE [2006-06-28 49152]
"BigDog303"=C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-11-06 3118512]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
C:\WINDOWS\system32\antiwpa.dll [2009-10-19 60416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-12-01 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\CAPCOM\STREETFIGHTERIV\StreetFighterIV.exe"="C:\Program Files\CAPCOM\STREETFIGHTERIV\StreetFighterIV.exe:*:Enabled:STREET FIGHTER IV"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7936dc5a-d25c-11de-90dd-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7936dc5b-d25c-11de-90dd-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3da1f5b-ca8b-11de-90b5-0014a56e38e6}]
shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f79ff8-d211-11de-90d9-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f79ff9-d211-11de-90d9-000fb0c0f6f4}]
shell\AutoRun\command - G:\AutoRun.exe


======List of files/folders created in the last 2 months======

2009-11-17 23:11:24 ----A---- C:\WINDOWS\system32\antiwpa.dll
2009-11-16 18:56:48 ----A---- C:\resultat.txt
2009-11-16 18:29:12 ----A---- C:\TB.txt
2009-11-16 18:28:49 ----D---- C:\ToolBar SD
2009-11-16 13:57:53 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-11-16 13:57:52 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-11-16 03:03:35 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #3.txt
2009-11-15 20:35:36 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-11-15 20:35:25 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-11-15 20:35:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-15 20:03:41 ----D---- C:\rsit
2009-11-15 19:53:49 ----D---- C:\Program Files\Trend Micro
2009-11-15 18:09:26 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt
2009-11-15 16:31:50 ----D---- C:\Program Files\CCleaner
2009-11-15 16:18:27 ----D---- C:\Program Files\RegCleaner
2009-11-14 23:54:53 ----D---- C:\Documents and Settings\Administrateur\Application Data\Lavasoft
2009-11-14 23:54:34 ----D---- C:\Program Files\Lavasoft
2009-11-12 19:45:29 ----A---- C:\WINDOWS\avisplitter.INI
2009-11-12 18:30:37 ----D---- C:\Program Files\eMule
2009-11-10 17:02:23 ----D---- C:\Program Files\MSXML 4.0
2009-11-10 05:27:44 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-10 03:21:25 ----D---- C:\f02b7eb4d0219c88bc
2009-11-10 03:20:58 ----D---- C:\WINDOWS\SxsCaPendDel
2009-11-10 02:02:35 ----D---- C:\363e63322423d8936c840a6c199985
2009-11-10 01:41:34 ----D---- C:\Program Files\CAPCOM
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-11-10 01:41:21 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-11-10 01:41:20 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-11-10 01:41:09 ----D---- C:\WINDOWS\Logs
2009-11-10 01:40:16 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-11-10 01:38:09 ----D---- C:\Program Files\MSBuild
2009-11-10 01:31:23 ----D---- C:\WINDOWS\system32\XPSViewer
2009-11-10 01:31:18 ----D---- C:\WINDOWS\system32\en-us
2009-11-10 01:30:37 ----D---- C:\Program Files\Reference Assemblies
2009-11-10 01:30:09 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-11-10 01:26:20 ----RSD---- C:\WINDOWS\assembly
2009-11-10 01:25:32 ----D---- C:\WINDOWS\Microsoft.NET
2009-11-10 01:24:12 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-11-10 01:24:12 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-11-10 01:24:10 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-11-10 01:24:06 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-11-10 01:23:49 ----D---- C:\WINDOWS\system32\xlive
2009-11-10 01:23:49 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-11-10 01:10:11 ----D---- C:\Documents and Settings\All Users\Application Data\LightScribe
2009-11-10 01:10:06 ----D---- C:\Documents and Settings\Administrateur\Application Data\Nero
2009-11-10 01:02:58 ----D---- C:\Program Files\Windows Sidebar
2009-11-10 01:02:13 ----A---- C:\WINDOWS\Irremote.ini
2009-11-10 00:45:55 ----D---- C:\Program Files\Nero
2009-11-10 00:45:15 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2009-11-10 00:45:14 ----D---- C:\Program Files\Fichiers communs\Nero
2009-11-10 00:44:59 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-11-10 00:28:36 ----D---- C:\Program Files\Fichiers communs\LightScribe
2009-11-08 20:04:20 ----D---- C:\Program Files\Windows Live Safety Center
2009-11-07 23:41:55 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-11-07 23:38:49 ----D---- C:\Program Files\DAEMON Tools Lite
2009-11-07 23:29:03 ----D---- C:\Documents and Settings\Administrateur\Application Data\DAEMON Tools Lite
2009-11-07 23:08:19 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2009-11-07 16:02:59 ----D---- C:\Program Files\TrackMania Nations ESWC
2009-11-07 02:02:41 ----D---- C:\WINDOWS\ie8updates
2009-11-07 02:01:59 ----D---- C:\WINDOWS\WBEM
2009-11-07 02:00:51 ----HDC---- C:\WINDOWS\ie8
2009-11-07 01:51:47 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-06 16:54:15 ----D---- C:\WINDOWS\system32\QuickTime
2009-11-06 16:54:13 ----A---- C:\WINDOWS\system32\tsccvid.dll
2009-11-06 16:53:54 ----D---- C:\Program Files\TechSmith
2009-11-06 15:34:29 ----SHD---- C:\RECYCLER
2009-11-06 15:04:58 ----A---- C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
2009-11-06 15:02:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-11-06 15:01:40 ----D---- C:\Program Files\WinRAR
2009-11-06 14:35:25 ----A---- C:\WINDOWS\system32\unrar.dll
2009-11-06 14:35:19 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-11-06 14:35:18 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-11-06 14:35:18 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-11-06 14:35:17 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2009-11-06 14:35:17 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-11-06 14:35:16 ----A---- C:\WINDOWS\system32\divx.dll
