Ad-aware pro et service sans fil désactivés

Bonjour,

Ton antivirus t'affiche le même message d'erreur ?

• Désactive l'UAC le temps de la désinfection.
• Télécharge FindyKill (par Chiquitine29) sur ton Bureau.
• Lance l'installation avec les paramètres par défaut.
• Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.

(Sous Vista, il faut cliquer droit sur le raccourci de FindyKill et choisir Exécuter en tant qu'administrateur)

• Choisis F pour Français.
• Au menu principal, choisis l'option 1 (Recherche).
• Poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

Une bonne infection Bagle.

• Supprime le fichier qui t'a infecté (Crack par exemple).
• Double-clique sur le raccourci FindyKill sur ton Bureau.

(Sous Vista, il faut cliquer droit sur le raccourci de FindyKill et choisir Exécuter en tant qu'administrateur)

• Au menu principal, choisis l'option 2 (Suppression).

/!\ Il y aura un redémarrage, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

• Ensuite, poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

Tu as retrouvé Internet ?

En tout cas, merci beaucoup, t'es vraiment un chef.
S'il faut considérer le problème résolu, que dois je faire ?

Bonjour,

voici la réponse de MBAM :

Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2036
Windows 6.0.6001 Service Pack 1

25/04/2009 00:29:12
mbam-log-2009-04-25 (00-29-12).txt

Type de recherche: Examen rapide
Eléments examinés: 70754
Temps écoulé: 10 minute(s), 33 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


gb57

LOG.TXT =

Logfile of random's system information tool 1.06 (written by random/random)
Run by Guy at 2009-04-25 00:54:52
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 40 GB (36%) free of 113 GB
Total RAM: 2045 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:55:37, on 25/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fighters\Spywarefighter\SpywarefighterUser.exe
H:\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\PowerArchiver\PASTARTER.EXE
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Program Files\IncrediMail\bin\ImNotfy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Guy\Desktop\RSIT.exe
C:\Program Files\trend micro\Guy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.medion.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Program Files\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [BroadCamRun] "C:\Program Files\NCH Software\BroadCam\broadCam.exe" -logon
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Agent BanqueManager] C:\Program Files\BanqueManager\Bin\Bq30tna.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
O4 - HKLM\..\Run: [vmware-tray] "H:\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /S
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [PowerArchiver Tray] C:\Program Files\PowerArchiver\PASTARTER.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: DipisoftUpdate.lnk = C:\Program Files\Dipisoft\DUpdate.exe
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Startup: Widget SFR.lnk = C:\Program Files\SFRWidget\WidgetSFR.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O4 - Global Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Add to Evernote - res://C:\Program Files\Evernote\Evernote3\enbar.dll/2000
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E9252800} - C:\Program Files\Evernote\Evernote3\enbar.dll
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E9252800} - C:\Program Files\Evernote\Evernote3\enbar.dll
O10 - Unknown file in Winsock LSP: h:\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: h:\vmware\vmware workstation\vsocklib.dll
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.ado [...] nos/gp.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: BroadCam Service (BroadCamService) - Unknown owner - C:\Program Files\NCH Software\BroadCam\broadCam.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Lavasoft Ad-Aware Service - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - C:\Windows\system32\o2flash.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Loki Drivers Auto Removal (pr2agqwb) (pr2agqwb) - Cyanide - C:\Windows\system32\pr2agqwb.exe
O23 - Service: Loki Drivers Auto Removal (pr2agqwc) (pr2agqwc) - Cyanide - C:\Windows\system32\pr2agqwc.exe
O23 - Service: PTK License-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\licenseservice.exe
O23 - Service: PTK Live Update-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\updateservice.exe
O23 - Service: PTK Scanner-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\ScannerService.exe
O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\configservice.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
O23 - Service: STI Simulator - Unknown owner - C:\Windows\System32\PAStiSvc.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - H:\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - H:\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe

--
End of file - 15915 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Scan (Journalière).job
C:\Windows\tasks\Ad-Aware Update (Daily).job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\User_Feed_Synchronization-{008EF939-C707-4160-9F02-D49B38E1B69C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2009-03-18 134344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}]
WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2009-03-15 1883672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]
PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-02-06 61808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-03-12 1883672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-31 806912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-31 806912]
{0b876028-b388-4f6d-922f-f52faec8535f} - WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2009-03-15 1883672]
{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-03-12 1883672]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{965B54B0-71E0-4611-8DE7-F73FA0B20E26} - Babylon - C:\Program Files\Babylon\Babylon Toolbar\BabylonIEToolBar.dll [2008-03-06 267488]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll [2009-03-18 646264]
{A057A204-BACC-4D26-9990-79A187E2698E} - []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EoEngine"= []
"BroadCamRun"=C:\Program Files\NCH Software\BroadCam\broadCam.exe [2008-12-06 368644]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"SPAMfighter Agent"=C:\Program Files\SPAMfighter\SFAgent.exe [2009-01-16 325768]
"Agent BanqueManager"=C:\Program Files\BanqueManager\Bin\Bq30tna.exe [2008-12-13 3779584]
"fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-02-06 454000]
"Babylon Client"=C:\Program Files\Babylon\Babylon-Pro\Babylon.exe [2009-03-11 3551456]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"spywarefighterguard"=C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe [2008-11-18 180872]
"vmware-tray"=H:\VMware\VMware Workstation\vmware-tray.exe [2008-09-18 84528]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2009-01-20 1451248]
"IncrediMail"=C:\Program Files\IncrediMail\bin\IncMail.exe [2009-01-27 251264]
"Magentic"=C:\PROGRA~1\Magentic\bin\Magentic.exe [2008-08-04 488808]
"Free Download Manager"=C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031]
"RegistryMechanic"=C:\Program Files\Registry Mechanic\RMTray.exe [2008-07-03 812952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"PowerArchiver Tray"=C:\Program Files\PowerArchiver\PASTARTER.EXE [2009-03-19 507200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Orbit.lnk - C:\Program Files\Orbitdownloader\orbitdm.exe
Webshots.lnk - C:\Program Files\Webshots\WebshotsTray.exe

