Problème de multiplication svchostFermé

Question

Bonjour,

Je tourne sous windows XP SP2, j'ai un pc récent et qui était à peu près clean jusque là. Mais depuis deux trois jours, j'ai connu un problème : quand je vais dans le gestionnaire de tâches, j'ai environ 250 (sans exagérer) svchost.exe identiques, qui mangent chacun 5 mo de RAM... en tout cas font semblant de la manger, car je n'ai pas de ralentissement. Jusque là, ça ressemble à un bug. Seulement, quand je les ai killé (oui, ca prend du temps :D) avec process explorer, ils sont réapparus comme sous-programme d'un exécutable nommé Abaddon.exe, sachant que abaddon est mon nom de session.
Je ne sais pas ce que vous en pensez, mais ça me semble fort être une cochonneries.
Sauriez-vous me conseiller sur la méthode à adopter ? Merci.

Utilisateur anonyme · Answer

BOnjour

Télécharge le fichier d’installation d’Hijackthis en cliquant sur ce lien 

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download 

* Enregistre HJTInstall.exe sur ton bureau. 

Ne lance pas l'application


Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau. 

-> http://images.malwareremoval.com/random/RSIT.exe 

! Déconnecte toi et ferme toutes tes applications en cours ! 

Double-clique sur " RSIT.exe " pour le lancer . 

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " . 

* Devant l'option "List files/folders created ..." , tu choisis : 2 months 

* clique ensuite sur " Continue " pour lancer l'analyse ... 


-> laisse faire le scan et ne touche pas au PC ... 


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note). 

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ... 

Important : poste un rapport, puis l'autre dans la réponse suivante 
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum 


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

Merci


* Colle le rapport que tu viens de copier sur ce forum

Appolyon13 · Answer

Partie 1 du log (ca marche pas sinon ^^)

Logfile of random's system information tool 1.06 (written by random/random)
Run by Abaddon at 2009-06-07 19:12:40
Microsoft Windows XP Professionnel Service Pack 3
System drive E: has 12 GB (13%) free of 96 GB
Total RAM: 2046 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:59:38, on 22/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Java\jre6\bin\jusched.exe
E:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
E:\Program Files\Gigabyte\ET5Pro\GUI.exe
E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
E:\Program Files\RocketDock\RocketDock.exe
E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\DNA\btdna.exe
E:\Program Files\Windows Live\Messenger\msnmsgr.exe
E:\Program Files\DAEMON Tools Lite\daemon.exe
E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\wbem\wmiapsrv.exe
E:\WINDOWS\system32\wscntfy.exe
E:\Program Files\Windows Live\Contacts\wlcomm.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Program Files\Malwarebytes' Anti-Malware\mb.exe
I:\Jeux\Mount&Blade\mount&blade.exe
C:\Téléchargements\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - E:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
O4 - HKLM\..\Run: [EasyTuneVPro] E:\Program Files\Gigabyte\ET5Pro\ETcall.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [OpwareSE4] "E:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WrtMon.exe] E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
O4 - HKLM\..\Run: [AVP] "E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [RocketDock] "E:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "E:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DLD.EXE] E:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Peer2Me] "E:\Program Files\Peer2Me\Peer2Me.exe"
O4 - HKCU\..\Run: [swg] E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - E:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - E:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avp (AVP) - Kaspersky Lab - E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - E:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Unknown owner - E:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - E:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O24 - Desktop Component 0: (no name) - file:///C:/TITOUNE/IMAG1993.JPG
O24 - Desktop Component 1: (no name) - file:///C:/oh33wo7.jpg
O24 - Desktop Component 2: (no name) - file:///C:/Tribal-black.gif
O24 - Desktop Component 3: (no name) - file:///C:/7589.jpg
O24 - Desktop Component 4: (no name) - file:///C:/ImpalaAttack.jpg
O24 - Desktop Component 5: (no name) - file:///C:/preview43.jpg
O24 - Desktop Component 6: (no name) - file:///C:/mini.phpd.jpg

Appolyon13 · Answer

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EasyTuneVPro"=E:\Program Files\Gigabyte\ET5Pro\ETcall.exe [2007-07-26 20480]
"SunJavaUpdateSched"=E:\Program Files\Java\jre6\bin\jusched.exe [2009-01-19 136600]
"OpwareSE4"=E:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [2006-10-11 75304]
"WrtMon.exe"=E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe [2006-09-20 20480]
"AVP"=E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2008-02-21 193800]
"QuickTime Task"=E:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"Adobe Reader Speed Launcher"=E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=E:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"MSMSGS"=E:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"BitTorrent DNA"=E:\Program Files\DNA\btdna.exe [2008-12-19 342848]
"msnmsgr"=E:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"DLD.EXE"=E:\Program Files\Download Direct\DLD.exe [2007-09-17 1343488]
"DAEMON Tools Lite"=E:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"Peer2Me"=E:\Program Files\Peer2Me\Peer2Me.exe [2008-01-04 49152]
"swg"=E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-12-27 68856]
"Abaddon"=E:\Documents and Settings\Abaddon\Abaddon.exe [2009-05-31 21016]
""=E:\Documents and Settings\Abaddon\.exe /i []
"Real Desktop"=E:\Program Files\Real Desktop\Real Desktop.exe [2009-06-04 5247001]