2009-11-06 14:35:14 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-11-06 14:35:14 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-11-06 14:35:13 ----D---- C:\Program Files\K-Lite Codec Pack
2009-11-06 14:35:13 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-06 14:18:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\BitTorrent
2009-11-06 14:18:18 ----D---- C:\Program Files\DNA
2009-11-06 14:18:18 ----D---- C:\Documents and Settings\Administrateur\Application Data\DNA
2009-11-06 14:18:17 ----D---- C:\Program Files\BitTorrent
2009-11-06 14:17:50 ----D---- C:\Program Files\AskSearch
2009-11-06 14:12:28 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-11-06 14:03:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-11-06 13:46:16 ----D---- C:\WINDOWS\EffectResources
2009-11-06 13:46:13 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-11-06 13:26:17 ----D---- C:\Program Files\Full Tilt Poker
2009-11-06 13:15:46 ----A---- C:\WINDOWS\vmsnap3.exe
2009-11-06 13:15:46 ----A---- C:\WINDOWS\Domino.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\VM303Cap.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\system32\VM303STI.dll
2009-11-06 13:15:43 ----A---- C:\WINDOWS\system32\setupfilter.exe
2009-11-06 13:15:43 ----A---- C:\WINDOWS\amcap.exe
2009-11-06 13:15:33 ----D---- C:\Program Files\Vimicro
2009-11-06 12:56:24 ----D---- C:\Documents and Settings\Administrateur\Application Data\IDM
2009-11-06 12:56:24 ----D---- C:\Documents and Settings\Administrateur\Application Data\DMCache
2009-11-06 12:56:06 ----D---- C:\Program Files\Internet Download Manager
2009-11-06 06:19:39 ----D---- C:\WINDOWS\system32\PreInstall
2009-11-06 06:19:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-06 06:13:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-11-06 06:05:52 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-06 06:05:52 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-06 05:57:32 ----D---- C:\Documents and Settings\Administrateur\Application Data\VSRevoGroup
2009-11-06 05:14:47 ----D---- C:\Program Files\VS Revo Group
2009-11-06 05:06:42 ----D---- C:\Program Files\ma-config.com
2009-11-06 05:06:42 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-11-06 05:03:12 ----D---- C:\Program Files\Microsoft
2009-11-06 05:02:34 ----D---- C:\Program Files\Windows Live
2009-11-06 04:58:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-11-06 04:52:34 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-11-06 04:51:22 ----D---- C:\Program Files\VideoLAN
2009-11-06 04:49:58 ----D---- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2009-11-06 04:49:08 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-06 04:49:05 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-11-06 04:48:52 ----D---- C:\Program Files\Windows Media Connect 2
2009-11-06 04:48:42 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-11-06 04:47:56 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-11-06 04:47:29 ----D---- C:\WINDOWS\system32\LogFiles
2009-11-06 04:47:22 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-11-06 04:46:47 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-11-06 04:42:56 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2009-11-06 04:42:49 ----D---- C:\Program Files\Mozilla Firefox
2009-11-06 04:29:18 ----D---- C:\Program Files\Avira
2009-11-06 04:29:18 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-11-06 04:27:15 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2009-11-06 04:25:58 ----D---- C:\Program Files\Huawei technologies
2009-11-06 04:16:59 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-06 04:16:12 ----D---- C:\W309BF54
2009-11-06 04:14:01 ----D---- C:\Program Files\DIFX
2009-11-06 04:13:07 ----D---- C:\WINDOWS\Modio
2009-11-06 04:12:10 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2009-11-06 04:12:09 ----D---- C:\Program Files\Realtek
2009-11-06 04:11:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-11-06 04:11:15 ----D---- C:\Program Files\AMD
2009-11-06 04:10:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-06 04:10:19 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2009-11-06 04:10:02 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2009-11-06 04:10:02 ----A---- C:\WINDOWS\system32\BttnCmns_64.dll
2009-11-06 04:10:01 ----D---- C:\Program Files\Hewlett-Packard
2009-11-06 04:10:01 ----A---- C:\WINDOWS\system32\BttnCmns.dll
2009-11-06 04:10:01 ----A---- C:\WINDOWS\system32\BttnCmn.dll
2009-11-06 04:09:57 ----D---- C:\Documents and Settings\Administrateur\Application Data\InstallShield
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2009-11-06 04:09:22 ----A---- C:\WINDOWS\system32\SynCOM.dll
2009-11-06 04:09:21 ----D---- C:\Program Files\Synaptics
2009-11-06 04:08:16 ----D---- C:\Program Files\Broadcom
2009-11-06 04:08:16 ----A---- C:\WINDOWS\BCMWLU00.txt
2009-11-06 04:07:45 ----D---- C:\Program Files\NetWaiting
2009-11-06 04:07:38 ----D---- C:\Program Files\CONEXANT
2009-11-06 03:53:07 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-06 03:48:00 ----D---- C:\Program Files\ATI Technologies
2009-11-06 03:47:58 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-06 03:47:07 ----N---- C:\WINDOWS\system32\bcmwlu00.EXE
2009-11-06 03:47:01 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-11-06 03:46:00 ----D---- C:\Program Files\WIDCOMM
2009-11-06 03:45:41 ----D---- C:\SWSetup
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\WgaTray.exe
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
2009-11-06 03:41:39 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2009-11-06 03:38:08 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2009-11-06 03:38:07 ----HD---- C:\Program Files\Uninstall Information
2009-11-06 03:38:00 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-11-06 03:38:00 ----ASH---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2009-11-06 03:37:31 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-06 03:37:29 ----D---- C:\WINDOWS\Prefetch