C:\Users\Guy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
DipisoftUpdate.lnk - C:\Program Files\Dipisoft\DUpdate.exe
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe
Webshots.lnk - C:\Program Files\Webshots\WebshotsTray.exe
Widget SFR.lnk - C:\Program Files\SFRWidget\WidgetSFR.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"UacDisableNotify"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabledrbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabledrbit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - regedit.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-04-25 00:54:53 ----D---- C:\Program Files\trend micro
2009-04-25 00:54:52 ----D---- C:\rsit
2009-04-24 22:40:19 ----D---- C:\FindyKill
2009-04-24 20:55:33 ----D---- C:\Program Files\Micro Application
2009-04-23 22:51:35 ----D---- C:\Users\Guy\AppData\Roaming\VMware
2009-04-23 20:55:49 ----D---- C:\Program Files\ARPR
2009-04-23 20:08:35 ----A---- C:\Windows\system32\vnetinst.dll
2009-04-23 20:08:29 ----A---- C:\Windows\system32\vmnetdhcp.exe
2009-04-23 20:08:23 ----A---- C:\Windows\system32\vmnat.exe
2009-04-23 20:08:10 ----RA---- C:\Windows\system32\vmnetbridge.dll
2009-04-23 20:08:01 ----A---- C:\Windows\system32\vnetlib.dll
2009-04-23 20:05:26 ----D---- C:\ProgramData\VMware
2009-04-23 20:04:26 ----D---- C:\Program Files\VMware
2009-04-23 19:32:16 ----A---- C:\Windows\system32\xvidvfw.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\xvidcore.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\mpg4c32.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\mcdvd_32.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\divx.dll
2009-04-23 19:32:15 ----D---- C:\Program Files\AVSMedia
2009-04-21 22:34:58 ----D---- C:\Users\Guy\AppData\Roaming\Thinstall
2009-04-21 21:29:08 ----D---- C:\Program Files\DIY DataRecovery MBRtool 2
2009-04-16 08:59:51 ----A---- C:\Windows\system32\winhttp.dll
2009-04-16 08:59:48 ----A---- C:\Windows\system32\xolehlp.dll
2009-04-16 08:59:48 ----A---- C:\Windows\system32\msdtcprx.dll
2009-04-16 08:59:39 ----A---- C:\Windows\system32\rpcss.dll
2009-04-16 08:59:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-04-16 08:59:39 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-04-16 08:59:38 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-04-16 08:59:38 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\sdohlp.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasrecst.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iashost.exe
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasdatastore.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasads.dll
2009-04-16 08:56:39 ----A---- C:\Windows\system32\lsasrv.dll
2009-04-16 08:56:38 ----A---- C:\Windows\system32\secur32.dll
2009-04-16 08:56:38 ----A---- C:\Windows\system32\kernel32.dll
2009-04-16 08:56:37 ----A---- C:\Windows\system32\apilogen.dll
2009-04-16 08:56:37 ----A---- C:\Windows\system32\amxread.dll
2009-04-12 14:18:08 ----D---- C:\Program Files\D4
2009-04-11 17:49:50 ----D---- C:\Program Files\Intuisphere
2009-04-11 17:26:19 ----D---- C:\Program Files\XWebDesignor
2009-04-03 17:32:10 ----D---- C:\Program Files\Lavasoft
2009-04-03 10:02:32 ----A---- C:\TCleaner.txt
2009-04-03 00:33:58 ----D---- C:\ProgramData\Fighters
2009-04-03 00:33:57 ----D---- C:\Program Files\Fighters
2009-04-03 00:32:45 ----A---- C:\Users\Guy\AppData\Roaming\install.txt
2009-04-03 00:07:50 ----D---- C:\ProgramData\Lavasoft
2009-04-02 20:22:29 ----D---- C:\ProgramData\Micro Application
2009-04-01 19:50:21 ----D---- C:\Windows\BDOSCAN8
2009-04-01 18:59:46 ----D---- C:\ProgramData\avg8
2009-04-01 11:01:31 ----A---- C:\Windows\system32\mshtmler.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\mshtmled.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\ieui.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\icardie.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\admparse.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\msls31.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\jsproxy.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\imgutil.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\iernonce.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\ieakeng.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\dxtmsft.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\corpol.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\occache.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\licmgr10.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\inseng.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\iepeers.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\ieaksie.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\dxtrans.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\wextract.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\webcheck.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\mstime.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\msrating.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\msfeedssync.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\iesetup.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\ieakui.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\pngfilt.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\msfeeds.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\advpack.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\vbscript.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\url.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\jscript.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\iedkcs32.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\ieapfltr.dll
2009-04-01 11:01:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\mshta.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\iexpress.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\iesysprep.dll
2009-04-01 11:01:24 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\SetDepNx.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\PDMSetup.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\ieUnatt.exe
2009-04-01 11:01:23 ----A---- C:\Windows\system32\wininet.dll
2009-04-01 11:01:23 ----A---- C:\Windows\system32\iertutil.dll
2009-04-01 11:01:23 ----A---- C:\Windows\system32\ie4uinit.exe
2009-04-01 11:01:22 ----A---- C:\Windows\system32\urlmon.dll
2009-04-01 11:01:20 ----A---- C:\Windows\system32\mshtml.dll
2009-04-01 11:01:20 ----A---- C:\Windows\system32\ieframe.dll
2009-04-01 10:49:09 ----D---- C:\Program Files\FileASSASSIN
2009-04-01 10:07:21 ----D---- C:\Program Files\DreamSys Software
2009-03-30 18:13:47 ----SHD---- C:\Windows\ftpcache
2009-03-30 18:13:39 ----D---- C:\Program Files\Photo Watermark Professional
2009-03-30 17:25:31 ----D---- C:\Program Files\Stamp
2009-03-30 17:25:13 ----N---- C:\Windows\Setup1.exe
2009-03-30 17:25:12 ----A---- C:\Windows\ST6UNST.EXE
2009-03-29 19:14:46 ----D---- C:\Program Files\SFRWidget
2009-03-29 11:28:26 ----D---- C:\Program Files\SyncTime
2009-03-27 14:19:05 ----A---- C:\Windows\system32\javaws.exe
2009-03-27 14:19:05 ----A---- C:\Windows\system32\javaw.exe
2009-03-27 14:19:05 ----A---- C:\Windows\system32\java.exe