E:\Documents and Settings\Abaddon\Menu Démarrer\Programmes\Démarrage
Real Desktop.lnk - E:\Program Files\Real Desktop\Real Desktop.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
E:\WINDOWS\system32\Ati2evxx.dll [2008-08-21 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
E:\WINDOWS\system32\klogon.dll [2008-02-21 206088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
E:\WINDOWS\system32\WgaLogon.dll [2008-09-06 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
etwork\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\Program Files\Bonjour\mDNSResponder.exe"="E:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"E:\Program Files\iTunes\iTunes.exe"="E:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"E:\Program Files\TmNationsForever\TmForever.exe"="E:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"E:\Program Files\DNA\btdna.exe"="E:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"E:\Program Files\BitTorrent\bittorrent.exe"="E:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"E:\Program Files\EA GAMES\Need for Speed Most Wanted\speed.exe"="E:\Program Files\EA GAMES\Need for Speed Most Wanted\speed.exe:*:Disabled:speed"
"E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="E:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"I:\Jeux\Sierra Entertainment\World in Conflict\wic.exe"="I:\Jeux\Sierra Entertainment\World in Conflict\wic.exe:*:Disabled:World in Conflict"
"I:\Jeux\Crysis\Bin32\Crysis.exe"="I:\Jeux\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"I:\Jeux\Crysis\Bin32\CrysisDedicatedServer.exe"="I:\Jeux\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"I:\Jeux\Call of Duty - World at War\CoDWaW.exe"="I:\Jeux\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"I:\Jeux\Call of Duty - World at War\CoDWaWmp.exe"="I:\Jeux\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"I:\Jeux\Call of Duty 4 Modern Warfare Full-Rip Skullptura\Call of Duty 4 - Modern Warfare\iw3mp.exe"="I:\Jeux\Call of Duty 4 Modern Warfare Full-Rip Skullptura\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Disabled:iw3mp"
"I:\Jeux\Flight Simulator X\fsx.exe"="I:\Jeux\Flight Simulator X\fsx.exe:*:Enabled:Microsoft Flight Simulator®"
"E:\WINDOWS\system32\spoolsvc.exe"="E:\WINDOWS\system32\spoolsvc.exe:*:Disabled:spoolsvc"
"C:\dmari.exe"="C:\dmari.exe:*:Disabled:dmari"
"E:\WINDOWS\system32\Isass.exe"="E:\WINDOWS\system32\Isass.exe:*:Disabled:Isass"
"E:\WINDOWS\system32\spooIsv.exe"="E:\WINDOWS\system32\spooIsv.exe:*:Disabled:spooIsv"
"I:\Jeux\Burnout Paradise\BurnoutLauncher.exe"="I:\Jeux\Burnout Paradise\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"I:\Jeux\Burnout Paradise\BurnoutConfigTool.exe"="I:\Jeux\Burnout Paradise\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"I:\Jeux\Burnout Paradise\BurnoutParadise.exe"="I:\Jeux\Burnout Paradise\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"I:\Jeux\Far Cry 2\bin\FarCry2.exe"="I:\Jeux\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"I:\Jeux\Far Cry 2\bin\FC2Launcher.exe"="I:\Jeux\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"I:\Jeux\Far Cry 2\bin\FC2Editor.exe"="I:\Jeux\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editeur"
"E:\WINDOWS\system32\PnkBstrA.exe"="E:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"E:\WINDOWS\system32\PnkBstrB.exe"="E:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Program Files\Windows Live\Messenger\wlcsdk.exe"="E:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"E:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe"="E:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"I:\Jeux\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="I:\Jeux\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"I:\Jeux\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="I:\Jeux\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"E:\WINDOWS\system32\fjxuju.exe"="E:\WINDOWS\system32\fjxuju.exe:*:Enabled:Ultimate Tool"
"E:\WINDOWS\system32\kokqpsr.exe"="E:\WINDOWS\system32\kokqpsr.exe:*:Enabled:Ultimate Tool"
"E:\WINDOWS\system32	fliwxb.exe"="E:\WINDOWS\system32	fliwxb.exe:*:Enabled:Ultimate Tool"
"E:\WINDOWS\system32\aribxx.exe"="E:\WINDOWS\system32\aribxx.exe:*:Enabled:Ultimate Tool"
"E:\Program Files\Java\jre6\bin\jusched.exe"="E:\Program Files\Java\jre6\bin\jusched.exe:*:Enabled:ENABLE"
"E:\WINDOWS\system32\anpvvm.exe"="E:\WINDOWS\system32\anpvvm.exe:*:Enabled:Ultimate Tool"
"E:\WINDOWS\system32\cdnpz.exe"="E:\WINDOWS\system32\cdnpz.exe:*:Enabled:Ultimate Tool"
"E:\WINDOWS\system32\userinit.exe"="E:\WINDOWS\system32\userinit.exe:*:Enabled:ENABLE"
"E:\WINDOWS\system32\wscntfy.exe"="E:\WINDOWS\system32\wscntfy.exe:*:Enabled:ENABLE"
"E:\Documents and Settings\All Users\Application Data\SeekService\seekservice111.exe"="E:\Documents and Settings\All Users\Application Data\SeekService\seekservice111.exe:*:Enabled:ENABLE"
"E:\WINDOWS\Explorer.EXE"="E:\WINDOWS\Explorer.EXE:*:Enabled:ENABLE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Program Files\Windows Live\Messenger\wlcsdk.exe"="E:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 2 months======

