connection internet trés trés lenteRésolu/Fermé

Question

Bonjour, 
Suite à l'éradication de lo.st  de ma page d'acceuil  (encore merci moment de grace), j'ai suivi ses conseils en effectuant mes mises à jour (secunia), défragmentation avec PiriformDefragler, One ClickRestorepo...,mon ordi est clean mais les connections internet trés lentes (live box Sagem) alors que ma fille connectée en wifi (avec 1 dongle) n'a aucun problème,j'ai peut etre fait une fausse manip en désinstallant l'ancienne version de Java, JavaRa me signale que je possède bien la nouvelle.
merci de ton aide
Configuration: Windows Vista / Internet Explorer 8.0

Malekal_morte- · Answer

Salut,


* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau. 
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur) 

* Lance OTL 
* Sous Peronnalisation, copie-colle ce qu'il y a dans le cadre ci-dessous : 
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE\%Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
CREATERESTOREPOINT
nslookup www.google.fr /c 
* Clique sur le bouton Analyse. 
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports. 
Donnes le liens pjjoint ici ensuite pour pouvoir être consultés.

FABIENNE · Answer

je n'ai pas réussi à télécharger OTL : message : OTL  ne peut s'executer depuis 1 dossier temporaire

FABIENNE · Answer

désolée mais ordi rame++,voici le rapport OTL Extras logfile created on: 26/02/2011 12:49:59 - Run 1 OTL by OldTimer - Version 3.2.22.0 Folder = C:\Users\fabienne\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 41,00% Memory free 6,00 Gb Paging File | 4,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 288,58 Gb Total Space | 186,77 Gb Free Space | 64,72% Space Free | Partition Type: NTFS Drive D: | 596,17 Gb Total Space | 565,27 Gb Free Space | 94,82% Space Free | Partition Type: NTFS Drive E: | 291,59 Gb Total Space | 285,81 Gb Free Space | 98,02% Space Free | Partition Type: NTFS Computer Name: PC-DE-FABIENNE | User Name: fabienne | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========/color [color=#E56717]========== File Associations ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========/color [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========/color [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu -- (Egis Incorporated.) "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption -- ( Egis Incorporated.) "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption -- ( Egis Incorporated.) "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr -- (Egis Incorporated.) "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu -- (Egis Incorporated.) "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr "C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr -- (Egis Incorporated.) [color=#E56717]========== Vista Active Open Ports Exception List ==========/color [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0D730B6D-C79E-4F53-8285-E3EEAED96DEA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{1E18E5A2-63B2-4E02-8035-B86F4F0B46FB}" = rport=10243 | protocol=6 | dir=out | app=system | "{1ED0BAAD-8E65-4C00-8942-DC44327FFB7F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{2814438B-1599-4840-8CA6-C583C336561F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3C8D82EA-BEF0-4D47-A406-4452FE82C932}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{50363ADC-FCFF-4C04-A26E-281A014092F0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{5F7D6B1C-5A2A-421C-9F06-AA0952C97B8D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{65BA3115-DE78-4D95-93AD-6FF94BD325BF}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{6C145B02-C263-4533-831C-5486E74CC02E}" = lport=2869 | protocol=6 | dir=in | app=system | "{7E767FD7-790A-4E46-B8AF-B2E953E8C0F6}" = lport=10243 | protocol=6 | dir=in | app=system | "{890D525D-1FF3-449C-8ED4-8D459D454913}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{CD0C81D6-5D46-4E7B-AC1F-0FA3126B52A6}" = lport=2869 | protocol=6 | dir=in | app=system | "{D11C27B3-431B-406A-8E98-C6D67C247CED}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========/color [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{140386EE-96E0-4FEF-A02F-6FAC37BDD3A7}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe | "{178B77A0-8F6D-469B-B319-959B8A8B56CE}" = dir=in | app=c:\program files\acer arcade live\acer slideshow dvd\acer slideshow dvd.exe | "{2E063182-FB1E-4F7B-BF2C-9849A2E46E3D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{32072619-37E8-4D3C-B341-82F827371136}" = dir=in | app=c:\program files\acer arcade live\acer homemedia\acer homemedia.exe | "{34E1AECC-C85C-48F8-90CF-9D06A7BBB378}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{38BFF5AF-2C45-4A78-A138-33101997BA94}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe | "{42E5AAAD-1F4F-431B-98E8-E3361633472A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{509D893D-DE4F-4998-B8AF-3C1E0ABF22FE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{567B7BD3-E2D5-4D4A-B50A-555C7C4FE541}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{590B5D8B-1F9E-40EE-B8B5-2ECF92914556}" = dir=in | app=c:\program files\acer arcade live\acer dvdivine\acer dvdivine.exe | "{6A18787C-34F5-43E8-BD37-A88FF14BAB64}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe | "{6AEEC8E4-82E8-4C7B-A265-0761020E8073}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe | "{7169B8C5-E59A-44C8-AA91-83387B7CFC57}" = dir=in | app=c:\program files\acer arcade live\acer homemedia trial creator\acer homemedia trial creator.exe | "{8C6E7735-C6D9-4073-A553-ED451C023BB7}" = protocol=6 | dir=out | app=system | "{8CF07EAC-F7F6-4DFB-87F9-CDD6150BC25E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{8D7BD9A6-5D34-4E9F-969F-B8D509884894}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{8DECDBF7-28D1-4E30-8EB6-278694961759}" = dir=in | app=c:\program files\acer arcade live\acer arcade live main page\acer arcade live.exe | "{902F0A33-9621-4D65-AD09-2A639CD79ED7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{94FF758E-EF8A-4DAA-8670-8A9BB3ABD040}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{9B067AC0-1480-433E-8A2C-86005486D33C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | "{A33E7840-6B13-4433-9DE1-6F8EA1AB2452}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{B02ADE77-41AF-4E5D-9C2B-6373B2887059}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{B897893E-0977-4D59-B9B9-400BFD2A7BF8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{C32CE12C-9EAD-41E7-A24C-43D1674B9129}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{C4D13D11-D8D4-4B70-A49D-E7EC1BF51418}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{D308F2D2-0113-494F-9263-F85E5BF975DF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{D9EEC797-555E-40A7-9AD5-181300450922}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DD76C2F8-89EE-4986-880C-2661D4ACB58C}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe | "{DEDBB5C9-7C94-4700-B32A-CE4BFF5B1973}" = dir=in | app=c:\program files\acer arcade live\acer homemedia connect\acer homemedia connect.exe | "{EF4F573B-DB47-4635-B3BF-FEB2070B6865}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe | "TCP Query User{3F76EB6F-C440-44B7-8CBA-BE2FD1BAAB29}C:\program files\post-net\post-net.exe" = protocol=6 | dir=in | app=c:\program files\post-net\post-net.exe | "TCP Query User{50298468-C7E1-4482-8B07-43EFF2C24D74}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "TCP Query User{D2917CB3-6BE7-4661-BE29-E85EE933B393}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "TCP Query User{D5807544-40F3-40CB-9521-245B0E5E9356}C:\post-net.exe" = protocol=6 | dir=in | app=c:\post-net.exe | "UDP Query User{8757BC38-91DA-442C-B4BB-2859DDC14DDE}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | "UDP Query User{88345874-7910-45C6-BF65-B269229B6682}C:\post-net.exe" = protocol=17 | dir=in | app=c:\post-net.exe | "UDP Query User{ED7D956E-FE18-4F2A-8B4D-8D1C6792B492}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{FF7FFE25-A72B-415D-8866-C87B1AA4622B}C:\program files\post-net\post-net.exe" = protocol=17 | dir=in | app=c:\program files\post-net\post-net.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========/color [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack "{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard "{132888AE-EF67-41C5-BCA2-7D5D2488AB63}" = Acer HomeMedia Connect "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1D10C273-3F95-42A2-8371-AB6B1F59821B}" = WOT pour Internet Explorer "{1D643CD0-4DD6-11D7-A4E0-000874180BB3}" = Microsoft Money "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare "{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 24 "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant "{2EB81825-E9EE-44F4-8F51-1240C3898DC6}" = EPSON File Manager "{2F92229B-8CE2-4482-8047-9DBF49CA5F58}" = Camera RAW Plug-In for EPSON Creativity Suite "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{41581EF5-45A7-11DA-9D78-000129760D75}" = Acer SlideShow DVD "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{5158974E-2D28-4018-9335-7694C2974746}" = Optimisation "{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI "{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger "{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3 "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}" = Microsoft Works "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver "{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C64E149-54BA-11D6-91B1-00500462BE80}" = Extension Système de Microsoft Money "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2007 "{90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{95140000-00AF-040C-0000-0000000FF1CE}" = Visionneuse Microsoft PowerPoint "{956673F5-0C6B-4428-A5D1-277AF533E098}" = EPSON PRINT Image Framer Tool "{9C538746-C2DC-40FC-B1FB-D4EA7966ABEB}" = Skype(TM) 5.1 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = Acer HomeMedia "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC76BA86-7AD7-1036-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Français "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter "{B145EC69-66F5-11D8-9D75-000129760D75}" = Acer DVDivine "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0 "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B580C409-E16F-44FF-904D-3AE94E113BE0}" = Acer HomeMedia Trial Creator "{B8890B12-4E4C-4E53-9ECB-96193BBA7767}" = EPSON Easy Photo Print "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1 "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}" = Acer Arcade Live Main Page "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5 "{F429ED71-4A8B-457A-85E4-F6398CE73E58}" = AV Input Selection "{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety "{FCFBA290-CB48-4AF1-A241-2685AEDEDD66}" = Windows Live Family Safety "{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner "{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}" = EPSON Print CD "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "adbackup5" = Sauvegarde "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Defraggler" = Defraggler "EPSON Printer and Utilities" = EPSON Logiciel imprimante "EPSON Scanner" = EPSON Scan "ESPRX560_590 Guide d'utilisation" = ESPRX560_590 Guide d'utilisation "F-Secure Product 440" = Sécurité "Google Chrome" = Google Chrome "Google Desktop" = Google Desktop "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5 "InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email "InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8 "MailNotifier" = Notification Mail "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA "NVIDIA Drivers" = NVIDIA Drivers "Picasa 3" = Picasa 3 "Secunia PSI" = Secunia PSI (2.0.0.3001) "TomTom HOME" = TomTom HOME 2.7.5.2014 "VLC media player" = VLC media player 1.1.7 "WinLiveSuite" = Windows Live "WinRAR archiver" = Archiveur WinRAR "Yahoo! Companion" = Yahoo! Toolbar [color=#E56717]========== Last 10 Event Log Errors ==========/color [ Application Events ] Error - 15/02/2011 13:57:09 | Computer Name = PC-de-fabienne | Source = LoadPerf | ID = 3009 Description = Error - 18/02/2011 06:38:43 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = Error - 18/02/2011 06:42:45 | Computer Name = PC-de-fabienne | Source = VSS | ID = 8194 Description = Error - 18/02/2011 06:47:35 | Computer Name = PC-de-fabienne | Source = FSecure-FSecure-F-Secure Anti-Virus | ID = 103 Description = 1 2011-02-18 11:47:34+02:00 PC-DE-FABIENNE PC-de-fabienne\fabienne F-Secure Anti-Virus Crash detected. Error - 18/02/2011 09:32:44 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = Error - 18/02/2011 09:45:03 | Computer Name = PC-de-fabienne | Source = Application Hang | ID = 1002 Description = Le programme iexplore.exe version 8.0.6001.19019 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : 1740 Heure de début : 01cbcf708261ee15 Heure de fin : 11 Error - 18/02/2011 09:50:22 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = Error - 18/02/2011 09:56:16 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = Error - 18/02/2011 10:00:53 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = Error - 18/02/2011 10:14:35 | Computer Name = PC-de-fabienne | Source = WinMgmt | ID = 10 Description = [ OSession Events ] Error - 09/08/2009 09:28:47 | Computer Name = PC-de-fabienne | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6504.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 27 seconds with 0 seconds of active time. This session ended with a crash. Error - 30/05/2010 13:10:51 | Computer Name = PC-de-fabienne | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 18/02/2011 10:41:53 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7031 Description = Error - 18/02/2011 10:41:53 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7031 Description = Error - 18/02/2011 10:44:33 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7026 Description = Error - 18/02/2011 13:50:54 | Computer Name = PC-de-fabienne | Source = DCOM | ID = 10005 Description = Error - 18/02/2011 13:50:54 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7009 Description = Error - 18/02/2011 13:50:54 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7000 Description = Error - 21/02/2011 11:56:49 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7026 Description = Error - 22/02/2011 05:05:15 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7026 Description = Error - 22/02/2011 05:15:04 | Computer Name = PC-de-fabienne | Source = Print | ID = 6161 Description = Impossible d'imprimer le document Photo pleine page appartenant à fabienne sur l'imprimante EPSON Stylus Photo RX560 Series. Essayez de réimprimer le document ou redémarrez le spouleur d'impression. Type de données : NT EMF 1.008. Taille du fichier spouleur en octets : 683257212. Nombre d'octets imprimés : 679607700. Nombre de pages dans le document : 20. Nombre de pages imprimées : 19. Ordinateur client : \PC-DE-FABIENNE. Code d'erreur Win32 retourné par le processeur d'impression : 122. La zone de données passée à un appel système est insuffisante. Error - 25/02/2011 04:37:14 | Computer Name = PC-de-fabienne | Source = Service Control Manager | ID = 7026 Description = < End of report >