======List of files/folders modified in the last 1 months======

2009-04-25 00:54:58 ----D---- C:\Windows\Temp
2009-04-25 00:54:53 ----RD---- C:\Program Files
2009-04-25 00:54:51 ----D---- C:\Users\Guy\AppData\Roaming\Free Download Manager
2009-04-25 00:53:40 ----D---- C:\Users\Guy\AppData\Roaming\Orbit
2009-04-25 00:53:37 ----D---- C:\Downloads
2009-04-24 23:49:05 ----AD---- C:\ProgramData\TEMP
2009-04-24 23:43:30 ----D---- C:\Windows
2009-04-24 23:41:40 ----D---- C:\Windows\Minidump
2009-04-24 23:41:22 ----D---- C:\Program Files\SPAMfighter
2009-04-24 23:40:14 ----D---- C:\ProgramData\Babylon
2009-04-24 23:33:23 ----D---- C:\Program Files\Orbitdownloader
2009-04-24 23:07:05 ----D---- C:\Windows\system32\catroot2
2009-04-24 21:00:41 ----SHD---- C:\Windows\Installer
2009-04-24 21:00:30 ----SHD---- C:\System Volume Information
2009-04-24 21:00:30 ----D---- C:\ProgramData\WeFi
2009-04-24 20:55:34 ----HD---- C:\Config.Msi
2009-04-24 20:37:58 ----HD---- C:\ProgramData
2009-04-24 20:34:33 ----HD---- C:\Windows\system32\drivers
2009-04-24 20:34:33 ----DC---- C:\Windows\system32\DRVSTORE
2009-04-24 20:34:21 ----D---- C:\Windows\System32
2009-04-24 19:25:12 ----A---- C:\Windows\NeroDigital.ini
2009-04-24 08:39:09 ----D---- C:\Program Files\Mozilla Firefox
2009-04-23 22:42:24 ----D---- C:\Windows\system32\Tasks
2009-04-23 21:33:57 ----D---- C:\Users\Guy\AppData\Roaming\dvdcss
2009-04-23 20:08:38 ----D---- C:\Windows\system32\catroot
2009-04-23 20:08:37 ----D---- C:\Windows\inf
2009-04-23 20:06:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-04-22 10:19:50 ----D---- C:\Windows\Tasks
2009-04-21 22:41:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-04-19 22:46:47 ----D---- C:\Program Files\PowerArchiver
2009-04-17 18:01:30 ----D---- C:\Windows\Debug
2009-04-17 06:51:23 ----D---- C:\Windows\winsxs
2009-04-17 04:38:40 ----D---- C:\Windows\system32\wbem
2009-04-17 04:38:40 ----D---- C:\Program Files\Windows Mail
2009-04-17 04:38:37 ----D---- C:\Windows\system32\manifeststore
2009-04-17 04:38:37 ----D---- C:\Windows\AppPatch
2009-04-15 16:55:25 ----A---- C:\Windows\win.ini
2009-04-07 03:13:49 ----D---- C:\Windows\Prefetch
2009-04-06 16:57:24 ----A---- C:\Windows\system32\mrt.exe
2009-04-06 12:46:44 ----D---- C:\Program Files\Dipisoft
2009-04-03 17:15:10 ----D---- C:\Program Files\Winferno
2009-04-03 17:13:01 ----D---- C:\Program Files\Steganos Internet Anonym 2006
2009-04-02 12:53:32 ----D---- C:\Program Files\Registry Mechanic
2009-04-01 20:18:17 ----D---- C:\Program Files\SnadBoy's Revelation v2
2009-04-01 19:50:25 ----SD---- C:\Windows\Downloaded Program Files
2009-04-01 17:20:19 ----D---- C:\Users\Guy\AppData\Roaming\Babylon
2009-04-01 16:00:32 ----D---- C:\Users\Guy\AppData\Roaming\TeraCopy
2009-04-01 11:50:49 ----D---- C:\Windows\rescache
2009-04-01 11:30:58 ----D---- C:\Program Files\Internet Explorer
2009-04-01 11:30:57 ----D---- C:\Windows\system32\migration
2009-04-01 11:30:57 ----D---- C:\Windows\system32\fr-FR
2009-04-01 11:30:57 ----D---- C:\Windows\PolicyDefinitions
2009-04-01 11:30:56 ----D---- C:\Windows\system32\en-US
2009-03-31 13:27:25 ----D---- C:\Program Files\glassfish-v2ur2
2009-03-30 18:13:40 ----RSD---- C:\Windows\Fonts
2009-03-27 14:19:04 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 InCDPass;Nero InCDPass; C:\Windows\system32\drivers\InCDPass.sys [2008-05-06 36648]
R1 incdrm;Nero InCD MRW Remapper; C:\Windows\system32\drivers\InCDRm.sys [2008-05-06 38312]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2008-12-09 215872]
R2 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 55264]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2008-09-18 32304]
R2 vmci;VMware vmci; \??\C:\Windows\system32\Drivers\vmci.sys [2008-09-18 54960]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2008-09-18 31280]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2008-09-18 26288]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\Drivers\vmx86.sys [2008-09-18 857392]
R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\H:\VMware\VMware Workstation\vstor2-ws60.sys [2008-08-25 22448]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2006-11-23 1652968]
R3 NETw3v32;Pilote de carte réseau Intel(R) PRO/Wireless 3945ABG pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-10-30 1786880]
R3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-24 2085888]
R3 StillCam;Pilote d'appareil photo numérique série; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-10-09 192560]
R3 Vfscan;Vfscan; C:\Windows\system32\DRIVERS\vffilter.sys [2008-11-18 15496]
R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys [2008-09-18 23216]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2008-09-18 16560]
R4 InCDfs;Nero InCD File System; C:\Windows\system32\drivers\InCDFs.sys [2008-05-06 118952]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\drivers\mdmxsdk.sys []
S2 XAudio;XAudio; C:\Windows\system32\drivers\XAudio.sys []
S3 a2t2l2ms;a2t2l2ms; C:\Windows\system32\drivers\a2t2l2ms.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [2007-09-25 15152]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2008-06-26 15352]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 FETNDIS;Service de pilote de carte VIA famille Rhine 10/100Mo Fast Ethernet; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2007-03-08 8320]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\drivers\HSXHWAZL.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 PAC7311;CRYSTAL CAM; C:\Windows\system32\DRIVERS\PA707UCM.SYS [2005-10-18 154752]
S3 SIS163u;SiS163 usb Wireless LAN Adapter Driver; C:\Windows\system32\DRIVERS\sis163u.sys [2005-06-20 215040]
S3 UfasoftSnifDriver4;Ufasoft Snif Driver v4; \??\C:\Program Files\Ufasoft\Sniffer\usft_sn4.sys [2009-01-13 34816]
S3 usb_rndisx;Carte RNDIS USB; C:\Windows\system32\DRIVERS\usb8023x.sys [2008-01-19 15872]
S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 winachsf;winachsf; C:\Windows\system32\drivers\winachsf.sys []
S3 winusb;Pilote WinUsb; C:\Windows\system32\DRIVERS\winusb.sys [2008-01-19 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2006-11-02 82432]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\drivers\UIUSys.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2006-11-24 557056]
R2 BroadCamService;BroadCam Service; C:\Program Files\NCH Software\BroadCam\broadCam.exe [2008-12-06 368644]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2008-05-06 1553192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt --defaults-file=C:\Program Files\MySQL\MySQL Server 5.0\my.ini MySQL []
R2 O2Flash;O2Micro Flash Memory; C:\Windows\system32\o2flash.exe [2006-10-19 65536]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PTK License-FIGHTERS-297811811;PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [2008-11-18 283272]
R2 PTK Live Update-FIGHTERS-297811811;PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [2008-11-18 307848]
R2 PTK Scanner-FIGHTERS-297811811;PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [2008-11-18 311944]
R2 PTK SharedAccess-FIGHTERS-297811811;PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [2008-11-18 139912]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 SPAMfighter Update Service;SPAMfighter Update Service; C:\Program Files\SPAMfighter\sfus.exe [2009-01-16 184968]
R2 STI Simulator;STI Simulator; C:\Windows\System32\PAStiSvc.exe [2005-01-14 53248]
R2 VMAuthdService;VMware Authorization Service; H:\VMware\VMware Workstation\vmware-authd.exe [2008-09-18 113200]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\system32\vmnetdhcp.exe [2008-09-18 326192]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\system32\vmnat.exe [2008-09-18 399920]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S1 InCDrec;Nero InCD File System Recognizer; C:\Windows\system32\drivers\InCDRec.sys [2008-05-06 16936]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe []
S2 pr2agqwb;Loki Drivers Auto Removal (pr2agqwb); C:\Windows\system32\pr2agqwb.exe [2007-09-27 410984]
S2 pr2agqwc;Loki Drivers Auto Removal (pr2agqwc); C:\Windows\system32\pr2agqwc.exe [2007-08-02 410984]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-12-01 33752]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-25 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ufad-ws60;VMware Agent Service; H:\VMware\VMware Workstation\vmware-ufad.exe [2008-08-25 191024]