2009-06-07 19:12:40 ----D---- E:sit
2009-06-04 21:08:21 ----D---- E:\Program Files\Real Desktop
2009-06-04 21:05:45 ----D---- E:\Program Files\Creative
2009-06-04 21:05:45 ----A---- E:\WINDOWS\system32\eax.dll
2009-06-04 20:58:39 ----RA---- E:\WINDOWS\system32\MafiaSetup.exe
2009-06-04 20:24:44 ----A---- E:\WINDOWS\svchost.exe
2009-06-04 20:09:33 ----D---- E:\Documents and Settings\Abaddon\Application Data\Real Desktop
2009-06-04 20:09:24 ----D---- E:\Program Files\SeekService
2009-06-04 20:09:24 ----D---- E:\Documents and Settings\All Users\Application Data\SeekService
2009-06-02 14:21:39 ----A---- E:\WINDOWS\system32\pdjetoyy.exe
2009-06-01 18:32:06 ----A---- E:\WINDOWS\system32\cdnpz.exe
2009-06-01 17:39:48 ----D---- E:\Downloads
2009-06-01 17:39:44 ----D---- E:\Documents and Settings\Abaddon\Application Data\Orbit
2009-06-01 08:29:47 ----A---- E:\WINDOWS\system32\anpvvm.exe
2009-05-31 19:45:55 ----A---- E:\WINDOWS\system32\aribxx.exe
2009-05-31 18:44:23 ----A---- E:\WINDOWS\system32	fliwxb.exe
2009-05-31 18:42:31 ----A---- E:\WINDOWS\system32\kokqpsr.exe
2009-05-31 15:42:45 ----A---- E:\WINDOWS\system32\fjxuju.exe
2009-05-22 21:09:52 ----D---- E:\Documents and Settings\Abaddon\Application Data\Apple Computer
2009-05-20 18:50:22 ----A---- E:\WINDOWS\system32\WINGDE.DLL
2009-05-20 18:50:22 ----A---- E:\WINDOWS\system32\WING32.DLL
2009-05-20 18:50:22 ----A---- E:\WINDOWS\system32\WING.DLL
2009-05-20 18:50:22 ----A---- E:\WINDOWS\system32\BWCC32.DLL
2009-05-20 18:46:20 ----A---- E:\WINDOWS\uninst.exe
2009-05-20 12:14:35 ----D---- E:\Documents and Settings\Abaddon\Application Data\Media Player Classic
2009-05-20 12:13:51 ----A---- E:\WINDOWS\system32moc3260.dll
2009-05-20 12:13:51 ----A---- E:\WINDOWS\system32\pndx5032.dll
2009-05-20 12:13:51 ----A---- E:\WINDOWS\system32\pndx5016.dll
2009-05-20 12:13:51 ----A---- E:\WINDOWS\system32\pncrt.dll
2009-05-20 12:13:50 ----D---- E:\Program Files\Real Alternative
2009-05-20 12:13:50 ----D---- E:\Documents and Settings\All Users\Application Data\Real
2009-05-16 22:24:55 ----D---- E:\Program Files\Adobe Media Player
2009-05-16 22:24:50 ----D---- E:\Program Files\Fichiers communs\Adobe AIR
2009-05-16 15:43:22 ----D---- E:\Program Files\X3 ModManager
2009-05-16 14:47:38 ----D---- E:\Program Files\X3 Editor TC
2009-05-15 17:32:40 ----D---- E:\Documents and Settings\Abaddon\Application Data\NewSoft
2009-05-12 14:28:25 ----D---- E:\Documents and Settings\Abaddon\Application Data\Red Alert 3
2009-05-11 19:37:32 ----D---- E:\Program Files\FileZilla FTP Client
2009-05-08 09:14:53 ----D---- E:\Program Files\505games
2009-05-06 17:03:56 ----D---- E:\Program Files\Guitar Pro 5
2009-04-29 23:24:19 ----HDC---- E:\WINDOWS\$NtUninstallKB961503$
2009-04-23 18:06:11 ----D---- E:\Program Files\QuickTime
2009-04-23 18:06:10 ----D---- E:\Documents and Settings\All Users\Application Data\Apple Computer
2009-04-17 17:05:29 ----D---- E:\Documents and Settings\Abaddon\Application Data\Mount&Blade
2009-04-17 03:03:16 ----HDC---- E:\WINDOWS\$NtUninstallKB959426$
2009-04-17 03:03:11 ----HDC---- E:\WINDOWS\$NtUninstallKB961373$
2009-04-17 03:01:10 ----HDC---- E:\WINDOWS\$NtUninstallKB956572$
2009-04-17 03:01:02 ----HDC---- E:\WINDOWS\$NtUninstallKB952004$
2009-04-17 03:00:57 ----HDC---- E:\WINDOWS\$NtUninstallKB960803$
2009-04-17 03:00:49 ----HDC---- E:\WINDOWS\$NtUninstallKB963027$
2009-04-17 03:00:40 ----HDC---- E:\WINDOWS\$NtUninstallKB923561$
2009-04-08 13:58:41 ----D---- E:\Program Files\Peer2Me