Malekal_morte- · Answer

NaAaAAaAAn

* fais les gros yeux à Fabienne

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports.
Donnes le liens pjjoint ici ensuite pour pouvoir être consultés.

Faut lire la recette en entier !

FABIENNE · Answer

Hello Moment de grace,
voila!
https://pjjoint.malekal.com/files.php?id=cc154a7b11810

FABIENNE · Answer

OTL logfile created on: 26/02/2011 12:49:59 - Run 1 OTL by OldTimer - Version 3.2.22.0 Folder = C:\Users\fabienne\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 41,00% Memory free 6,00 Gb Paging File | 4,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 288,58 Gb Total Space | 186,77 Gb Free Space | 64,72% Space Free | Partition Type: NTFS Drive D: | 596,17 Gb Total Space | 565,27 Gb Free Space | 94,82% Space Free | Partition Type: NTFS Drive E: | 291,59 Gb Total Space | 285,81 Gb Free Space | 98,02% Space Free | Partition Type: NTFS Computer Name: PC-DE-FABIENNE | User Name: fabienne | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========/color PRC - [2011/02/26 12:48:31 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fabienne\Downloads\OTL.exe PRC - [2011/02/20 10:43:58 | 000,234,656 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10m_ActiveX.exe PRC - [2011/02/14 11:14:36 | 000,372,904 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsav32.exe PRC - [2011/02/14 11:13:54 | 000,063,992 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe PRC - [2011/02/14 11:12:55 | 000,918,184 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fssm32.exe PRC - [2011/02/14 11:12:55 | 000,508,584 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32.exe PRC - [2011/01/10 15:24:20 | 000,993,848 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psia.exe PRC - [2011/01/10 15:24:20 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe PRC - [2011/01/10 15:24:20 | 000,291,896 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psi_tray.exe PRC - [2010/06/24 15:41:38 | 000,092,008 | ---- | M] (TomTom) -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMEService.exe PRC - [2010/06/24 15:41:34 | 000,247,144 | ---- | M] (TomTom) -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMERunner.exe PRC - [2010/06/21 10:56:08 | 000,739,840 | ---- | M] () -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe PRC - [2010/06/07 14:09:42 | 000,014,336 | ---- | M] (Oodrive) -- C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe PRC - [2010/06/07 14:09:40 | 000,459,776 | ---- | M] (Oodrive) -- C:\Program Files\Pack Sérénité\Sauvegarde\Client\AdBackup.exe PRC - [2010/01/27 16:07:44 | 000,501,016 | ---- | M] (Avanquest Software) -- C:\Program Files\Pack Sérénité\Optimisation\mxtask.exe PRC - [2009/11/18 17:08:32 | 000,201,128 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSM32.EXE PRC - [2009/11/18 17:08:32 | 000,188,840 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSMA32.EXE PRC - [2009/11/18 17:08:32 | 000,090,536 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSHDLL32.EXE PRC - [2009/11/18 17:07:30 | 000,524,712 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\FWES\program\fsdfwd.exe PRC - [2009/11/18 17:06:20 | 000,221,608 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/01/26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe PRC - [2008/04/25 12:31:40 | 000,319,488 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\SysMonitor.exe PRC - [2008/04/25 12:31:24 | 000,319,488 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe PRC - [2008/04/25 12:30:26 | 000,024,576 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe PRC - [2008/03/26 06:21:30 | 005,369,856 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008/03/04 22:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe PRC - [2008/03/04 22:38:28 | 000,526,896 | ---- | M] (Egis Incorporated) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe PRC - [2008/01/21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2003/06/18 12:00:00 | 000,204,800 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft Money\System\mnyexpr.exe PRC - [2003/06/18 12:00:00 | 000,057,344 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft Money\System\msmoney.exe [color=#E56717]========== Modules (SafeList) ==========/color MOD - [2011/02/26 12:48:31 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fabienne\Downloads\OTL.exe MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MOD - [2009/11/18 17:08:18 | 000,332,200 | ---- | M] (F-Secure Corporation) -- c:\Program Files\Pack Sérénité\Sécurité\HIPS\fshook32.dll MOD - [2009/04/11 07:28:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll MOD - [2008/04/22 08:49:00 | 000,522,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32 vsvc.dll MOD - [2008/01/21 03:24:46 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll [color=#E56717]========== Win32 Services (SafeList) ==========/color SRV - [2011/02/14 11:13:54 | 000,063,992 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe -- (FSORSPClient) SRV - [2011/01/10 15:24:20 | 000,993,848 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\PSIA.exe -- (Secunia PSI Agent) SRV - [2011/01/10 15:24:20 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent) SRV - [2010/06/24 15:41:38 | 000,092,008 | ---- | M] (TomTom) [Auto | Running] -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2010/06/07 14:09:42 | 000,014,336 | ---- | M] (Oodrive) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe -- (AdBackup Service Controller) SRV - [2010/01/27 16:07:44 | 000,501,016 | ---- | M] (Avanquest Software) [Auto | Running] -- C:\Program Files\Pack Sérénité\Optimisation\mxtask.exe -- (Optimisation Task Manager) SRV - [2009/11/18 17:08:32 | 000,188,840 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSMA32.EXE -- (FSMA) SRV - [2009/11/18 17:07:30 | 000,524,712 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\FWES\Program\fsdfwd.exe -- (FSDFWD) SRV - [2009/11/18 17:06:20 | 000,221,608 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter) SRV - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2008/04/25 12:30:26 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe -- (ETService) SRV - [2008/03/04 22:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service) SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========/color DRV - [2011/02/14 11:31:34 | 000,041,552 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fses.sys -- (FSES) DRV - [2011/02/14 11:16:48 | 000,042,664 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\Drivers\fsbts.sys -- (fsbts) DRV - [2011/02/14 11:13:51 | 000,130,728 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper) DRV - [2010/09/01 09:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\psi_mf.sys -- (PSI) DRV - [2009/11/18 17:08:18 | 000,069,928 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\Pack Sérénité\Sécurité\HIPS\drivers\fshs.sys -- (F-Secure HIPS) DRV - [2009/11/18 17:07:30 | 000,072,904 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fsdfw.sys -- (FSFW) DRV - [2009/11/18 17:06:22 | 000,041,640 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter) DRV - [2009/11/18 17:06:22 | 000,027,048 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer) DRV - [2009/11/18 17:06:22 | 000,014,248 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\minifilter\fsvista.sys -- (fsvista) DRV - [2008/12/07 12:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs) DRV - [2008/04/25 12:23:40 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15) DRV - [2008/04/22 08:49:00 | 007,451,040 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vlddmkm.sys -- (nvlddmkm) DRV - [2008/04/22 01:49:00 | 000,043,552 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vhda32v.sys -- (NVHDA) DRV - [2008/02/12 11:14:50 | 000,586,240 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (hardlock) DRV - [2008/01/29 06:55:00 | 001,042,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vmfdx32.sys -- (NVENETFD) DRV - [2008/01/25 13:02:02 | 000,140,832 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS vstor32.sys -- (nvstor32) DRV - [2007/10/12 09:53:10 | 000,013,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vsmu.sys -- (nvsmu) DRV - [2007/09/11 14:40:30 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp) DRV - [2007/09/11 14:40:30 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb) DRV - [2007/03/27 18:19:36 | 010,252,544 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) [color=#E56717]========== Standard Registry (SafeList) ==========/color [color=#E56717]========== Internet Explorer ==========/color IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = https://www.acer.com/worldwide/selection.html [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========/color FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7 FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2 FF - HKLM\software\mozilla\Firefox\Extensions\litmus-ff@f-secure.com: C:\Program Files\Pack Sérénité\Sécurité\NRS\litmus-ff@f-secure.com [2011/02/14 11:13:54 | 000,000,000 | ---D | M] [2008/12/14 12:31:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabienne\AppData\Roaming\mozilla\Extensions [2008/12/14 12:31:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabienne\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2010/07/11 10:50:52 | 000,000,000 | ---D | M] (Map status indicator) -- C:\USERS\FABIENNE\DOCUMENTS\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - File not found O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Pack Sérénité\Sécurité\NRS\iescript\baselitmus.dll (F-Secure Corporation) O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll () O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Browsing Protection Toolbar) - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Pack Sérénité\Sécurité\NRS\iescript\baselitmus.dll (F-Secure Corporation) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe () O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated) O4 - HKLM..\Run: [EmpoweringTechnology] File not found O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Pack Sérénité\Sécurité\Common\FSM32.EXE (F-Secure Corporation) O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Pack Sérénité\Sécurité\FSGUI\TNBUtil.exe (F-Secure Corporation) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PCMMediaSharing] File not found O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Incorporated) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [EPSON Stylus Photo RX560 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIBPE.EXE (SEIKO EPSON CORPORATION) O4 - HKCU..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe () O4 - HKCU..\Run: [MoneyAgent] C:\Program Files\Microsoft Money\System\mnyexpr.exe (Microsoft Corp.) O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKCU..\Run: [TomTomHOME.exe] C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMERunner.exe (TomTom) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - Reg Error: Key error. File not found O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - Reg Error: Key error. File not found O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\fabienne\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\fabienne\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{752cf149-095f-11de-933b-001d72a8cb00}\Shell\AutoRun\command - "" = D:\InstallTomTomHOME.