2009-11-06 03:37:28 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-06 03:37:28 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-06 03:33:00 ----D---- C:\WINDOWS\system32\xircom
2009-11-06 03:33:00 ----D---- C:\Program Files\xerox
2009-11-06 03:33:00 ----D---- C:\Program Files\microsoft frontpage
2009-11-06 03:32:34 ----A---- C:\WINDOWS\control.ini
2009-11-06 03:32:34 ----A---- C:\AUTOEXEC.BAT
2009-11-06 03:32:13 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-06 03:30:07 ----D---- C:\WINDOWS\Registration
2009-11-06 03:25:42 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-11-06 03:25:10 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-06 03:19:14 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-06 03:19:14 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-06 03:19:13 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-06 03:19:08 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-06 03:19:04 ----HD---- C:\Program Files\WindowsUpdate
2009-11-06 03:18:59 ----D---- C:\Program Files\Services en ligne
2009-11-06 03:18:42 ----D---- C:\WINDOWS\system32\DirectX
2009-11-06 03:18:35 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-06 03:18:31 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-06 03:18:31 ----A---- C:\WINDOWS\desktop.ini
2009-11-06 03:18:23 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-06 03:18:21 ----D---- C:\Program Files\Fichiers communs\Services
2009-11-06 03:18:21 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-06 03:18:18 ----SD---- C:\WINDOWS\Tasks
2009-11-06 03:18:18 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-06 03:18:17 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-11-06 03:18:12 ----D---- C:\WINDOWS\srchasst
2009-11-06 03:18:11 ----D---- C:\WINDOWS\system32\Macromed
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-06 03:18:08 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-11-06 03:18:07 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-06 03:18:06 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-06 03:18:01 ----D---- C:\Program Files\Movie Maker
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-06 03:17:42 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-06 03:17:37 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-11-06 03:17:37 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-06 03:17:36 ----D---- C:\WINDOWS\system32\Restore
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-06 03:17:36 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-06 03:17:35 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-06 03:17:32 ----D---- C:\Program Files\NetMeeting
2009-11-06 03:17:32 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-06 03:17:31 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-06 03:17:30 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-06 03:17:30 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-06 03:17:28 ----D---- C:\Program Files\Outlook Express
2009-11-06 03:17:28 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-11-06 03:17:28 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-06 03:17:27 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-06 03:17:20 ----D---- C:\Program Files\Fichiers communs\System
2009-11-06 03:17:16 ----D---- C:\Program Files\Internet Explorer
2009-11-06 03:16:38 ----D---- C:\Program Files\ComPlus Applications
2009-11-06 03:16:35 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-06 03:16:35 ----A---- C:\WINDOWS\vb.ini
2009-11-06 03:16:20 ----D---- C:\Program Files\Windows Media Player
2009-11-06 03:16:20 ----D---- C:\Program Files\Online Services
2009-11-06 03:16:13 ----D---- C:\Program Files\Messenger
2009-11-06 03:16:08 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-06 03:16:08 ----A---- C:\WINDOWS\system32\write.exe
2009-11-06 03:16:00 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-06 03:15:59 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-06 03:15:58 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-06 03:15:52 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\winmine.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-06 03:15:51 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-06 03:15:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-06 03:15:49 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-06 03:15:43 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-06 03:15:25 ----D---- C:\Program Files\MSN
2009-11-06 03:15:24 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-06 03:15:24 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-06 03:15:23 ----D---- C:\Program Files\Windows NT
2009-11-06 03:15:23 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-06 03:15:23 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-06 03:15:22 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-11-06 03:15:20 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-11-06 03:15:19 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-06 03:15:19 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-06 03:15:18 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-06 03:15:17 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-06 03:15:17 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-06 03:15:16 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-06 03:15:15 ----D---- C:\WINDOWS\system32\Com
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-06 03:15:15 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-06 03:15:14 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-06 03:15:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-06 03:15:12 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-06 03:15:05 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-11-06 03:14:04 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-06 03:13:41 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-11-06 03:11:59 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-06 03:10:35 ----SHD---- C:\WINDOWS\Installer