======List of files/folders modified in the last 2 months======

2009-06-07 19:12:22 ----D---- E:\WINDOWS\system32\CatRoot2
2009-06-07 19:11:57 ----D---- E:\Documents and Settings\Abaddon\Application Data\DNA
2009-06-07 19:11:13 ----D---- E:\WINDOWS	emp
2009-06-07 18:49:46 ----D---- E:\Program Files\Mozilla Firefox
2009-06-07 18:22:14 ----D---- E:\WINDOWS\system32\drivers
2009-06-07 17:11:54 ----D---- E:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-06-07 17:11:52 ----D---- E:\WINDOWS\system32
2009-06-07 17:11:45 ----D---- E:\Program Files\DNA
2009-06-07 17:11:43 ----D---- E:\WINDOWS\system32\ias
2009-06-07 15:24:14 ----A---- E:\WINDOWS\SchedLgU.Txt
2009-06-06 20:48:42 ----D---- E:\WINDOWS\Prefetch
2009-06-06 16:14:53 ----D---- E:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-04 22:18:29 ----D---- E:\Documents and Settings\Abaddon\Application Data\BitTorrent
2009-06-04 21:08:21 ----RD---- E:\Program Files
2009-06-04 21:05:51 ----D---- E:\WINDOWS
2009-06-01 16:34:10 ----D---- E:\Documents and Settings\Abaddon\Application Data\StarOffice8
2009-05-28 18:32:06 ----D---- E:\WINDOWS\system32\DirectX
2009-05-28 18:32:03 ----RSD---- E:\WINDOWS\assembly
2009-05-20 12:13:32 ----D---- E:\Program Files\Fichiers communs\Real
2009-05-20 12:13:30 ----D---- E:\Program Files\Fichiers communs
2009-05-20 12:13:26 ----D---- E:\Documents and Settings\Abaddon\Application Data\Real
2009-05-18 19:39:22 ----D---- E:\Documents and Settings\Abaddon\Application Data\FileZilla
2009-05-17 18:56:42 ----HD---- E:\Program Files\InstallShield Installation Information
2009-05-17 16:23:38 ----SHD---- E:\Config.Msi
2009-05-17 14:35:54 ----D---- E:\Program Files\RocketDock
2009-05-17 08:35:43 ----SHD---- E:\WINDOWS\Installer
2009-05-17 08:35:27 ----D---- E:\Program Files\Fichiers communs\Adobe
2009-05-17 08:35:22 ----D---- E:\Documents and Settings\All Users\Application Data\Adobe
2009-05-17 08:35:13 ----D---- E:\Program Files\Adobe
2009-05-16 22:25:01 ----D---- E:\Documents and Settings\Abaddon\Application Data\Adobe
2009-05-16 15:46:04 ----D---- E:\WINDOWS\system
2009-05-12 14:16:15 ----HD---- E:\WINDOWS\inf
2009-05-11 11:24:06 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI
2009-05-07 09:16:29 ----A---- E:\WINDOWS\system32\MRT.exe
2009-05-06 17:03:58 ----RSD---- E:\WINDOWS\Fonts
2009-05-05 18:07:39 ----SD---- E:\WINDOWS\Tasks
2009-04-29 23:24:20 ----RSHDC---- E:\WINDOWS\system32\dllcache
2009-04-29 20:53:39 ----HD---- E:\WINDOWS\$hf_mig$
2009-04-26 10:02:48 ----A---- E:\WINDOWS\WORDPAD.INI
2009-04-18 16:52:00 ----SD---- E:\Documents and Settings\Abaddon\Application Data\Microsoft
2009-04-17 03:09:56 ----D---- E:\WINDOWS\system32\wbem
2009-04-17 03:09:56 ----D---- E:\WINDOWS\AppPatch
2009-04-17 03:03:19 ----A---- E:\WINDOWS\imsins.BAK
2009-04-08 20:17:44 ----D---- E:\Program Files\Real Environment Xtreme
2009-04-08 15:25:09 ----D---- E:\WINDOWS
etwork diagnostic
2009-04-08 14:03:26 ----D---- E:\WINDOWS\security