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: [b]ccleaner/b - hkey= - key= - File not found MsConfig - StartUpReg: [b]Skype/b - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig - StartUpReg: [b]snpstd3/b - hkey= - key= - C:\Windows\vsnpstd3.exe () MsConfig - State: "startup" - 2 SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: MCODS - SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: McMPFSvc - Service SafeBootNet: MCODS - Service SafeBootNet: Messenger - Service SafeBootNet: MpfService - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32 undll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\ACERAR~1\ACERSL~1\Kernel\Burner\MKDMP3Enc.ACM File not found Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point [color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color [2011/02/24 07:48:40 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2011/02/24 07:47:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll [2011/02/24 07:47:25 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe [2011/02/24 07:47:25 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe [2011/02/24 07:47:25 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe [2011/02/24 07:47:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll [2011/02/24 07:47:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll [2011/02/24 07:47:22 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll [2011/02/24 07:47:22 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe [2011/02/24 07:47:22 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll [2011/02/24 07:47:22 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll [2011/02/24 07:47:22 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll [2011/02/24 07:47:14 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll [2011/02/24 07:47:14 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe [2011/02/24 07:47:14 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll [2011/02/24 07:47:14 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll [2011/02/24 07:47:14 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll [2011/02/23 18:22:45 | 000,000,000 | ---D | C] -- C:\Program Files\WOT [2011/02/21 06:11:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2011/02/21 06:07:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2011/02/21 06:07:22 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Local\Apple [2011/02/21 06:07:18 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2011/02/21 06:07:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2011/02/20 10:55:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011/02/20 10:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2011/02/20 10:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache [2011/02/20 10:39:54 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Local\Secunia PSI [2011/02/20 10:39:32 | 000,000,000 | ---D | C] -- C:\Program Files\Secunia [2011/02/20 10:31:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011/02/20 10:30:51 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/02/20 10:30:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/02/20 10:30:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/02/19 10:29:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler [2011/02/19 10:29:34 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler [2011/02/18 19:08:31 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011/02/18 18:53:36 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2011/02/18 12:01:41 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\CCM [2011/02/17 09:47:27 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Malwarebytes [2011/02/17 09:47:19 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/02/17 09:47:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/02/17 09:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/02/17 09:47:13 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/02/17 09:47:05 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/02/15 15:38:47 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\doc action judiciare PSV [2011/02/14 18:27:38 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag [2011/02/14 17:59:35 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\OpenOffice.org 3.2 (fr) Installation Files [2011/02/14 17:59:02 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun [2011/02/14 12:08:41 | 000,000,000 | -H-D | C] -- C:\_Backup [2011/02/14 11:08:09 | 000,041,552 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys [2011/02/14 11:08:05 | 000,072,904 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fsdfw.sys [2011/02/14 11:08:04 | 000,574,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp50.dll [2011/02/14 11:05:04 | 000,000,000 | ---D | C] -- C:\ProgramData\fssg [2011/02/14 11:04:30 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\BVRP Software [2011/02/14 11:04:22 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Darty [2011/02/14 11:04:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Darty [2011/02/14 11:04:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2011/02/14 11:03:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pack Sérénité [2011/02/14 11:01:34 | 002,503,365 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\fabienne\Desktop\Assistant_Darty.exe [2011/02/14 11:01:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWF Studio [2011/02/14 11:01:22 | 000,000,000 | ---D | C] -- C:\Program Files\Pack Sérénité [2011/02/11 18:27:07 | 000,000,000 | ---D | C] -- C:\Program Files rend micro [2011/02/09 02:52:23 | 002,039,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/02/09 02:52:19 | 003,602,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32 tkrnlpa.exe [2011/02/09 02:52:18 | 003,550,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32 toskrnl.exe [2011/02/09 02:52:12 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2011/02/09 02:52:12 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2011/02/09 02:52:11 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll [2011/02/09 02:52:11 | 000,979,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFH264Dec.dll [2011/02/09 02:52:11 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011/02/09 02:52:11 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2011/02/09 02:52:11 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFHEAACdec.dll [2011/02/09 02:52:11 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2011/02/09 02:52:11 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll [2011/02/09 02:52:10 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll [2011/02/09 02:52:10 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2011/02/09 02:52:10 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmp4src.dll [2011/02/09 02:52:10 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll [2011/02/09 02:52:09 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll [2011/02/09 02:52:09 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2011/02/09 02:52:09 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2011/02/09 02:52:08 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2011/02/09 02:52:08 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe [2011/02/09 02:52:07 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2011/02/09 02:52:07 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll [2011/02/09 02:52:07 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2011/02/09 02:52:05 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll [2011/02/09 02:52:05 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/02/09 02:52:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll [2011/02/09 02:51:50 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011/02/09 02:51:49 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011/02/09 02:51:49 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2011/02/09 02:51:49 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011/02/09 02:51:49 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011/02/09 02:51:49 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011/02/09 02:51:49 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011/02/09 02:51:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011/02/09 02:51:48 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011/02/09 02:51:48 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011/02/09 02:51:48 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011/02/09 02:51:48 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011/02/09 02:51:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011/02/09 02:51:48 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011/02/09 02:51:45 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011/02/09 02:51:45 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011/02/09 02:51:45 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011/02/09 02:51:37 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011/02/09 02:51:37 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011/02/07 16:26:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2011/02/01 09:15:17 | 000,212,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RICHTX32.OCX [2011/02/01 09:15:17 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMDLG32.OCX [2011/02/01 09:15:17 | 000,124,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSWINSCK.OCX [2011/02/01 09:14:52 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Démarrage [2011/02/01 09:14:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Démarrage [2011/02/01 09:09:47 | 000,000,000 | ---D | C] -- C:\Program Files\Ord-ixSofts [2008/07/22 09:01:25 | 000,049,152 | ---- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll [2007/03/12 11:41:52 | 000,061,440 | ---- | C] ( ) -- C:\Windows\System32\vsnpstd3.dll [2005/11/23 12:55:32 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\csnpstd3.dll [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========/color [2011/02/26 12:51:17 | 008,841,704 | R--- | M] () -- C:\Users\fabienne\Desktop\FEVRIER2011.mbf [2011/02/26 12:47:23 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/02/26 12:47:23 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/02/26 12:00:02 | 000,001,058 | ---- | M] () -- C:\Windows asks\GoogleUpdateTaskMachineUA.job [2011/02/26 11:04:43 | 000,700,774 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/02/26 11:04:43 | 000,607,422 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/02/26 11:04:43 | 000,134,540 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/02/26 11:04:43 | 000,111,420 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/02/26 10:47:27 | 000,001,054 | ---- | M] () -- C:\Windows asks\GoogleUpdateTaskMachineCore.job [2011/02/26 10:47:24 | 000,000,570 | ---- | M] () -- C:\Windows asks\Scheduled scanning task.job [2011/02/26 10:47:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/02/26 10:47:14 | 2951,147,520 | -HS- | M] () -- C:\hiberfil.sys [2011/02/26 10:15:12 | 000,000,438 | -H-- | M] () -- C:\Windows asks\User_Feed_Synchronization-{0BC9ADE9-B3F2-4038-AF1B-46257085264C}.job [2011/02/25 09:36:46 | 000,314,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/02/22 11:07:39 | 000,052,135 | ---- | M] () -- C:\Users\fabienne\Documents\opitoh dr[1].pdf [2011/02/21 06:11:02 | 000,001,690 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/02/21 06:09:29 | 000,054,156 | -H-- | M] () -- C:\Windows\QTFont.qfn [2011/02/21 06:09:29 | 000,001,409 | ---- | M] () -- C:\Windows\QTFont.for [2011/02/20 10:55:28 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2011/02/20 10:53:10 | 000,000,823 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011/02/20 10:39:38 | 000,000,863 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2011/02/18 19:09:00 | 000,001,856 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011/02/14 17:58:40 | 134,946,144 | ---- | M] () -- C:\Users\fabienne\Desktop\OOo_3.2.1_Win_x86_install_fr.exe [2011/02/14 11:31:34 | 000,041,552 | ---- | M] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys [2011/02/14 11:16:48 | 000,042,664 | ---- | M] () -- C:\Windows\System32\drivers\fsbts.sys [2011/02/14 11:10:36 | 000,002,144 | ---- | M] () -- C:\Users\Public\Desktop\Sécurité.lnk [2011/02/14 11:04:20 | 000,000,891 | ---- | M] () -- C:\Users\Public\Desktop\Optimisation.lnk [2011/02/14 11:03:58 | 000,002,023 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sauvegarde.lnk [2011/02/14 11:03:58 | 000,002,005 | ---- | M] () -- C:\Users\Public\Desktop\Sauvegarde.lnk [2011/02/07 16:26:03 | 000,001,083 | ---- | M] () -- C:\Users\fabienne\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2011/02/07 16:12:08 | 000,008,944 | ---- | M] () -- C:\Users\fabienne\AppData\Local\d3d9caps.dat [2011/02/06 19:15:28 | 000,080,384 | ---- | M] () -- C:\Users\fabienne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/02/02 21:40:39 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/02/02 21:40:38 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/02/02 21:40:36 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/02/02 21:40:23 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll [2011/02/02 17:11:20 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2011/01/30 19:09:24 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========/color [2011/02/24 10:47:20 | 000,001,924 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visionneuse Microsoft PowerPoint .lnk [2011/02/24 07:47:16 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2011/02/24 07:47:16 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2011/02/24 07:47:16 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2011/02/22 11:07:39 | 000,052,135 | ---- | C] () -- C:\Users\fabienne\Documents\opitoh dr[1].pdf [2011/02/22 10:26:12 | 000,000,570 | ---- | C] () -- C:\Windows asks\Scheduled scanning task.job [2011/02/21 06:11:02 | 000,001,690 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/02/21 06:09:29 | 000,054,156 | -H-- | C] () -- C:\Windows\QTFont.qfn [2011/02/21 06:09:29 | 000,001,409 | ---- | C] () -- C:\Windows\QTFont.for [2011/02/21 06:07:20 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2011/02/20 10:55:28 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2011/02/20 10:53:10 | 000,000,823 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011/02/20 10:39:38 | 000,000,863 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2011/02/20 10:39:38 | 000,000,826 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk [2011/02/18 19:09:00 | 000,001,856 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011/02/18 19:09:00 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011/02/14 17:50:53 | 134,946,144 | ---- | C] () -- C:\Users\fabienne\Desktop\OOo_3.2.1_Win_x86_install_fr.exe [2011/02/14 11:10:36 | 000,002,144 | ---- | C] () -- C:\Users\Public\Desktop\Sécurité.lnk [2011/02/14 11:08:19 | 000,042,664 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys [2011/02/14 11:04:20 | 000,000,891 | ---- | C] () -- C:\Users\Public\Desktop\Optimisation.lnk [2011/02/14 11:03:58 | 000,002,023 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sauvegarde.lnk [2011/02/14 11:03:58 | 000,002,005 | ---- | C] () -- C:\Users\Public\Desktop\Sauvegarde.lnk [2011/02/07 16:26:03 | 000,001,083 | ---- | C] () -- C:\Users\fabienne\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2011/02/06 10:46:53 | 008,841,704 | R--- | C] () -- C:\Users\fabienne\Desktop\FEVRIER2011.mbf [2010/01/27 16:08:04 | 000,036,560 | ---- | C] () -- C:\Windows\System32\mxntdfg.exe [2009/09/24 03:00:48 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009/09/24 03:00:48 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009/08/03 14:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe [2009/05/11 10:02:10 | 000,086,016 | ---- | C] () -- C:\Windows\System32\vidalhelper.dll [2009/02/07 17:43:43 | 000,093,000 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2009/01/08 08:09:31 | 000,000,440 | ---- | C] () -- C:\Users\fabienne\AppData\Roaming\wklnhst.dat [2008/12/18 19:32:44 | 000,080,384 | ---- | C] () -- C:\Users\fabienne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/12/12 11:50:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2008/12/12 10:54:17 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat [2008/12/12 10:54:17 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat [2008/12/12 10:54:17 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat [2008/12/12 10:54:17 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat [2008/12/12 10:54:17 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat [2008/12/12 10:54:17 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat [2008/12/12 10:54:17 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat [2008/12/12 10:54:17 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat [2008/12/12 10:54:17 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat [2008/12/12 10:54:17 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat [2008/12/12 10:54:17 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat [2008/12/12 10:54:17 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat [2008/12/12 10:54:17 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat [2008/12/12 10:54:17 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat [2008/12/12 10:54:17 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat [2008/12/12 10:54:17 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat [2008/12/12 10:54:17 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat [2008/12/12 10:54:17 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat [2008/12/12 10:54:17 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2008/12/12 10:42:25 | 000,000,025 | ---- | C] () -- C:\Windows\CDE RX560EFGD.ini [2008/12/11 11:18:09 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008/12/09 19:12:56 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini [2008/12/09 19:12:56 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini [2008/12/09 18:48:27 | 000,008,944 | ---- | C] () -- C:\Users\fabienne\AppData\Local\d3d9caps.dat [2008/12/07 12:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys [2008/05/09 03:32:23 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIOFM4.dll [2008/05/09 03:32:23 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN5.dll [2008/05/09 02:53:15 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll [2008/05/09 02:43:57 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini [2008/05/09 02:43:57 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat [2008/05/09 02:43:57 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers tkhdaud.dat [2008/05/09 02:32:41 | 000,003,948 | ---- | C] () -- C:\Windows\System32\drivers vphy.bin [2008/01/21 09:40:50 | 000,700,774 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2008/01/21 09:40:50 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2008/01/21 09:40:50 | 000,134,540 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2008/01/21 09:40:50 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2006/11/02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 13:47:37 | 000,314,864 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 11:33:01 | 000,607,422 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 11:33:01 | 000,111,420 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2006/09/19 09:07:28 | 000,827,392 | ---- | C] () -- C:\Windows\vsnpstd3.exe [2006/04/06 06:17:00 | 000,159,744 | ---- | C] () -- C:\Windows\System32\EPSPTDV.DLL [2004/02/27 16:36:18 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini [2001/12/26 16:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/09/03 23:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 16:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 22:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll [color=#E56717]========== Custom Scans ==========/color Invalid Environment Variable: ALLUSERSPROFILE\ [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >/color [color=#A23BEC]< %APPDATA%\*. >/color [2011/02/14 11:01:31 | 000,000,000 | -HSD | M] -- C:\Users\fabienne\AppData\Roaming\.# [2009/04/15 15:08:03 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Acer Arcade Live [2008/05/09 03:04:50 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Acer GameZone Console [2011/02/22 09:20:44 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Adobe [2009/05/16 17:42:46 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Apple Computer [2009/02/24 09:15:24 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\CyberLink [2011/02/14 11:04:22 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Darty [2010/04/09 10:56:12 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\dvdcss [2009/10/11 18:02:38 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\EPSON [2008/12/11 07:57:22 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\eSobi [2008/12/12 16:05:53 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Google [2011/02/17 09:53:50 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Icones [2008/12/09 18:50:36 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Identities [2008/12/09 19:12:56 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Macromedia [2011/02/17 09:47:27 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Malwarebytes [2006/11/02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Media Center Programs [2011/02/23 18:22:46 | 000,000,000 | --SD | M] -- C:\Users\fabienne\AppData\Roaming\Microsoft [2008/12/14 12:31:21 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Mozilla [2009/07/12 14:09:00 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\OpenOffice.org [2009/04/15 15:07:57 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\PowerCinema [2011/02/25 09:38:37 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Skype [2011/01/15 16:05:51 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\skypePM [2009/01/21 17:58:23 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Sony Corporation [2009/01/08 08:09:32 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Template [2008/12/14 12:31:15 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\TomTom [2010/05/30 18:19:45 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\vlc [2009/01/22 06:20:09 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Windows Live Writer [2010/06/20 15:33:42 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\WinRAR [2010/02/03 21:57:41 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Yahoo! [color=#A23BEC]< %APPDATA%\*.exe /s >/color [2010/11/25 11:38:16 | 020,332,736 | ---- | M] (TomTom International B.V.) -- C:\Users\fabienne\AppData\Roaming\TomTom\HOME\Profiles\1r08zxx8.default\Updates\v2_7_6_2056_win.exe [color=#A23BEC]< %temp%\.exe /s >/color [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >/color [color=#A23BEC]< %systemroot%\*. /mp /s >/color [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >/color [2009/03/08 12:31:42 | 000,348,160 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5/b -- C:\Windows\System32\dxtmsft.dll [2009/03/08 12:31:37 | 000,216,064 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5/b -- C:\Windows\System32\dxtrans.dll [2010/12/18 07:22:10 | 000,184,320 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5/b -- C:\Windows\System32\iepeers.dll [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >/color [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >/color [color=#A23BEC]< %systemroot%\System32\config\*.sav >/color [2008/01/21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008/01/21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008/01/21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006/11/02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006/11/02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