-----------------EOF-----------------


INFO.TXT =

info.txt logfile of random's system information tool 1.06 2009-04-25 00:55:54

======Uninstall list======

-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
-->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\NuNInst.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL
-->C:\Windows\UNNeroShowTime.exe /UNINSTALL
-->C:\Windows\UNNeroVision.exe /UNINSTALL
-->C:\Windows\UNRecode.exe /UNINSTALL
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
802.11 USB Wireless LAN Adapter-->C:\Windows\system32\unwlsdrv.exe SiS163u
Acrobat.com-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
ActiveState ActivePython 2.6.1.1-->MsiExec.exe /I{A1D14FC8-FF6E-4700-A501-BCAFD22B7D15}
ActiveState Komodo Edit 5.0.3-->MsiExec.exe /I{3C197539-FEC1-4CBB-8DC4-FCC3E9441E2A}
ActiveState Komodo IDE 5.0.2-->MsiExec.exe /I{5E63FDF8-59A1-4276-BB26-3783A59CECE2}
Add-in ODF pour Microsoft Word-->MsiExec.exe /I{8D774B5B-A1D9-45B3-AFB4-3F85604961BC}
Adobe AIR-->MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 6.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 6.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 6.0\Uninst.dll"
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe SVG Viewer-->C:\Windows\IsUn040c.exe -f"C:\Windows\System32\Adobe\SVG Viewer\Uninst.isu"
Advanced Archive Password Recovery-->C:\PROGRA~1\ARCHPR\UNWISE.EXE C:\PROGRA~1\ARCHPR\INSTALL.LOG
Advanced Net Tools (ANT)-->MsiExec.exe /I{3AC520D6-717D-4315-BDBD-6B1A57CC8532}
Advanced RAR Password Recovery-->C:\PROGRA~1\ARPR\UNWISE.EXE C:\PROGRA~1\ARPR\INSTALL.LOG
Age of Empires III-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{485775E8-AEB8-46BD-922B-242879E03DD5}
AlauxSoft Comptes et Budget Free V5.0-->"C:\Program Files\Comptes et Budget Free V5.0\unins000.exe"
Aloïs 1.1.1.1-->"C:\Program Files\Alois\unins000.exe"
anooki-v5-0-1 Screen Saver-->C:\Windows\system32\anooki-v5-0-1.scr /u
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Catalyst Control Center Ex-->MsiExec.exe /I{3C263DE1-6015-62E1-E530-DE25FD953D4F}
Atomic Mailbox Password Recovery 2.80-->"C:\Program Files\AtomPark\Atomic Mailbox Password Recovery\unins000.exe"
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
AVS Disc Creator version 2.1-->"C:\Program Files\AVSMedia\DiscCreator\unins000.exe"
AVS Video Converter 6-->"C:\Program Files\AVS4YOU\AVSVideoConverter6\unins000.exe"
AVS Video Tools 5.1-->"C:\Program Files\AVSMedia\VideoTools\unins000.exe"
AVS4YOU Software Navigator 1.3-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
Babylon Toolbar-->MsiExec.exe /I{67A339E5-D8AA-4E88-9278-A571B397F798}
Babylon-->C:\Program Files\Babylon\Babylon-Pro\Utils\uninstbb.exe
BanqueManager 2009 (version 3.0.9.51 finale)-->"C:\Program Files\BanqueManager\unins000.exe"
Borland C++Builder 6-->MsiExec.exe /I{2864C41B-EF2D-4640-95A2-526276524519}
BroadCam-->C:\Program Files\NCH Software\BroadCam\uninst.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
CRYSTAL CAM-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{43F436BF-E0F4-420A-8A5F-CF7E7D92F6C8}\Setup.exe" -l0x40c
Debut Video Capture Software-->C:\Program Files\NCH Software\Debut\uninst.exe
Dev-C++ 5 beta 9 release (4.9.9.2)-->"C:\Dev-Cpp\uninstall.exe"
Dimension 4 v5.0-->MsiExec.exe /I{935FF092-EEBA-4E97-8C1B-CD2364F392A4}
DIY DataRecovery MBRtool 2-->"C:\Program Files\DIY DataRecovery MBRtool 2\uninstall.exe"
EasyPHP 2.0b1-->"C:\Program Files\EasyPHP 2.0b1\unins000.exe"
EditPro 1.56-->"C:\Program Files\EditPro\unins000.exe"
eMule Plus 1.2e-->"G:\Emule+\eMule\unins000.exe"
EPSON Logiciel imprimante-->C:\Windows\system32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON PRINT Image Framer Tool-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{19D2B63E-C1F1-4803-BA8B-4AB8FE216952}\setup.exe" -l0x40c anything
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
ES Eraser 1.1.1-->C:\Program Files\Easy & Secure Eraser\uninst.exe
Eusing Free Registry Cleaner-->C:\PROGRA~1\EUSING~1\UNWISE.EXE C:\PROGRA~1\EUSING~1\INSTALL.LOG
Evernote-->C:\Program Files\InstallShield Installation Information\{0D025345-1033-4F35-A5CE-68CDCDE6CC03}\setup.exe -runfromtemp -l0x0009 -removeonly
Express Burn-->C:\Program Files\NCH Swift Sound\ExpressBurn\uninst.exe
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
EZPhoto Tools-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{81E46F98-2754-4C11-8E9F-93E717AC37DF}\setup.exe" -l0x40c
EZShowtime MMS-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5FB2EF0E-0254-4B7E-98C9-7F83E0C5E6C2}\setup.exe" -l0x40c
EZVideo Mail-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A76D487C-B706-42BA-9E5E-6AEA2AB52B4E}\setup.exe" -l0x40c
Far Manager v1.70-->C:\Program Files\Far\uninstall.exe
Favorit-->c:\users\guy\appdata\local\kgdaczws.bat
FileASSASSIN-->C:\Program Files\FileASSASSIN\uninst.exe
FindyKill-->C:\FindyKill\Uninstal.exe
FlashLynx Video Download Software-->C:\Program Files\NCH Software\FlashLynx\uninst.exe
FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
Free Download Manager 2.5 build 758-->C:\Program Files\Free Download Manager\uninst.exe
FTP Expert 3-->"C:\Program Files\Visicom Media\FTP Expert 3\uninst-ftp.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GameCenter-->C:\Program Files\Cyanide\GameCenter\uninstall.exe
Gestionnaire pour appareils Windows Mobile-->MsiExec.exe /X{904CCF62-818D-4675-BC76-D37EB399F917}
getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
GlassFish V2 UR2-->"C:\Program Files\glassfish-v2ur2\uninstall.exe"
GlassFish v3 Prelude-->"C:\Program Files\glassfish-v3-prelude\uninstall.exe"
Google Earth-->MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}
Guitar Pro 4-->MsiExec.exe /X{491CED7A-0F13-4BE6-957A-59DCA69E8271}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
hx4700 MISC XIP_FRA-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{51A7A451-C4FD-4566-B3E1-3844791F72B3}\Setup.exe"
IncrediMail-->C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Intel(R) PRO Network Connections 11.2.0.69-->MsiExec.exe /i{2222B364-0854-4265-B32E-A142DB9DC7BB} ARPREMOVE=1
Intel(R) PRO Network Connections 11.2.0.69-->MsiExec.exe /i{2222B364-0854-4265-B32E-A142DB9DC7BB} ARPREMOVE=1
IPScan32 v3.0-->"C:\Program Files\Dipisoft\IPScan32\unins000.exe"
J2SE Development Kit 5.0 Update 17-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0150170}
J2SE Runtime Environment 5.0 Update 17-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150170}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JPEG Compression 1.0-->"C:\Program Files\JPEG Compression\unins000.exe"