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; E:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 SCDEmu;SCDEmu; E:\WINDOWS\system32\drivers\SCDEmu.sys [2008-07-07 56108]
R2 atksgt;atksgt; E:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-03-10 279712]
R2 lirsgt;lirsgt; E:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-03-10 25888]
R3 ati2mtag;ati2mtag; E:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-21 3299840]
R3 ET5Drv;ET5Drv; \??\E:\WINDOWS\System32\Drivers\ET5Drv.sys []
R3 GEARAspiWDM;GEARAspiWDM; E:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 GVTDrv;GVTDrv; \??\E:\WINDOWS\system32\Drivers\GVTDrv.sys []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; E:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; E:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); E:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-07-18 4547584]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; E:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-02-05 26640]
R3 MarkFun_NT;MarkFun_NT; \??\E:\Program Files\Gigabyte\ET5Pro\markfun.w32 []
R3 mouhid;Pilote HID de souris; E:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; E:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; E:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbscan;Pilote de scanneur USB; E:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; E:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 atidgllk;atidgllk; \??\E:\Program Files\Gigabyte\ET5Pro\atidgllk.sys []
S1 kbdhid;Pilote HID de clavier; E:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 acpi32;acpi32; \??\E:\WINDOWS\system32\drivers\acpi32.sys []
S2 amd64si;amd64si; \??\E:\WINDOWS\system32\drivers\amd64si.sys []
S2 ati64si;ati64si; \??\E:\WINDOWS\system32\drivers\ati64si.sys []
S2 fips32cup;fips32cup; \??\E:\WINDOWS\system32\drivers\fips32cup.sys []
S2 i386si;i386si; \??\E:\WINDOWS\system32\drivers\i386si.sys []
S2 ksi32sk;ksi32sk; \??\E:\WINDOWS\system32\drivers\ksi32sk.sys []
S2 nicsk32;nicsk32; \??\E:\WINDOWS\system32\drivers
icsk32.sys []
S2 port135sik;port135sik; \??\E:\WINDOWS\system32\drivers\port135sik.sys []
S2 securentm;securentm; \??\E:\WINDOWS\system32\drivers\securentm.sys []
S2 systemntmi;systemntmi; \??\E:\WINDOWS\system32\drivers\systemntmi.sys []
S2 ws2_32sik;ws2_32sik; \??\E:\WINDOWS\system32\drivers\ws2_32sik.sys []
S2 X4HSX32;X4HSX32; \??\E:\Program Files\GameTap\bin\Release\X4HSX32.Sys []
S3 a0mak9oz;a0mak9oz; E:\WINDOWS\system32\drivers\a0mak9oz.sys []
S3 ay71ij8q;ay71ij8q; E:\WINDOWS\system32\drivers\ay71ij8q.sys []
S3 catchme;catchme; \??\E:\DOCUME~1\Abaddon\LOCALS~1\Temp\catchme.sys []
S3 cusbohcn;cusbohcn; \??\E:\DOCUME~1\Abaddon\LOCALS~1\Temp\cusbohcn.sys []
S3 driverhardwarev2;driverhardwarev2; \??\E:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 ENTECH;ENTECH; \??\E:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 gdrv;gdrv; \??\E:\WINDOWS\gdrv.sys []
S3 gmer;gmer; E:\WINDOWS\System32\DRIVERS\gmer.sys [2009-02-01 85969]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; E:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
S3 usbccgp;Pilote parent générique USB Microsoft; E:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 USBSTOR;Pilote de stockage de masse USB; E:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; E:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; E:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; E:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\system32\Ati2evxx.exe [2008-08-21 573440]
R2 AVP;avp; E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2008-02-21 193800]
R2 Bonjour Service;Service Bonjour; E:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2009-01-19 152984]
R2 PnkBstrA;PnkBstrA; E:\WINDOWS\system32\PnkBstrA.exe [2008-01-10 66872]
R2 PnkBstrB;PnkBstrB; E:\WINDOWS\system32\PnkBstrB.exe [2009-03-06 107832]
R2 SeekService Service;SeekService Service; E:\Documents and Settings\All Users\Application Data\SeekService\seekservice111.exe [2009-05-01 54784]
R2 StarWindServiceAE;StarWind AE Service; E:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; E:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; E:\WINDOWS\system32\ati2sgag.exe [2008-08-20 593920]
S2 gusvc;Google Software Updater; E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; E:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-23 654848]
S3 IDriverT;InstallDriver Table Manager; E:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 Imapi Helper;Imapi Helper; E:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe []
S3 iPod Service;Service de l'iPod; E:\Program Files\iPod\bin\iPodService.exe []
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; E:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------