Malekal_morte- · Answer

bis repetitas : https://forums.commentcamarche.net/forum/affich-20997258-connection-internet-tres-tres-lente#5

FABIENNE · Answer

tu veux que je recommence OTL ?

FABIENNE · Answer

OTL logfile created on: 26/02/2011 12:49:59 - Run 1 OTL by OldTimer - Version 3.2.22.0 Folder = C:\Users\fabienne\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 41,00% Memory free 6,00 Gb Paging File | 4,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 288,58 Gb Total Space | 186,77 Gb Free Space | 64,72% Space Free | Partition Type: NTFS Drive D: | 596,17 Gb Total Space | 565,27 Gb Free Space | 94,82% Space Free | Partition Type: NTFS Drive E: | 291,59 Gb Total Space | 285,81 Gb Free Space | 98,02% Space Free | Partition Type: NTFS Computer Name: PC-DE-FABIENNE | User Name: fabienne | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011/02/26 12:48:31 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fabienne\Downloads\OTL.exe PRC - [2011/02/20 10:43:58 | 000,234,656 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10m_ActiveX.exe PRC - [2011/02/14 11:14:36 | 000,372,904 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsav32.exe PRC - [2011/02/14 11:13:54 | 000,063,992 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe PRC - [2011/02/14 11:12:55 | 000,918,184 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fssm32.exe PRC - [2011/02/14 11:12:55 | 000,508,584 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32.exe PRC - [2011/01/10 15:24:20 | 000,993,848 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psia.exe PRC - [2011/01/10 15:24:20 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe PRC - [2011/01/10 15:24:20 | 000,291,896 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\psi_tray.exe PRC - [2010/06/24 15:41:38 | 000,092,008 | ---- | M] (TomTom) -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMEService.exe PRC - [2010/06/24 15:41:34 | 000,247,144 | ---- | M] (TomTom) -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMERunner.exe PRC - [2010/06/21 10:56:08 | 000,739,840 | ---- | M] () -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe PRC - [2010/06/07 14:09:42 | 000,014,336 | ---- | M] (Oodrive) -- C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe PRC - [2010/06/07 14:09:40 | 000,459,776 | ---- | M] (Oodrive) -- C:\Program Files\Pack Sérénité\Sauvegarde\Client\AdBackup.exe PRC - [2010/01/27 16:07:44 | 000,501,016 | ---- | M] (Avanquest Software) -- C:\Program Files\Pack Sérénité\Optimisation\mxtask.exe PRC - [2009/11/18 17:08:32 | 000,201,128 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSM32.EXE PRC - [2009/11/18 17:08:32 | 000,188,840 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSMA32.EXE PRC - [2009/11/18 17:08:32 | 000,090,536 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSHDLL32.EXE PRC - [2009/11/18 17:07:30 | 000,524,712 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\FWES\program\fsdfwd.exe PRC - [2009/11/18 17:06:20 | 000,221,608 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/01/26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe PRC - [2008/04/25 12:31:40 | 000,319,488 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\SysMonitor.exe PRC - [2008/04/25 12:31:24 | 000,319,488 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe PRC - [2008/04/25 12:30:26 | 000,024,576 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe PRC - [2008/03/26 06:21:30 | 005,369,856 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008/03/04 22:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe PRC - [2008/03/04 22:38:28 | 000,526,896 | ---- | M] (Egis Incorporated) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe PRC - [2008/01/21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2003/06/18 12:00:00 | 000,204,800 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft Money\System\mnyexpr.exe PRC - [2003/06/18 12:00:00 | 000,057,344 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Microsoft Money\System\msmoney.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011/02/26 12:48:31 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fabienne\Downloads\OTL.exe MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MOD - [2009/11/18 17:08:18 | 000,332,200 | ---- | M] (F-Secure Corporation) -- c:\Program Files\Pack Sérénité\Sécurité\HIPS\fshook32.dll MOD - [2009/04/11 07:28:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll MOD - [2008/04/22 08:49:00 | 000,522,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32 vsvc.dll MOD - [2008/01/21 03:24:46 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011/02/14 11:13:54 | 000,063,992 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\ORSP Client\fsorsp.exe -- (FSORSPClient) SRV - [2011/01/10 15:24:20 | 000,993,848 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\PSIA.exe -- (Secunia PSI Agent) SRV - [2011/01/10 15:24:20 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent) SRV - [2010/06/24 15:41:38 | 000,092,008 | ---- | M] (TomTom) [Auto | Running] -- C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2010/06/07 14:09:42 | 000,014,336 | ---- | M] (Oodrive) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sauvegarde\Service\AdBackup.RemotingService.exe -- (AdBackup Service Controller) SRV - [2010/01/27 16:07:44 | 000,501,016 | ---- | M] (Avanquest Software) [Auto | Running] -- C:\Program Files\Pack Sérénité\Optimisation\mxtask.exe -- (Optimisation Task Manager) SRV - [2009/11/18 17:08:32 | 000,188,840 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Common\FSMA32.EXE -- (FSMA) SRV - [2009/11/18 17:07:30 | 000,524,712 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\FWES\Program\fsdfwd.exe -- (FSDFWD) SRV - [2009/11/18 17:06:20 | 000,221,608 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter) SRV - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2008/04/25 12:30:26 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe -- (ETService) SRV - [2008/03/04 22:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service) SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011/02/14 11:31:34 | 000,041,552 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fses.sys -- (FSES) DRV - [2011/02/14 11:16:48 | 000,042,664 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\Drivers\fsbts.sys -- (fsbts) DRV - [2011/02/14 11:13:51 | 000,130,728 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper) DRV - [2010/09/01 09:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\psi_mf.sys -- (PSI) DRV - [2009/11/18 17:08:18 | 000,069,928 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\Pack Sérénité\Sécurité\HIPS\drivers\fshs.sys -- (F-Secure HIPS) DRV - [2009/11/18 17:07:30 | 000,072,904 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fsdfw.sys -- (FSFW) DRV - [2009/11/18 17:06:22 | 000,041,640 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter) DRV - [2009/11/18 17:06:22 | 000,027,048 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer) DRV - [2009/11/18 17:06:22 | 000,014,248 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Pack Sérénité\Sécurité\Anti-Virus\minifilter\fsvista.sys -- (fsvista) DRV - [2008/12/07 12:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs) DRV - [2008/04/25 12:23:40 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15) DRV - [2008/04/22 08:49:00 | 007,451,040 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vlddmkm.sys -- (nvlddmkm) DRV - [2008/04/22 01:49:00 | 000,043,552 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vhda32v.sys -- (NVHDA) DRV - [2008/02/12 11:14:50 | 000,586,240 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (hardlock) DRV - [2008/01/29 06:55:00 | 001,042,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vmfdx32.sys -- (NVENETFD) DRV - [2008/01/25 13:02:02 | 000,140,832 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS vstor32.sys -- (nvstor32) DRV - [2007/10/12 09:53:10 | 000,013,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers vsmu.sys -- (nvsmu) DRV - [2007/09/11 14:40:30 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp) DRV - [2007/09/11 14:40:30 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb) DRV - [2007/03/27 18:19:36 | 010,252,544 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = https://www.acer.com/worldwide/selection.html [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7 FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2 FF - HKLM\software\mozilla\Firefox\Extensions\litmus-ff@f-secure.com: C:\Program Files\Pack Sérénité\Sécurité\NRS\litmus-ff@f-secure.com [2011/02/14 11:13:54 | 000,000,000 | ---D | M] [2008/12/14 12:31:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabienne\AppData\Roaming\mozilla\Extensions [2008/12/14 12:31:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fabienne\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2010/07/11 10:50:52 | 000,000,000 | ---D | M] (Map status indicator) -- C:\USERS\FABIENNE\DOCUMENTS\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - File not found O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Pack Sérénité\Sécurité\NRS\iescript\baselitmus.dll (F-Secure Corporation) O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll () O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Browsing Protection Toolbar) - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Pack Sérénité\Sécurité\NRS\iescript\baselitmus.dll (F-Secure Corporation) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.) O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe () O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated) O4 - HKLM..\Run: [EmpoweringTechnology] File not found O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Pack Sérénité\Sécurité\Common\FSM32.EXE (F-Secure Corporation) O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Pack Sérénité\Sécurité\FSGUI\TNBUtil.exe (F-Secure Corporation) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PCMMediaSharing] File not found O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Incorporated) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [EPSON Stylus Photo RX560 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIBPE.EXE (SEIKO EPSON CORPORATION) O4 - HKCU..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe () O4 - HKCU..\Run: [MoneyAgent] C:\Program Files\Microsoft Money\System\mnyexpr.exe (Microsoft Corp.) O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKCU..\Run: [TomTomHOME.exe] C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMERunner.exe (TomTom) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Pack Sérénité\Sécurité\FSPS\program\FSLSP.DLL (F-Secure Corporation) O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - Reg Error: Key error. File not found O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - Reg Error: Key error. File not found O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\fabienne\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\fabienne\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{752cf149-095f-11de-933b-001d72a8cb00}\Shell\AutoRun\command - "" = D:\InstallTomTomHOME.