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LauncherMA-->MsiExec.exe /X{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
Loki-->"C:\Program Files\Cyanide\Loki\unins000.exe"
Loki-->C:\Program Files\Cyanide\Loki\unins000.exe
Look@LAN 2.50 Build 35-->C:\Windows\iun6002.exe "C:\Program Files\Look@LAN\irunin.ini"
Ma-Config.com-->MsiExec.exe /X{06526E3A-92DD-4F45-90CD-902953F1A8D2}
Macromedia Dreamweaver 8-->MsiExec.exe /I{5FD788ED-1A37-4496-9BDD-463F493B27FA}
Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76}
Macromedia Fireworks 8-->MsiExec.exe /I{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}
Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Magentic-->C:\PROGRA~1\Magentic\bin\mgsetup.exe /remove /addon:Magentic
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Manuel de l'appareil Windows Mobile®-->C:\Program Files\Windows Mobile Device Handbook\Windows Mobile Device Handbook\Bin\DHUninstall.exe
MediaCoder 0.6.2-->C:\Program Files\MediaCoder\uninst.exe
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Metro-->C:\Windows\WindowsMobile\Metro\Uninstall.exe Metro
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
MITs Wizard 3.0 for Device-->MsiExec.exe /X{0143CF89-5CF2-4F2D-80D5-BFAE64E1BA00}
Mjrz.net-->C:\Program Files\Mjrz.net\uninstall.exe
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
myBabylon_English Toolbar-->C:\PROGRA~1\MYBABY~1\UNWISE.EXE C:\PROGRA~1\MYBABY~1\INSTALL.LOG
MySQL Server 5.0-->MsiExec.exe /I{E5AED31E-3474-4C85-B492-42149DE37891}
Nero 7 Essentials-->MsiExec.exe /X{98EFD8F0-08DE-48DB-B922-A2EBAB711036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NetBeans IDE 6.5-->"C:\Program Files\NetBeans 6.5\uninstall.exe"
NetSetMan 2.5.2-->"C:\Program Files\NetSetMan\unins000.exe"
NODouble-->C:\Program Files\NODouble\uninstall.exe
O2Micro Flash Memory Card Windows Driver V3.00-->C:\Program Files\InstallShield Installation Information\{3562A082-CF01-419B-8A02-233E31B8A83C}\setup.exe -runfromtemp -l0x0409
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Orbit Downloader-->"C:\Program Files\Orbitdownloader\unins000.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PC Confidential 2008-->"C:\Program Files\Winferno\PC Confidential\unins000.exe"
PDF Password Remover v3.0-->"C:\Program Files\PDF Password Remover v3.0\unins000.exe"
PDFCreator Toolbar-->"C:\Windows\PDFCreator_Toolbar_Uninstaller_7761.exe" _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PhotoStage Slideshow Producer-->C:\Program Files\NCH Software\PhotoStage\uninst.exe
PhotoWatermark Professional-->"C:\Program Files\Photo Watermark Professional\unins000.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
PowerArchiver 2009 French-->MsiExec.exe /I{18A59CF2-76D3-4031-A380-6B05F4A9B190}
PowerArchiver 2010-->MsiExec.exe /I{47AE3CB0-0FDE-4721-A4B8-F5E0AD925F53}
Prism Video Converter-->C:\Program Files\NCH Software\Prism\uninst.exe
Privacy Guardian 3.2-->"C:\Program Files\Privacy Guardian\unins000.exe"
Python 2.5.1-->MsiExec.exe /I{31800004-6386-4999-A519-518F2D78D8F0}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Registry Mechanic 8.0-->"C:\Program Files\Registry Mechanic\unins000.exe" /Log
RegistrySmart-->MsiExec.exe /X{1212C66E-63BC-42E5-AB01-92CD0C635344}
Retriever 1.1.4.0-->"C:\Program Files\Retriever\unins000.exe"
Ruby-186-26-->c:\ruby\uninstall.exe
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002)-->MsiExec.exe /X{09959E11-AD5D-408E-96AF-E3346954D6B8}
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002)-->MsiExec.exe /X{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}
SnadBoy's Revelation v2-->C:\PROGRA~1\SNADBO~1\UNWISE.EXE C:\PROGRA~1\SNADBO~1\INSTALL.LOG
SPAMfighter-->"C:\Program Files\SPAMfighter\uninstall.exe" Remove
Spyware Doctor 2.1-->"C:\Program Files\Spyware Doctor\unins000.exe"
SPYWAREfighter-->"C:\Program Files\Fighters\spywarefighter\Uninstall.exe" Remove
SPYWAREfighter-->MsiExec.exe /I{B940005A-1212-4E87-885B-1FF80B40D6F4}
Stamp 2.8-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Stamp\ST6UNST.LOG"
STOIK Video Converter 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A8DF8593-F619-47DE-AD27-BCABF233433A}\setup.exe" -l0x9 -removeonly
SUPER © Version 2009.bld.35 (Jan 5, 2009)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
SweetIM for Messenger 2.6-->MsiExec.exe /X{C359507C-30B1-48A6-BD9B-C7B1CC3B06D7}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
SyncTime - Psylon-->C:\Program Files\SyncTime\SyncTime.exe -uninstall
TeraCopy 1.22 Pro-->"C:\Program Files\TeraCopy\unins000.exe"
ThunderSite-->MsiExec.exe /X{25D85D58-E3C2-4617-919F-026681B62E82}
Titan Quest Immortal Throne-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}\setup.exe" -l0x40c -removeonly
Titan Quest-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}\setup.exe" -l0x40c -removeonly
TrueCrypt-->"C:\Program Files\TrueCrypt\TrueCrypt Setup.exe" /u
VASM-->C:\Windows\uninst.exe -fC:\VASM\DeIsL1.isu -cC:\VASM\_ISREG32.DLL
VistaBootPRO 3.3-->MsiExec.exe /I{6C9FA746-8759-4040-A436-42922CB3492E}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VMware Workstation-->MsiExec.exe /I{A3FF5CB2-FB35-4658-8751-9EDE1D65B3AA}
Web Acappella-->"C:\Program Files\Intuisphere\Web Acappella\unins000.exe"
Webshots!-->C:\Windows\WebshotsUninstall.exe
WeFi 3.4.2.0-->C:\Program Files\WeFi\uninst.exe
WeFiBar Toolbar-->C:\PROGRA~1\WeFiBar\UNWISE.EXE /U C:\PROGRA~1\WeFiBar\INSTALL.LOG
Widget SFR 2.3-->C:\Program Files\SFRWidget\uninst.exe
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Movie Maker Bêta-->MsiExec.exe /X{F874DF52-A31F-44C1-A606-EF40F1549261}
Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Mobile Device Center Driver Update-->MsiExec.exe /X{E7044E25-3038-4A76-9064-344AC038043E}
Wing IDE 3.1.7-1-->"C:\Program Files\Wing IDE 3.1\unins000.exe"
WordPerfect Office X3-->MsiExec.exe /I{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}
wxPython 2.8.9.1 (ansi) for Python 2.5-->"C:\Python25\Lib\site-packages\wx-2.8-msw-ansi\unins000.exe"
Xenon 2000 - Project PCF-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93EE3C83-725F-4EA4-891A-CD6B019FCDC1}\Setup.exe"
Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"
XWebDesignor -->C:\Program Files\XWebDesignor\uninst.exe
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
YouTUBE (TM) movie downloader-->MsiExec.exe /X{2F8BE445-D14C-40E2-AF62-E43539FD1500}
YouTube Video Downloader 2.3.4-->"C:\Program Files\Tomato\YouTube Video Downloader\unins000.exe"