Appolyon13 · Answer

info.txt logfile of random's system information tool 1.06 2009-06-07 19:12:51

======Uninstall list======

-->E:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->E:\WINDOWS\IsUninst.exe -fE:\WINDOWS\system32\UninstIPP.isu
-->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{329899E1-CBBA-49BC-9FFE-199E94316727}\setup.exe" -l0x40c  -removeonly
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 E:\WINDOWS\INF\PCHealth.inf
7-Zip 4.65-->"E:\Program Files\7-Zip\Uninstall.exe"
Adobe AIR-->E:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->E:\Program Files\Fichiers communs\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->E:\Program Files\Fichiers communs\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Player 10 Plugin-->E:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->E:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe Media Player-->MsiExec.exe /X{95264530-5A22-8E7E-FE9D-D63A927BCAEA}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->E:\Program Files\Fichiers communs\Adobe\Installers\719d6f144d0c086a0dfa7ff76bb9ac1\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{3D7E3EC9-46CF-4359-9289-39CE01DFB82F}
Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}
Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Setup-->MsiExec.exe /I{FF11004C-F42A-4A31-9BCF-7F5C8FDBE53C}
Adobe Shockwave Player-->E:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE E:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Ad-remover-->E:\Program Files\Ad-remover\Uninstal.exe
aerosoft's - Mega Airport Paris CDG X-->E:\Program Files\InstallShield Installation Information\{0F5E7FC8-3D49-47DA-9A51-6A8B4BE393B0}\setup.exe -runfromtemp -l0x0009 -removeonly
aerosoft's - Mission Lear 1 - FSX-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{518C3F99-77AE-4EC2-9A07-940745D6D4E4}\Setup.exe"  -uninst 
AGEIA PhysX v7.09.13-->MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
AI Carriers-->"E:\Program Files\AICarriers\uninstall.exe"
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Arcanum-->MsiExec.exe /I{08E9C35A-A0AE-43FA-AEA1-E4F58A87FBD1}
Archiveur WinRAR-->E:\Program Files\WinRAR\uninstall.exe
ArcSoft PhotoStudio 5.5-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\SETUP.EXE" -l0x40c 
Assassin's Creed-->E:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Software Uninstall Utility-->E:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x444e 
ATI Display Driver-->rundll32 E:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Audacity 1.2.6-->"E:\Program Files\Audacity\unins000.exe"
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
Band-in-a-Box Demo-->"E:\Program Files\unins001.exe"
BitTorrent 3.2.1-->"E:\Program Files\BitTorrent\uninstall.exe"
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
Burnout(TM) Paradise The Ultimate Box-->MsiExec.exe /X{9A996B6A-846E-4A89-B9C4-17546B7BE49F}
Call of Duty(R) - World at War(TM) 1.1 Patch-->E:\Program Files\InstallShield Installation Information\{AFAE2B15-89A0-4215-A030-F7B5B478886B}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) - World at War(TM)-->E:\Program Files\InstallShield Installation Information\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\setup.exe -runfromtemp -l0x0409
Canon CanoScan Toolbox 5.0-->"E:\Program Files\Canon\CanoScan Toolbox Ver5.0\Maint.exe" /UninstallRemove E:\Program Files\Canon\CanoScan Toolbox Ver5.0\uninst.ini
CanoScan 4400F-->"E:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4803\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4803 /L0x000c
CCleaner (remove only)-->"E:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Command & Conquer™ Red Alert™ 3-->MsiExec.exe /X{296D8550-CB06-48E4-9A8B-E5034FB64715}
Company of Heroes-->MsiExec.exe /X{BA801B94-C28D-46EE-B806-E1E021A3D519}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"E:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"E:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB873339-->E:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->E:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->E:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->E:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->E:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->E:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"E:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->E:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Counter-Strike: Source-->MsiExec.exe /I{9580813D-94B1-4C28-9426-A441E2BB29A5}
CR-Hexact 2.3-->E:\Program Files\CR-TEKnologies\Hexact\desinstaller.exe
Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
Deadlock-->E:\WINDOWS\uninst.exe -fi:\jeux\Deadlock\DeIsL1.isu
DEVIL MAY CRY 4 TRIAL-->MsiExec.exe /I{31DC149F-471C-40C1-8F77-78C7C1D73CFB}
DH Driver Cleaner Professional Edition-->E:\Program Files\Driver Cleaner Pro\Uninstall.exe
DivX Codec-->E:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->E:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->E:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->E:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Download Direct-->MsiExec.exe /I{DB6A8C83-EFF7-4955-BBD0-81C13DDE5395}
EasyTune5Pro-->E:\WINDOWS\ISUNINST.EXE -f"E:\Program Files\Gigabyte\ET5Pro\Uninst.isu" -c"E:\Program Files\Gigabyte\ET5Pro\uninstdrv.dll"
EAX Unified-->E:\WINDOWS\IsUninst.exe -f"E:\Program Files\Creative\EAX Unified\Uninst.isu"
Editeur Handling GTA-SA v2.0-->I:\Jeux\GTA San Andreas\Handling\Uninstal.exe
EVEREST Home Edition v2.20-->"E:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Fallout 2-->E:\WINDOWS\ipuninst.exe -fE:\Program Files\BlackIsle\Fallout2\uninst.log
Far Cry 2-->"E:\Program Files\InstallShield Installation Information\{F2835483-37F2-4123-B4FE-0E77D58447F2}\setup.exe" -runfromtemp -l0x040c -removeonly
Far Cry-->E:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC} /l1036 
FlatOut2-->MsiExec.exe /I{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}
FlightAlpes BasePack Nord-->I:\Jeux\Flight Simulator X\uninstal_fanbp.exe
FlightCorse AutogenPack-->I:\Jeux\uninstal_fcap.exe
FlightMediterranee BasePack-->I:\Jeux\Flight Simulator X\uninstal_fmbp.exe
Float32 1.5267a-->MsiExec.exe /I{0D0CA9AA-C62A-448B-8A95-3101DC940E12}
FO2 Expansion Pack 1.2-->"E:\Program Files\BlackIsle\Fallout2\unins000.exe"
Fraps-->"E:\Fraps\uninstall.exe"
Free Mp3 Wma Converter V 1.8.0-->"E:\Program Files\Free Audio Pack\unins000.exe"
Freezer+ 1.1-->"E:\Program Files\Freezer+\unins000.exe"
Futuremark SystemInfo-->"E:\Program Files\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly
GameTap-->E:\Program Files\InstallShield Installation Information\{67E158AF-8856-4337-B483-EA21930786AF}\setup.exe -runfromtemp -l0x0009 -removeonly
Gif Récupérateur 1.1-->"E:\Program Files\GIF Recuperateur\unins000.exe"
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Internet Explorer-->"E:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
Grand Canyon & KGCN V2-->I:\Jeux\Flight Simulator X\Uninstall_Grand_Canyon_KGCN.exe
Grand Theft Auto IV-->"E:\Program Files\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x040c -removeonly
Graphical Enhancement Resources 2.5-->I:\Jeux\Mount&Blade\uninstall_commonres_pack.exe
Graphical Enhancement Textures 2.5-->I:\Jeux\Mount&Blade\uninstall_texture_pack.exe
GRID Demo-->"E:\Program Files\InstallShield Installation Information\{3C850287-4CD5-4FAD-BE39-A4AF7851A7C6}\setup.exe" -runfromtemp -l0x040c -removeonly
GRID-->"C:\Program Files\InstallShield Installation Information\{5A0B7BA5-4682-4273-81C2-69B17E649103}\setup.exe" -runfromtemp -l0x0009 -removeonly
GTA San Andreas-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x40c  -removeonly
Guitar Pro 5.2-->"E:\Program Files\Guitar Pro 5\unins000.exe"
Heroes of Might and Magic V Collector Edition-->RunDll32 E:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "E:\Program Files\InstallShield Installation Information\{DDB68A90-340C-42B9-B42B-D2CBED1B91DC}\setup.exe" -l0x40c 
High Definition Audio Driver Package - KB888111-->"E:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Téléchargements\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"E:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
IL-2 Sturmovik 1946-->E:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{79438F1E-DEC3-443D-9DCD-FECE2D68C605} /l1036 
Impact-->E:\WINDOWS\st6unst.exe -n "c:\Impact\ST6UNST.LOG"  
Inspiration 7 Trial-->E:\WINDOWS\unvise32.exe E:\Program Files\Inspiration 7 Trial\uninstal.log
Installation Windows Live-->E:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
ISO Recorder-->MsiExec.exe /I{DFC6573E-124D-4026-BFA4-B433C9D3FF21}
IsoBuster 2.4-->"E:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Kaspersky Anti-Virus 2009 Beta-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
Kaspersky Anti-Virus 2009 Beta-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
La Martinique-->I:\Jeux\Flight Simulator X\uninstal_martinique.exe
Lecteur Windows Media 11-->"E:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com plugin-->MsiExec.exe /I{6F06A42D-525C-49ED-8622-E16790956CD8}
Mafia Game-->E:\WINDOWS\system32\MafiaSetup.exe
Malwarebytes' Anti-Malware-->"E:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Medieval II Total War : Kingdoms : Americas-->E:\Program Files\InstallShield Installation Information\{75983B66-804C-40D1-BA13-64DAF652A6F1}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Britannia-->E:\Program Files\InstallShield Installation Information\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Crusades-->E:\Program Files\InstallShield Installation Information\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Teutonic-->E:\Program Files\InstallShield Installation Information\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War-->E:\Program Files\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe -runfromtemp -l0x0009 -removeonly
Men of War (Retirer seulement)-->"E:\Program Files\505games\1C\Men of War\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"E:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "E:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"E:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Flight Simulator X Service Pack 1-->E:\WINDOWS\system32\msiexec.exe /qb /l*vx "%TEMP%\FlightSimPatchUninstall.log" /uninstall {EDE72ED9-E7FA-45A0-A92D-E4E6D72ECC10} /package {F535B2CF-C9BB-4162-B03A-02D6971F32CC}
Microsoft Flight Simulator X: Acceleration-->E:\WINDOWS\system32\msiexec.exe /qb /l*vx "%TEMP%\FlightSimUninstall.log" /uninstall {3A1EE107-F79B-49FA-83CF-94169E63F25A}
Microsoft Flight Simulator X: Acceleration-->MsiExec.exe /I{3A1EE107-F79B-49FA-83CF-94169E63F25A}
Microsoft Flight Simulator X-->E:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{F535B2CF-C9BB-4162-B03A-02D6971F32CC} 
Microsoft Flight Simulator X-->MsiExec.exe /X{F535B2CF-C9BB-4162-B03A-02D6971F32CC}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
Microsoft Text-to-Speech Engine 4.0 (English)-->RunDll32 advpack.dll,LaunchINFSection E:\WINDOWS\INF\msTTSa22.inf, Uninstall
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"E:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual J# .NET Redistributable Package 1.1-->MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"E:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"E:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"E:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"E:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"E:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"E:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"E:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"E:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"E:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"E:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"E:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"E:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"E:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"E:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"E:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"E:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"E:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"E:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"E:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"E:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"E:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"E:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"E:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"E:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"E:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"E:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"E:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"E:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"E:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"E:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"E:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"E:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"E:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"E:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"E:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Record Number: 4
Source Name: SecurityCenter
Time Written: 20090504164837.000000+120
Event Type: Informations
User: 