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: [b]ccleaner[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig - StartUpReg: [b]snpstd3[/b] - hkey= - key= - C:\Windows\vsnpstd3.exe () MsConfig - State: "startup" - 2 SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: MCODS - SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: McMPFSvc - Service SafeBootNet: MCODS - Service SafeBootNet: Messenger - Service SafeBootNet: MpfService - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32 undll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\ACERAR~1\ACERSL~1\Kernel\Burner\MKDMP3Enc.ACM File not found Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/02/24 07:48:40 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell [2011/02/24 07:47:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll [2011/02/24 07:47:25 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe [2011/02/24 07:47:25 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe [2011/02/24 07:47:25 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe [2011/02/24 07:47:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll [2011/02/24 07:47:24 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll [2011/02/24 07:47:22 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll [2011/02/24 07:47:22 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe [2011/02/24 07:47:22 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll [2011/02/24 07:47:22 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll [2011/02/24 07:47:22 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll [2011/02/24 07:47:14 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll [2011/02/24 07:47:14 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe [2011/02/24 07:47:14 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll [2011/02/24 07:47:14 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll [2011/02/24 07:47:14 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll [2011/02/23 18:22:45 | 000,000,000 | ---D | C] -- C:\Program Files\WOT [2011/02/21 06:11:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2011/02/21 06:07:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2011/02/21 06:07:22 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Local\Apple [2011/02/21 06:07:18 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2011/02/21 06:07:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2011/02/20 10:55:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011/02/20 10:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2011/02/20 10:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache [2011/02/20 10:39:54 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Local\Secunia PSI [2011/02/20 10:39:32 | 000,000,000 | ---D | C] -- C:\Program Files\Secunia [2011/02/20 10:31:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011/02/20 10:30:51 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/02/20 10:30:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/02/20 10:30:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/02/19 10:29:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler [2011/02/19 10:29:34 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler [2011/02/18 19:08:31 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011/02/18 18:53:36 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2011/02/18 12:01:41 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\CCM [2011/02/17 09:47:27 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Malwarebytes [2011/02/17 09:47:19 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/02/17 09:47:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/02/17 09:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/02/17 09:47:13 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/02/17 09:47:05 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/02/15 15:38:47 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\doc action judiciare PSV [2011/02/14 18:27:38 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag [2011/02/14 17:59:35 | 000,000,000 | ---D | C] -- C:\Users\fabienne\Desktop\OpenOffice.org 3.2 (fr) Installation Files [2011/02/14 17:59:02 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun [2011/02/14 12:08:41 | 000,000,000 | -H-D | C] -- C:\_Backup [2011/02/14 11:08:09 | 000,041,552 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys [2011/02/14 11:08:05 | 000,072,904 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fsdfw.sys [2011/02/14 11:08:04 | 000,574,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp50.dll [2011/02/14 11:05:04 | 000,000,000 | ---D | C] -- C:\ProgramData\fssg [2011/02/14 11:04:30 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\BVRP Software [2011/02/14 11:04:22 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Darty [2011/02/14 11:04:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Darty [2011/02/14 11:04:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2011/02/14 11:03:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pack Sérénité [2011/02/14 11:01:34 | 002,503,365 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\fabienne\Desktop\Assistant_Darty.exe [2011/02/14 11:01:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWF Studio [2011/02/14 11:01:22 | 000,000,000 | ---D | C] -- C:\Program Files\Pack Sérénité [2011/02/11 18:27:07 | 000,000,000 | ---D | C] -- C:\Program Files rend micro [2011/02/09 02:52:23 | 002,039,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/02/09 02:52:19 | 003,602,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32 tkrnlpa.exe [2011/02/09 02:52:18 | 003,550,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32 toskrnl.exe [2011/02/09 02:52:12 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2011/02/09 02:52:12 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2011/02/09 02:52:11 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll [2011/02/09 02:52:11 | 000,979,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFH264Dec.dll [2011/02/09 02:52:11 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011/02/09 02:52:11 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2011/02/09 02:52:11 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFHEAACdec.dll [2011/02/09 02:52:11 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2011/02/09 02:52:11 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll [2011/02/09 02:52:10 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll [2011/02/09 02:52:10 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2011/02/09 02:52:10 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmp4src.dll [2011/02/09 02:52:10 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll [2011/02/09 02:52:09 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll [2011/02/09 02:52:09 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2011/02/09 02:52:09 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2011/02/09 02:52:08 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2011/02/09 02:52:08 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe [2011/02/09 02:52:07 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2011/02/09 02:52:07 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll [2011/02/09 02:52:07 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2011/02/09 02:52:05 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll [2011/02/09 02:52:05 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/02/09 02:52:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll [2011/02/09 02:51:50 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011/02/09 02:51:49 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011/02/09 02:51:49 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2011/02/09 02:51:49 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011/02/09 02:51:49 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011/02/09 02:51:49 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011/02/09 02:51:49 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011/02/09 02:51:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011/02/09 02:51:48 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011/02/09 02:51:48 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011/02/09 02:51:48 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011/02/09 02:51:48 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011/02/09 02:51:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011/02/09 02:51:48 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011/02/09 02:51:45 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011/02/09 02:51:45 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011/02/09 02:51:45 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011/02/09 02:51:37 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011/02/09 02:51:37 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011/02/07 16:26:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2011/02/01 09:15:17 | 000,212,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RICHTX32.OCX [2011/02/01 09:15:17 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMDLG32.OCX [2011/02/01 09:15:17 | 000,124,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSWINSCK.OCX [2011/02/01 09:14:52 | 000,000,000 | ---D | C] -- C:\Users\fabienne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Démarrage [2011/02/01 09:14:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Démarrage [2011/02/01 09:09:47 | 000,000,000 | ---D | C] -- C:\Program Files\Ord-ixSofts [2008/07/22 09:01:25 | 000,049,152 | ---- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll [2007/03/12 11:41:52 | 000,061,440 | ---- | C] ( ) -- C:\Windows\System32\vsnpstd3.dll [2005/11/23 12:55:32 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\csnpstd3.dll [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/02/26 12:51:17 | 008,841,704 | R--- | M] () -- C:\Users\fabienne\Desktop\FEVRIER2011.mbf [2011/02/26 12:47:23 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/02/26 12:47:23 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/02/26 12:00:02 | 000,001,058 | ---- | M] () -- C:\Windows asks\GoogleUpdateTaskMachineUA.job [2011/02/26 11:04:43 | 000,700,774 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/02/26 11:04:43 | 000,607,422 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/02/26 11:04:43 | 000,134,540 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/02/26 11:04:43 | 000,111,420 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/02/26 10:47:27 | 000,001,054 | ---- | M] () -- C:\Windows asks\GoogleUpdateTaskMachineCore.job [2011/02/26 10:47:24 | 000,000,570 | ---- | M] () -- C:\Windows asks\Scheduled scanning task.job [2011/02/26 10:47:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/02/26 10:47:14 | 2951,147,520 | -HS- | M] () -- C:\hiberfil.sys [2011/02/26 10:15:12 | 000,000,438 | -H-- | M] () -- C:\Windows asks\User_Feed_Synchronization-{0BC9ADE9-B3F2-4038-AF1B-46257085264C}.job [2011/02/25 09:36:46 | 000,314,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/02/22 11:07:39 | 000,052,135 | ---- | M] () -- C:\Users\fabienne\Documents\opitoh dr[1].pdf [2011/02/21 06:11:02 | 000,001,690 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/02/21 06:09:29 | 000,054,156 | -H-- | M] () -- C:\Windows\QTFont.qfn [2011/02/21 06:09:29 | 000,001,409 | ---- | M] () -- C:\Windows\QTFont.for [2011/02/20 10:55:28 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2011/02/20 10:53:10 | 000,000,823 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011/02/20 10:39:38 | 000,000,863 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2011/02/18 19:09:00 | 000,001,856 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011/02/14 17:58:40 | 134,946,144 | ---- | M] () -- C:\Users\fabienne\Desktop\OOo_3.2.1_Win_x86_install_fr.exe [2011/02/14 11:31:34 | 000,041,552 | ---- | M] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys [2011/02/14 11:16:48 | 000,042,664 | ---- | M] () -- C:\Windows\System32\drivers\fsbts.sys [2011/02/14 11:10:36 | 000,002,144 | ---- | M] () -- C:\Users\Public\Desktop\Sécurité.lnk [2011/02/14 11:04:20 | 000,000,891 | ---- | M] () -- C:\Users\Public\Desktop\Optimisation.lnk [2011/02/14 11:03:58 | 000,002,023 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sauvegarde.lnk [2011/02/14 11:03:58 | 000,002,005 | ---- | M] () -- C:\Users\Public\Desktop\Sauvegarde.lnk [2011/02/07 16:26:03 | 000,001,083 | ---- | M] () -- C:\Users\fabienne\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2011/02/07 16:12:08 | 000,008,944 | ---- | M] () -- C:\Users\fabienne\AppData\Local\d3d9caps.dat [2011/02/06 19:15:28 | 000,080,384 | ---- | M] () -- C:\Users\fabienne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/02/02 21:40:39 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/02/02 21:40:38 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/02/02 21:40:36 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/02/02 21:40:23 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll [2011/02/02 17:11:20 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2011/01/30 19:09:24 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/02/24 10:47:20 | 000,001,924 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visionneuse Microsoft PowerPoint .lnk [2011/02/24 07:47:16 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs [2011/02/24 07:47:16 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml [2011/02/24 07:47:16 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl [2011/02/22 11:07:39 | 000,052,135 | ---- | C] () -- C:\Users\fabienne\Documents\opitoh dr[1].pdf [2011/02/22 10:26:12 | 000,000,570 | ---- | C] () -- C:\Windows asks\Scheduled scanning task.job [2011/02/21 06:11:02 | 000,001,690 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/02/21 06:09:29 | 000,054,156 | -H-- | C] () -- C:\Windows\QTFont.qfn [2011/02/21 06:09:29 | 000,001,409 | ---- | C] () -- C:\Windows\QTFont.for [2011/02/21 06:07:20 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2011/02/20 10:55:28 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2011/02/20 10:53:10 | 000,000,823 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2011/02/20 10:39:38 | 000,000,863 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2011/02/20 10:39:38 | 000,000,826 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk [2011/02/18 19:09:00 | 000,001,856 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011/02/18 19:09:00 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011/02/14 17:50:53 | 134,946,144 | ---- | C] () -- C:\Users\fabienne\Desktop\OOo_3.2.1_Win_x86_install_fr.exe [2011/02/14 11:10:36 | 000,002,144 | ---- | C] () -- C:\Users\Public\Desktop\Sécurité.lnk [2011/02/14 11:08:19 | 000,042,664 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys [2011/02/14 11:04:20 | 000,000,891 | ---- | C] () -- C:\Users\Public\Desktop\Optimisation.lnk [2011/02/14 11:03:58 | 000,002,023 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sauvegarde.lnk [2011/02/14 11:03:58 | 000,002,005 | ---- | C] () -- C:\Users\Public\Desktop\Sauvegarde.lnk [2011/02/07 16:26:03 | 000,001,083 | ---- | C] () -- C:\Users\fabienne\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2011/02/06 10:46:53 | 008,841,704 | R--- | C] () -- C:\Users\fabienne\Desktop\FEVRIER2011.mbf [2010/01/27 16:08:04 | 000,036,560 | ---- | C] () -- C:\Windows\System32\mxntdfg.exe [2009/09/24 03:00:48 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009/09/24 03:00:48 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009/08/03 14:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe [2009/05/11 10:02:10 | 000,086,016 | ---- | C] () -- C:\Windows\System32\vidalhelper.dll [2009/02/07 17:43:43 | 000,093,000 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2009/01/08 08:09:31 | 000,000,440 | ---- | C] () -- C:\Users\fabienne\AppData\Roaming\wklnhst.dat [2008/12/18 19:32:44 | 000,080,384 | ---- | C] () -- C:\Users\fabienne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/12/12 11:50:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2008/12/12 10:54:17 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat [2008/12/12 10:54:17 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat [2008/12/12 10:54:17 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat [2008/12/12 10:54:17 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat [2008/12/12 10:54:17 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat [2008/12/12 10:54:17 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat [2008/12/12 10:54:17 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat [2008/12/12 10:54:17 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat [2008/12/12 10:54:17 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat [2008/12/12 10:54:17 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat [2008/12/12 10:54:17 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat [2008/12/12 10:54:17 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat [2008/12/12 10:54:17 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat [2008/12/12 10:54:17 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat [2008/12/12 10:54:17 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat [2008/12/12 10:54:17 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat [2008/12/12 10:54:17 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat [2008/12/12 10:54:17 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat [2008/12/12 10:54:17 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2008/12/12 10:42:25 | 000,000,025 | ---- | C] () -- C:\Windows\CDE RX560EFGD.ini [2008/12/11 11:18:09 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008/12/09 19:12:56 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini [2008/12/09 19:12:56 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini [2008/12/09 18:48:27 | 000,008,944 | ---- | C] () -- C:\Users\fabienne\AppData\Local\d3d9caps.dat [2008/12/07 12:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys [2008/05/09 03:32:23 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIOFM4.dll [2008/05/09 03:32:23 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN5.dll [2008/05/09 02:53:15 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll [2008/05/09 02:43:57 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini [2008/05/09 02:43:57 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat [2008/05/09 02:43:57 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers tkhdaud.dat [2008/05/09 02:32:41 | 000,003,948 | ---- | C] () -- C:\Windows\System32\drivers vphy.bin [2008/01/21 09:40:50 | 000,700,774 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2008/01/21 09:40:50 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2008/01/21 09:40:50 | 000,134,540 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2008/01/21 09:40:50 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2006/11/02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 13:47:37 | 000,314,864 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 11:33:01 | 000,607,422 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 11:33:01 | 000,111,420 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2006/09/19 09:07:28 | 000,827,392 | ---- | C] () -- C:\Windows\vsnpstd3.exe [2006/04/06 06:17:00 | 000,159,744 | ---- | C] () -- C:\Windows\System32\EPSPTDV.DLL [2004/02/27 16:36:18 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini [2001/12/26 16:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll [2001/09/03 23:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll [2001/07/30 16:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll [2001/07/23 22:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll [color=#E56717]========== Custom Scans ==========[/color] Invalid Environment Variable: ALLUSERSPROFILE\ [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [color=#A23BEC]< %APPDATA%\*. >[/color] [2011/02/14 11:01:31 | 000,000,000 | -HSD | M] -- C:\Users\fabienne\AppData\Roaming\.# [2009/04/15 15:08:03 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Acer Arcade Live [2008/05/09 03:04:50 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Acer GameZone Console [2011/02/22 09:20:44 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Adobe [2009/05/16 17:42:46 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Apple Computer [2009/02/24 09:15:24 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\CyberLink [2011/02/14 11:04:22 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Darty [2010/04/09 10:56:12 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\dvdcss [2009/10/11 18:02:38 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\EPSON [2008/12/11 07:57:22 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\eSobi [2008/12/12 16:05:53 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Google [2011/02/17 09:53:50 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Icones [2008/12/09 18:50:36 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Identities [2008/12/09 19:12:56 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Macromedia [2011/02/17 09:47:27 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Malwarebytes [2006/11/02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Media Center Programs [2011/02/23 18:22:46 | 000,000,000 | --SD | M] -- C:\Users\fabienne\AppData\Roaming\Microsoft [2008/12/14 12:31:21 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Mozilla [2009/07/12 14:09:00 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\OpenOffice.org [2009/04/15 15:07:57 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\PowerCinema [2011/02/25 09:38:37 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Skype [2011/01/15 16:05:51 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\skypePM [2009/01/21 17:58:23 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Sony Corporation [2009/01/08 08:09:32 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Template [2008/12/14 12:31:15 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\TomTom [2010/05/30 18:19:45 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\vlc [2009/01/22 06:20:09 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Windows Live Writer [2010/06/20 15:33:42 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\WinRAR [2010/02/03 21:57:41 | 000,000,000 | ---D | M] -- C:\Users\fabienne\AppData\Roaming\Yahoo! [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2010/11/25 11:38:16 | 020,332,736 | ---- | M] (TomTom International B.V.) -- C:\Users\fabienne\AppData\Roaming\TomTom\HOME\Profiles\1r08zxx8.default\Updates\v2_7_6_2056_win.exe [color=#A23BEC]< %temp%\.exe /s >[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2009/03/08 12:31:42 | 000,348,160 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\dxtmsft.dll [2009/03/08 12:31:37 | 000,216,064 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\dxtrans.dll [2010/12/18 07:22:10 | 000,184,320 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\iepeers.dll [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color] [2008/01/21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008/01/21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008/01/21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006/11/02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006/11/02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