======Security center information======

AS: Windows Defender (disabled)

======System event log======

Computer Name: PC-de-Guy
Event Code: 19
Message: Échec du spouleur d’impression pour partager l’imprimante PDFCreator avec le nom de la ressource partagée PDFCreator. Erreur 2114. L’imprimante n’est pas utilisable par d’autres personnes sur le réseau.
Record Number: 4780020
Source Name: Microsoft-Windows-PrintSpooler
Time Written: 20090424213856.000000-000
Event Type: Erreur
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-Guy
Event Code: 19
Message: Échec du spouleur d’impression pour partager l’imprimante EPSON Stylus CX3200 avec le nom de la ressource partagée EPSON Stylus CX3200. Erreur 2114. L’imprimante n’est pas utilisable par d’autres personnes sur le réseau.
Record Number: 4780021
Source Name: Microsoft-Windows-PrintSpooler
Time Written: 20090424213856.000000-000
Event Type: Erreur
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-Guy
Event Code: 7000
Message: Le service Lavasoft Ad-Aware Service n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 4780050
Source Name: Service Control Manager
Time Written: 20090424213955.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Guy
Event Code: 7000
Message: Le service Nero Registry InCD Service n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 4780066
Source Name: Service Control Manager
Time Written: 20090424213955.00000

Voila le fichier : Ad-Report-Scan-25.04.2009.log




------- LOGFILE OF AD-REMOVER 1.1.3.3 | ONLY XP/VISTA -------

Updated by C_XX on 24/04/2009 at 12:00
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

Start at: 2:11:42, 25/04/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows Vista™ Home Premium Service Pack 1 (version 6.0.6001)
Computer Name: PC-DE-GUY
Current User: Guy - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: FAT32)
- E:\ (File System: CDFS)
- G:\ (File System: FAT32)
- H:\ (File System: NTFS)
- I:\ (File System: NTFS)

============ Known Adwares Found ============

.
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31}
HKCR\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
HKLM\Software\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
.
C:\Program Files\Conduit
C:\Users\Guy\AppData\Roaming\Mozilla\Firefox\Profiles\mojjw5am.default\searchplugins\conduit.xml

+-----------------| Eorezo Elements Found:

HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
.
C:\Users\Guy\AppData\Roaming\EoRezo

+-----------------| It's TV Elements Found:

HKCU\Software\ItsLabel
HKU\S-1-5-21-3218261164-2198993616-1224073061-1000\Software\ItsLabel
.
C:\Users\Guy\AppData\Roaming\ItsLabel

+-----------------| Sweetim Elements Found:

HKCR\MediaPlayer.GraphicsUtils
HKCR\MediaPlayer.GraphicsUtils.1
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\MediaPlayer.GraphicsUtils
HKLM\Software\Classes\MediaPlayer.GraphicsUtils.1
HKLM\Software\Classes\MgMediaPlayer.GifAnimator
HKLM\Software\Classes\MgMediaPlayer.GifAnimator.1
HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-3218261164-2198993616-1224073061-1000\Software\Sweetim
.
C:\Windows\Installer\5401e.msi
C:\Windows\Installer\b51a61.msi
C:\Users\Guy\Appdata\LocalLow\SweetIM

+-----------------| Added Scan:

---- Mozilla FireFox Version 3.0.7 ----

ProfilePath: mojjw5am.default (Guy)
.
Prefs.js: Browser.Search.DefaultEngineName: "MyStart Search"
Prefs.js: Browser.Search.SelectedEngine: "Google"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1682929&SearchSource=3&q="
.
(Prefs.js) FOUND: user_pref("CT1682929.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx" );
(Prefs.js) FOUND: user_pref("CT1682929.CTPBaseServerUrl", "http://grouping.services.conduit.com/" );
(Prefs.js) FOUND: user_pref("CT1682929.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1682929&SearchSource=2&q=" );
(Prefs.js) FOUND: user_pref("CT1682929.Search\\÷FromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1682929&SearchSource=2&q=" );
(Prefs.js) FOUND: user_pref("CT1682929.Server", "http://users.conduit.com" );
(Prefs.js) FOUND: user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1682929&SearchSource=3&q=" );
.
.
.
.

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS02
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://mystart.magentic.com/

[HKEY_USERS\S-1-5-21-3218261164-2198993616-1224073061-1000\..\Internet Explorer\Main]

Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS02
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://mystart.magentic.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.medion.com/
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://y.lo.st

+---------------------------------------------------------------------------+

4977 Byte(s) - C:\Ad-Report-Scan-25.04.2009.log

0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

End at: 2:30:39 | 25/04/2009
.
+-----------------| E.O.F
.