Computer Name: TARTAROS
Event Code: 1
Message: 
Record Number: 3
Source Name: Bonjour Service
Time Written: 20090504164833.000000+120
Event Type: Informations
User: 

Computer Name: TARTAROS
Event Code: 0
Message: 
Record Number: 2
Source Name: gusvc
Time Written: 20090504164833.000000+120
Event Type: Informations
User: 

Computer Name: TARTAROS
Event Code: 105
Message: The service was started.

Record Number: 1
Source Name: ATI Smart
Time Written: 20090504164831.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;E:\Program Files\ATI Technologies\ATI.ACE\Core-Static;E:\Program Files\Smart Projects\IsoBuster;E:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"RGSCLauncher"=I:\Jeux\GTA IV\Rockstar Games Social Club
"RGSC"=I:\Jeux\GTA IV\Rockstar Games Social Club\1_0_0_0
"CLASSPATH"=.;E:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=E:\Program Files\Java\jre6\lib\ext\QTJava.zip

Appolyon13 · Answer

Excuse moi mais je n'arrive pas à les poster en entier. Si tu le souhaites, je peux te les envoyer d'une autre manière, par mail ou sur megaupload par exemple. Désolé, mais ma connection est foireuse.

Appolyon13 · Answer

Non, désolé, j'ai un reste de Kaspersky de l'époque qui ne marche plus, faute de licence. Je m'étais fait arnaqué par eux à l'époque. D'ailleurs, si tu connais un moyen de le supprimer ...

Appolyon13 · Answer

Voilà, désolé pour le retard, ci-joint le rapport d'antivir :

http://www.cijoint.fr/cjlink.php?file=cj200906/cijumIyQfm.txt

Appolyon13 · Answer

Bonjour,
Voilà. 
http://www.cijoint.fr/index.php

Au passage, les svchost ont disparu, donc ça a été efficace la dessus.
Merci beaucoup.

Appolyon13 · Answer

Oups désolé je me suis trompé de lien =>boulet<=^^
http://www.cijoint.fr/cjlink.php?file=cj200906/cijeIumiue.txt

Appolyon13 · Answer

Re,

Kaspersky est impossible a désinstaller, que ce soit avec l'assistant de suppresion ou "à la bourrin" en supprimant le dossier, même en mode sans échec il refuse de se laisser supprimer.
Je n'ai pas désinstallé antivir, au contraire il tourne en ce moment même.
Et je n'ai pas de clef usb, vu que je grave mes données en général :D mais merci d'y avoir pensé.