Malekal_morte- · Answer

Voile pour quoi ça rame :
3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 36,00% Memory free [Attention - Mémoire libre insuffisante - désinstaller les programmes inutiles]

Désinstalle Yahoo! Toolbar.

A  mon avis ton Pack Sécurité plus Sérénité, ça fait un peu trop...

On va faire un peu de ménage :


- Télécharge http://www.trendsecure.com/portal/fr/_download/HJTInstall.exe ton bureau.
- Double-clic sur HijackThis
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Enregistre le sur ton bureau
- Envoie le sur http://pjjoint.malekal.com
- Donne le lien pjjoint ici.

Malekal_morte- · Answer

NTI Backup Now 5 Backup - c'est venu avec le Pack Sérénité ? 

Me demande si tu devrais pas le virer (et donc tu déabonnais, j'imagine que c'est payant). 
Sécurise la navigation 
Optimise. 
Backup .... 
=> http://www.dartyserenite.com/ 


Sécuriser la naviation, t'as mis WOT, surement suite à ta désinfection, ce qui est une bonne chose et c'est gratuit.... 
Optimiser, comme tu peux le voir ton PC est une brouette..... l'accumulation des programmes qui tournent ralenti le PC => https://www.malekal.com/comprendre-pourquoi-votre-ordinateur-est-ralenti-2/ 
Donc ces programmes ça atteint vite ses limites, voir son inutiles... 

Pour les backups, tu t'en sens ? 

Désinstalle Spybot, l'est dépassé et inefficace. 
Tu as Malwarebyte et Windows Defender, ça suffit. 
Désinstalle GoogleToolbar. 

Relance HijackThis, coche ces lignes : 

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing) 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll 
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - (no file) 
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll 
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll 
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll 
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file) 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll 
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll 
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (file missing) 
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) 
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll 
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll 
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll 
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing) 
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll 
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe 
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe 
O4 - HKLM\..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot 
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe 
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe 
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" 
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe 
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup 
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup 
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit 
O4 - HKLM\..\Run: [Skytel] Skytel.exe 
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
O4 - HKCU\..\Run: [EPSON Stylus Photo RX560 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBPE.EXE /FU "C:\Users\fabienne\AppData\Local\Temp\E_S888F.tmp" /EF "HKCU" 
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background 
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe" 
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe 
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Users\fabienne\Documents\TomTom HOME 2\TomTomHOMERunner.exe" 
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" 
O4 - HKCU\..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe 
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe 

--> clic sur fix checked 

Redémarre l'ordinateur 

Refais un scan HijackThis, poste le rapport ici. 
Remember when you were young, you shone like the sun. 
Shine on you crazy diamond. 
Now there's a look in your eyes, like black holes in the sky. 
Shine on you crazy diamond.

Malekal_morte- · Answer

Tu n'as pas fixé toutes les lignes sur HijackThis, il en reste.

Malekal_morte- · Answer

il y a encore des lignes présentes sur HijackThis, tu ne les as pas coché ni fixé.
Après à toi de voir si tu veux les garder....
Si le Pc va plus vite.

Malekal_morte- · Answer

oui tu peux désinstaller HijackThis.

Remets WOT avec Avast! version 6, ça ira bien déjà :)

Malekal_morte- · Answer

Garde Malwarebyte :)


Bonne journée :))

Connection internet trés trés lente

15 réponses

Discussions similaires

Newsletters