2009-11-06 03:10:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-06 03:10:34 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-11-06 03:10:34 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-06 03:10:30 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-11-06 03:10:29 ----RD---- C:\Program Files
2009-11-06 03:10:29 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-11-06 03:10:29 ----D---- C:\Program Files\Fichiers communs
2009-11-06 03:10:29 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2009-11-06 03:10:28 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2009-11-06 03:10:28 ----A---- C:\WINDOWS\system32\c_iscii.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda3.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda2.dll
2009-11-06 03:10:26 ----RA---- C:\WINDOWS\system32\kbda1.dll
2009-11-06 03:10:26 ----A---- C:\WINDOWS\system32\kbdusa.dll
2009-11-06 03:10:23 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2009-11-06 03:10:19 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2009-11-06 03:10:18 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-11-06 03:10:16 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-11-06 03:10:14 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-11-06 03:10:13 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-11-06 03:10:13 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-11-06 03:10:12 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-11-06 03:10:11 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-11-06 03:10:09 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-06 03:10:07 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-06 03:10:06 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-06 03:10:06 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-06 03:10:04 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-06 03:10:03 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-06 03:10:03 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-11-06 03:10:02 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-06 03:09:38 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-06 03:09:38 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-06 03:09:06 ----D---- C:\Documents and Settings
2009-11-06 03:09:05 ----SHD---- C:\System Volume Information
2009-11-06 03:08:11 ----RSH---- C:\boot.ini
2009-11-06 02:56:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-06 02:56:08 ----RSD---- C:\WINDOWS\Fonts
2009-11-06 02:56:08 ----RD---- C:\WINDOWS\Web
2009-11-06 02:56:08 ----HD---- C:\WINDOWS\inf
2009-11-06 02:56:08 ----D---- C:\WINDOWS\WinSxS
2009-11-06 02:56:08 ----D---- C:\WINDOWS\twain_32
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Temp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\wins
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\wbem
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\usmt
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\spool
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\Setup
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ras
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\oobe
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\npp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\mui
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\IME
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\icsxml
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\ias
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\fr-fr
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\fr
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\export
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\drivers
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\dhcp
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\config
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\3076
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\2052
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1054
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1042
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1041
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1037
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1036
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1033
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1031
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1028
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32\1025
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system32
2009-11-06 02:56:08 ----D---- C:\WINDOWS\system
2009-11-06 02:56:08 ----D---- C:\WINDOWS\security
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Resources
2009-11-06 02:56:08 ----D---- C:\WINDOWS\repair
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Provisioning
2009-11-06 02:56:08 ----D---- C:\WINDOWS\PeerNet
2009-11-06 02:56:08 ----D---- C:\WINDOWS\pchealth
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Network Diagnostic
2009-11-06 02:56:08 ----D---- C:\WINDOWS\mui
2009-11-06 02:56:08 ----D---- C:\WINDOWS\msapps
2009-11-06 02:56:08 ----D---- C:\WINDOWS\msagent
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Media
2009-11-06 02:56:08 ----D---- C:\WINDOWS\L2Schemas
2009-11-06 02:56:08 ----D---- C:\WINDOWS\java
2009-11-06 02:56:08 ----D---- C:\WINDOWS\ime
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Help
2009-11-06 02:56:08 ----D---- C:\WINDOWS\ehome
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Driver Cache
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Debug
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Cursors
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Connection Wizard
2009-11-06 02:56:08 ----D---- C:\WINDOWS\Config
2009-11-06 02:56:08 ----D---- C:\WINDOWS\AppPatch
2009-11-06 02:56:08 ----D---- C:\WINDOWS\addins
2009-11-06 02:56:08 ----D---- C:\WINDOWS