GB57

Bonjour, mes excuses pour le retard du au sommeil


rapportclean =


------- LOGFILE OF AD-REMOVER 1.1.3.3 | ONLY XP/VISTA -------

Updated by C_XX on 24/04/2009 at 12:00
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

**** LIMITED TO ****

Known Adwares
Eorezo
It's TV
Sweetim

********************

Start at: 2:55:07, 25/04/2009 | Boot mode: Normal Boot
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows Vista™ Home Premium Service Pack 1 (version 6.0.6001)
Computer Name: PC-DE-GUY
Current User: Guy - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: FAT32)
- E:\ (File System: CDFS)
- G:\ (File System: FAT32)
- H:\ (File System: NTFS)
- I:\ (File System: NTFS)

(!) ---- IE start pages/Tabs reset

============ Known Adwares Deleted ============

.
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31}
HKCR\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
.
C:\Program Files\Conduit
C:\Users\Guy\AppData\Roaming\Mozilla\Firefox\Profiles\mojjw5am.default\searchplugins\conduit.xml

+-----------------| Eorezo Elements Deleted :

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
.
C:\Users\Guy\AppData\Roaming\EoRezo

+-----------------| It's TV Elements Deleted :

HKCU\Software\ItsLabel
.
C:\Users\Guy\AppData\Roaming\ItsLabel

+-----------------| Sweetim Elements Deleted :

HKCU\Software\Microsoft\Internet Explorer\Internetregistry\Registry\User\S-1-5-21-3218261164-2198993616-1224073061-1000\Software\Sweetim
HKCR\MediaPlayer.GraphicsUtils
HKCR\MediaPlayer.GraphicsUtils.1
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
.
C:\Windows\Installer\5401e.msi
C:\Windows\Installer\b51a61.msi
C:\Users\Guy\Appdata\LocalLow\SweetIM

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.


+-----------------| Added Scan :

---- Mozilla FireFox Version 3.0.7 ----

ProfilePath: mojjw5am.default (Guy)
.
Prefs.js: Browser.Search.DefaultEngineName: "MyStart Search"
Prefs.js: Browser.Search.SelectedEngine: "Google"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1682929&SearchSource=3&q="
.
.
.
.
.

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_USERS\S-1-5-21-3218261164-2198993616-1224073061-1000\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

4483 Byte(s) - C:\Ad-Report-Clean-25.04.2009.log
5206 Byte(s) - C:\Ad-Report-Scan-25.04.2009.log

2 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
3 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

End at: 3:05:46 | 25/04/2009
.
+-----------------| E.O.F
.

Bonjour, excuses moi pour cette nuit, je me suis endormi brusquement avant de pouvoir te prévenir :

voici le rélultat de l'analyse :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Guy at 2009-04-25 15:31:36
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 50 GB (44%) free of 113 GB
Total RAM: 2045 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:31:53, on 25/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\NCH Software\BroadCam\broadCam.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\Program Files\BanqueManager\Bin\Bq30tna.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\Fighters\Spywarefighter\SpywarefighterUser.exe
H:\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\PowerArchiver\PASTARTER.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Program Files\Micro Application\LauncherMA.exe
C:\Program Files\SFRWidget\WidgetSFR.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
c:\program files\fighters\spywarefighter\SPYWAREfighterTray.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\dfrgui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Users\Guy\Desktop\VIRUS\RSIT.exe
C:\Program Files\trend micro\Guy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: WeFiBar Toolbar - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB0.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Program Files\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [BroadCamRun] "C:\Program Files\NCH Software\BroadCam\broadCam.exe" -logon
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Agent BanqueManager] C:\Program Files\BanqueManager\Bin\Bq30tna.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
O4 - HKLM\..\Run: [vmware-tray] "H:\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /S
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [PowerArchiver Tray] C:\Program Files\PowerArchiver\PASTARTER.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: DipisoftUpdate.lnk = C:\Program Files\Dipisoft\DUpdate.exe
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Startup: Widget SFR.lnk = C:\Program Files\SFRWidget\WidgetSFR.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O4 - Global Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Add to Evernote - res://C:\Program Files\Evernote\Evernote3\enbar.dll/2000
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E9252800} - C:\Program Files\Evernote\Evernote3\enbar.dll
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E9252800} - C:\Program Files\Evernote\Evernote3\enbar.dll
O10 - Unknown file in Winsock LSP: h:\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: h:\vmware\vmware workstation\vsocklib.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: BroadCam Service (BroadCamService) - Unknown owner - C:\Program Files\NCH Software\BroadCam\broadCam.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - O2Micro International - C:\Windows\system32\o2flash.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Loki Drivers Auto Removal (pr2agqwb) (pr2agqwb) - Cyanide - C:\Windows\system32\pr2agqwb.exe
O23 - Service: Loki Drivers Auto Removal (pr2agqwc) (pr2agqwc) - Cyanide - C:\Windows\system32\pr2agqwc.exe
O23 - Service: PTK License-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\licenseservice.exe
O23 - Service: PTK Live Update-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\updateservice.exe
O23 - Service: PTK Scanner-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\ScannerService.exe
O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\configservice.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
O23 - Service: STI Simulator - Unknown owner - C:\Windows\System32\PAStiSvc.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - H:\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - H:\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe

--
End of file - 16317 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Scan (JOURastuce).job
C:\Windows\tasks\Ad-Aware Scan (MENScomplete).job
C:\Windows\tasks\Ad-Aware Scan (SEMprofile).job
C:\Windows\tasks\Ad-Aware Update (Daily).job
C:\Windows\tasks\PCConfidential.job
C:\Windows\tasks\User_Feed_Synchronization-{008EF939-C707-4160-9F02-D49B38E1B69C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2009-03-18 134344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}]
WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2009-03-15 1883672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]
PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-02-06 61808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-03-12 1883672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-31 806912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-31 806912]
{0b876028-b388-4f6d-922f-f52faec8535f} - WeFiBar Toolbar - C:\Program Files\WeFiBar\tbWeF1.dll [2009-03-15 1883672]
{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - myBabylon English Toolbar - C:\Program Files\myBabylon_English\tbmyB0.dll [2009-03-12 1883672]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{965B54B0-71E0-4611-8DE7-F73FA0B20E26} - Babylon - C:\Program Files\Babylon\Babylon Toolbar\BabylonIEToolBar.dll [2008-03-06 267488]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll [2009-03-18 646264]
{A057A204-BACC-4D26-9990-79A187E2698E} - []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BroadCamRun"=C:\Program Files\NCH Software\BroadCam\broadCam.exe [2008-12-06 368644]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"SPAMfighter Agent"=C:\Program Files\SPAMfighter\SFAgent.exe [2009-01-16 325768]
"Agent BanqueManager"=C:\Program Files\BanqueManager\Bin\Bq30tna.exe [2008-12-13 3779584]
"fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-02-06 454000]
"Babylon Client"=C:\Program Files\Babylon\Babylon-Pro\Babylon.exe [2009-03-11 3551456]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"spywarefighterguard"=C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe [2008-11-18 180872]
"vmware-tray"=H:\VMware\VMware Workstation\vmware-tray.exe [2008-09-18 84528]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2009-04-25 516440]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2009-01-20 1451248]
"IncrediMail"=C:\Program Files\IncrediMail\bin\IncMail.exe [2009-01-27 251264]
"Magentic"=C:\PROGRA~1\Magentic\bin\Magentic.exe [2008-08-04 488808]
"Free Download Manager"=C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031]
"RegistryMechanic"=C:\Program Files\Registry Mechanic\RMTray.exe [2008-07-03 812952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"PowerArchiver Tray"=C:\Program Files\PowerArchiver\PASTARTER.EXE [2009-03-19 507200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Orbit.lnk - C:\Program Files\Orbitdownloader\orbitdm.exe
Webshots.lnk - C:\Program Files\Webshots\WebshotsTray.exe