Appolyon13 · Answer

Merci pour ton lien, malheureusement ils ne proposent aucun moyen de désinstaller kasperky 2009. Mais ne t'inquiètes pas, je vais finir par trouver en cherchant un peu sur internet :D

Le rapport :

############################## [ UsbFix V3.029 | Scan ]

# User : Abaddon (Administrateurs) # TARTAROS
# Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:23:54 | 08/06/2009

# Intel(R) Pentium(R) Dual  CPU  E2140  @ 1.60GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : Kaspersky Anti-Virus 8.0.0.256 [ (!) Disabled | (!) Outdated ]

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 34,18 Go (25,07 Go free) [Limbes] # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 93,81 Go (12,57 Go free) [Tartare] # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque CD-ROM
# H:\ # Disque CD-ROM
# I:\ # Disque fixe local # 104,89 Go (18,19 Go free) [Elysée] # NTFS

############################## [ Processus actifs ]

E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\csrss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Avira\AntiVir Desktop\sched.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Avira\AntiVir Desktop\avguard.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\Documents and Settings\All Users\Application Data\SeekService\seekservice111.exe
E:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\wbem\wmiapsrv.exe
E:\WINDOWS\System32\alg.exe
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\SeekService\seekservice.exe
E:\Program Files\Java\jre6\bin\jusched.exe
E:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe
E:\Program Files\Gigabyte\ET5Pro\GUI.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
E:\Program Files\RocketDock\RocketDock.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\DNA\btdna.exe
E:\Program Files\Windows Live\Messenger\msnmsgr.exe
E:\Program Files\Download Direct\DLD.exe
E:\Program Files\DAEMON Tools Lite\daemon.exe
E:\Program Files\Peer2Me\Peer2Me.exe
E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
E:\Program Files\Real Desktop\Real Desktop.exe
E:\Program Files\Windows Live\Contacts\wlcomm.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\system32\wbem\wmiprvse.exe

################## [  Registre Startup ]

HKCU_Main:   "Local Page"="E:\WINDOWS\system32\blank.htm" 
HKCU_Main:   "Search Page"="https://www.google.com/?gws_rd=ssl" 
HKCU_Main:   "Start Page"="http://search.orbitdownloader.com" 
HKLM_logon:  "Userinit"="E:\WINDOWS\system32\userinit.exe," 
HKLM_logon:  "DefaultUserName"="Abaddon" 
HKLM_logon:  "AltDefaultUserName"="Abaddon" 
HKLM_logon:  "LegalNoticeCaption"="" 
HKLM_logon:  "LegalNoticeText"="" 
HKLM_Run:    EasyTuneVPro=E:\Program Files\Gigabyte\ET5Pro\ETcall.exe 
HKLM_Run:    SunJavaUpdateSched="E:\Program Files\Java\jre6\bin\jusched.exe" 
HKLM_Run:    OpwareSE4="E:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" 
HKLM_Run:    WrtMon.exe=E:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe 
HKLM_Run:    QuickTime Task="E:\Program Files\QuickTime\QTTask.exe" -atboottime 
HKLM_Run:    Adobe Reader Speed Launcher="E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
HKLM_Run:    avgnt="E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min 
HKLM_Run:    AVP="E:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" 
HKLM_Run:    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\Disabled= 
HKLM_Run:    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents= 
HKCU_Run:    RocketDock="E:\Program Files\RocketDock\RocketDock.exe"  
HKCU_Run:    MSMSGS="E:\Program Files\Messenger\msmsgs.exe" /background  
HKCU_Run:    BitTorrent DNA="E:\Program Files\DNA\btdna.exe"  
HKCU_Run:    msnmsgr="E:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background  
HKCU_Run:    DLD.EXE=E:\Program Files\Download Direct\DLD.exe  
HKCU_Run:    DAEMON Tools Lite="E:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun  
HKCU_Run:    Peer2Me="E:\Program Files\Peer2Me\Peer2Me.exe"  
HKCU_Run:    swg=E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
HKCU_Run:    Abaddon=E:\Documents and Settings\Abaddon\Abaddon.exe /i  
HKCU_Run:    Real Desktop="E:\Program Files\Real Desktop\Real Desktop.exe"  
HKCU_Run:    HKEY_CURRENT_USER\software\microsoft\windows\currentversionun\AdobeUpdater=  

################## [ Fichiers # Dossiers infectieux ]

Found ! E:\WINDOWS\svchost.exe  
Found ! "C:estore\S-1-5-21-1482476501-1644491937-682003330-1013"  
Found ! C:estore\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini  

################## [ Registre # Clés Run infectieuses ]


################## [ Registre # Mountpoints2 ]


################## [ ! Fin du rapport # UsbFix V3.029 ! ]

Appolyon13 · Answer

Salut,

J'entre en période de révision du bac francais :( donc j'ai plus vraiment le temps de m'occuper du pc... tu penses que y'a pas trop de risques de laisser les choses dans l'état ?
Usbfix pour son scan me demande de brancher mes périphériques de stockage mais comme je n'en ai pas, j'peux rien faire...

Merci quand même pour ton aide. Au passage, merci pour lien sur kasperky masi ça ne marche toujours pas : le désinstalleur bug et roll back à la fin de la désinstallation.

A+

Problème de multiplication svchost

12 réponses

Discussions similaires

Newsletters