======List of files/folders modified in the last 2 months======

2009-11-15 14:48:17 ----A---- C:\WINDOWS\win.ini
2009-11-06 03:25:50 ----A---- C:\WINDOWS\system.ini
2009-10-22 09:17:28 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-09-25 05:36:34 ----A---- C:\WINDOWS\system32\shdocvw.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43520]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-11-06 96104]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-11-06 28520]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-06 55656]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-01 1412608]
R3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2005-08-16 30363]
R3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-08-16 1341466]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-16 56648]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-08-01 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-08-01 349312]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-08-22 1035008]
R3 HSFHWATI;HSFHWATI; C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 231424]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-05-14 100992]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2009-03-25 130432]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-11-14 199040]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 vmfilter303;vmfilter303; C:\WINDOWS\system32\drivers\vmfilter303.sys [2006-04-25 428160]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-08-22 718464]
R3 ZSMC303;A4 TECH PC Camera H; C:\WINDOWS\System32\Drivers\usbVM303.sys [2006-12-01 392122]
S3 ahzch82q;ahzch82q; C:\WINDOWS\system32\drivers\ahzch82q.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS []
S3 ATICDSDr;ATICDSDr; \??\c:\swsetup\SP32048\bin\atiicdxx.sys []
S3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2006-04-28 429184]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-11-06 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-11-06 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-12-01 393216]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe [2005-08-16 258103]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-09-23 238960]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Voila le fichier info :

info.txt logfile of random's system information tool 1.06 2009-11-15 20:03:59

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
A4 TECH PC Camera H-->C:\Program Files\InstallShield Installation Information\{CE3B8E96-B0AF-4871-9178-1519B58E3A93}\setup.exe -runfromtemp -l0x040c -removeonly
Ad-Aware SE Professional-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Advertising Center-->MsiExec.exe /X{b2ec4a38-b545-4a00-8214-13fe0e915e6d}
AMD Processor Driver-->C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe -runfromtemp -l0x040c -removeonly
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Broadcom 802.11 Wireless LAN Adapter-->"C:\Program Files\Broadcom\Broadcom 802.11\Driver\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Broadcom\Broadcom 802.11\Driver"
Camtasia Studio 2-->C:\Program Files\TechSmith\Camtasia Studio 2\CSuninst.EXE
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Conexant AC-Link Audio-->C:\Program Files\CONEXANT\CNXT_AUDIO\UIU32a.exe -U -ICPL309BA.INF
DolbyFiles-->MsiExec.exe /X{b1adf008-e898-4fe2-8a1f-690d9a06acaf}
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Full Tilt Poker-->"C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Integrated Module with Bluetooth wireless technology-->MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
HP Quick Launch Buttons 6.30 J1-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\Setup.exe -runfromtemp -l0x040c -removeonly uninst
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
K-Lite Codec Pack 3.9.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{425FFD94-36BD-4933-881B-FE0B9DADF2B7}
Menu Templates - Starter Kit-->MsiExec.exe /X{b78120a0-cf84-4366-a393-4d0a59bc546c}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mobile Connect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EAAC5FD-E209-4856-8C49-D4EA40F85032}\setup.exe" -l0x9 -removeonly
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Movie Templates - Starter Kit-->MsiExec.exe /X{e498385e-1c51-459a-b45f-1721e37aa1a0}
Mozilla Firefox (3.0.15)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero BurnRights-->MsiExec.exe /X{7829db6f-a066-4e40-8912-cb07887c20bb}
Nero ControlCenter-->MsiExec.exe /X{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
Nero CoverDesigner-->MsiExec.exe /X{62ac81f6-bdd3-4110-9d36-3e9eaab40999}
Nero DiscSpeed-->MsiExec.exe /X{869200db-287a-4dc0-b02b-2b6787fbcd4c}
Nero DriveSpeed-->MsiExec.exe /X{33cf58f5-48d8-4575-83d6-96f574e4d83a}
Nero InfoTool-->MsiExec.exe /X{fbcdfd61-7dcf-4e71-9226-873ba0053139}
Nero Installer-->MsiExec.exe /X{e8a80433-302b-4ff1-815d-fcc8eac482ff}
Nero Live-->MsiExec.exe /X{df6a95f5-adc1-406a-bdc6-2aa7cc0182aa}
Nero PhotoSnap-->MsiExec.exe /X{9e82b934-9a25-445b-b8df-8012808074ac}
Nero Recode-->MsiExec.exe /X{359cfc0a-beb1-440d-95ba-cf63a86da34f}
Nero Rescue Agent-->MsiExec.exe /X{368ba326-73ad-4351-84ed-3c0a7a52cc53}
Nero ShowTime-->MsiExec.exe /X{d9dcf92e-72eb-412d-ac71-3b01276e5f8b}
Nero StartSmart-->MsiExec.exe /X{7748ac8c-18e3-43bb-959b-088faea16fb2}
Nero Vision-->MsiExec.exe /X{43e39830-1826-415d-8bae-86845787b54b}
Nero WaveEditor-->MsiExec.exe /X{a209525b-3377-43f4-b886-32f6b6e7356f}
NeroBurningROM-->MsiExec.exe /X{d025a639-b9c9-417d-8531-208859000af8}
NeroExpress-->MsiExec.exe /X{595a3116-40bb-4e0f-a2e8-d7951da56270}
NeroLiveGadget-->MsiExec.exe /X{9e9fdde6-2c26-492a-85a0-05646b3f2795}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_C7A451815AD6A55564D6F47B5A12C61D8B4DCFD1\amdk8.inf
Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -removeonly
Revo Uninstaller 1.83-->C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf
SoundTrax-->MsiExec.exe /X{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
STREET FIGHTER IV-->MsiExec.exe /X{59ABBDF0-E1E5-48AF-85FB-F523A08C3490}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TrackMania Nations ESWC 0.1.7.5-->"C:\Program Files\TrackMania Nations ESWC\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: PC-DEADPOOL
Event Code: 15007
Message: La réservation de l'espace de nom identifié par le préfixe d'URL http://*:2869/ a été correctement ajoutée.

Record Number: 5
Source Name: HTTP
Time Written: 20091106033110.000000+000
Event Type: Informations
User:

Computer Name: PC-DEADPOOL
Event Code: 3260
Message: Cet ordinateur a correctement été joint au workgroup 'WORKGROUP'.

Record Number: 4
Source Name: Workstation
Time Written: 20091106032926.000000+000
Event Type: Informations
User:

Computer Name: PC-DEADPOOL
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers PC-DEADPOOL.

Record Number: 3
Source Name: EventLog
Time Written: 20091106032835.000000+000
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20091106032449.000000+000
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20091106032449.000000+000
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACHARAT
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 231
Source Name: LoadPerf
Time Written: 20091108162115.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 230
Source Name: LoadPerf
Time Written: 20091108162115.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 4096
Message: The AntiVir service has been started successfully!

Record Number: 229
Source Name: Avira AntiVir
Time Written: 20091108161717.000000+000
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACHARAT
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 228
Source Name: SecurityCenter
Time Written: 20091108161712.000000+000
Event Type: Informations
User:

Computer Name: ACHARAT
Event Code: 0
Message:
Record Number: 227
Source Name: btwdins
Time Written: 20091108161711.000000+000
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 36 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2402
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------