C:\Users\Guy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
DipisoftUpdate.lnk - C:\Program Files\Dipisoft\DUpdate.exe
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe
Webshots.lnk - C:\Program Files\Webshots\WebshotsTray.exe
Widget SFR.lnk - C:\Program Files\SFRWidget\WidgetSFR.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"EnableLUA"=0
"UacDisableNotify"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabledrbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabledrbit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - regedit.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-04-25 15:31:36 ----D---- C:\rsit
2009-04-25 12:22:19 ----A---- C:\Windows\system32\lsdelete.exe
2009-04-25 12:04:44 ----HDC---- C:\ProgramData\{37334740-81FC-4266-BC84-AEF42AC7DBFB}
2009-04-25 01:49:59 ----D---- C:\Program Files\Ad-remover
2009-04-25 00:54:53 ----D---- C:\Program Files\trend micro
2009-04-24 20:55:33 ----D---- C:\Program Files\Micro Application
2009-04-23 22:51:35 ----D---- C:\Users\Guy\AppData\Roaming\VMware
2009-04-23 20:55:49 ----D---- C:\Program Files\ARPR
2009-04-23 20:08:35 ----A---- C:\Windows\system32\vnetinst.dll
2009-04-23 20:08:29 ----A---- C:\Windows\system32\vmnetdhcp.exe
2009-04-23 20:08:23 ----A---- C:\Windows\system32\vmnat.exe
2009-04-23 20:08:10 ----RA---- C:\Windows\system32\vmnetbridge.dll
2009-04-23 20:08:01 ----A---- C:\Windows\system32\vnetlib.dll
2009-04-23 20:05:26 ----D---- C:\ProgramData\VMware
2009-04-23 20:04:26 ----D---- C:\Program Files\VMware
2009-04-23 19:32:16 ----A---- C:\Windows\system32\xvidvfw.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\xvidcore.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\mpg4c32.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\mcdvd_32.dll
2009-04-23 19:32:16 ----A---- C:\Windows\system32\divx.dll
2009-04-23 19:32:15 ----D---- C:\Program Files\AVSMedia
2009-04-21 22:34:58 ----D---- C:\Users\Guy\AppData\Roaming\Thinstall
2009-04-21 21:29:08 ----D---- C:\Program Files\DIY DataRecovery MBRtool 2
2009-04-16 08:59:51 ----A---- C:\Windows\system32\winhttp.dll
2009-04-16 08:59:48 ----A---- C:\Windows\system32\xolehlp.dll
2009-04-16 08:59:48 ----A---- C:\Windows\system32\msdtcprx.dll
2009-04-16 08:59:39 ----A---- C:\Windows\system32\rpcss.dll
2009-04-16 08:59:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-04-16 08:59:39 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-04-16 08:59:38 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-04-16 08:59:38 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\sdohlp.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasrecst.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iashost.exe
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasdatastore.dll
2009-04-16 08:59:37 ----A---- C:\Windows\system32\iasads.dll
2009-04-16 08:56:39 ----A---- C:\Windows\system32\lsasrv.dll
2009-04-16 08:56:38 ----A---- C:\Windows\system32\secur32.dll
2009-04-16 08:56:38 ----A---- C:\Windows\system32\kernel32.dll
2009-04-16 08:56:37 ----A---- C:\Windows\system32\apilogen.dll
2009-04-16 08:56:37 ----A---- C:\Windows\system32\amxread.dll
2009-04-12 14:18:08 ----D---- C:\Program Files\D4
2009-04-11 17:49:50 ----D---- C:\Program Files\Intuisphere
2009-04-11 17:26:19 ----D---- C:\Program Files\XWebDesignor
2009-04-03 17:32:10 ----D---- C:\Program Files\Lavasoft
2009-04-03 10:02:32 ----A---- C:\TCleaner.txt
2009-04-03 00:33:58 ----D---- C:\ProgramData\Fighters
2009-04-03 00:33:57 ----D---- C:\Program Files\Fighters
2009-04-03 00:32:45 ----A---- C:\Users\Guy\AppData\Roaming\install.txt
2009-04-03 00:07:50 ----D---- C:\ProgramData\Lavasoft
2009-04-02 20:22:29 ----D---- C:\ProgramData\Micro Application
2009-04-01 19:50:21 ----D---- C:\Windows\BDOSCAN8
2009-04-01 18:59:46 ----D---- C:\ProgramData\avg8
2009-04-01 11:01:31 ----A---- C:\Windows\system32\mshtmler.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\mshtmled.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\ieui.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\icardie.dll
2009-04-01 11:01:31 ----A---- C:\Windows\system32\admparse.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\msls31.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\jsproxy.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\imgutil.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\iernonce.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\ieakeng.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\dxtmsft.dll
2009-04-01 11:01:30 ----A---- C:\Windows\system32\corpol.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\occache.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\licmgr10.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\inseng.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\iepeers.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\ieaksie.dll
2009-04-01 11:01:29 ----A---- C:\Windows\system32\dxtrans.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\wextract.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\webcheck.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\mstime.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\msrating.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\msfeedssync.exe
2009-04-01 11:01:28 ----A---- C:\Windows\system32\iesetup.dll
2009-04-01 11:01:28 ----A---- C:\Windows\system32\ieakui.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\pngfilt.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\msfeeds.dll
2009-04-01 11:01:27 ----A---- C:\Windows\system32\advpack.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\vbscript.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\url.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\jscript.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\iedkcs32.dll
2009-04-01 11:01:26 ----A---- C:\Windows\system32\ieapfltr.dll
2009-04-01 11:01:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\mshta.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\iexpress.exe
2009-04-01 11:01:25 ----A---- C:\Windows\system32\iesysprep.dll
2009-04-01 11:01:24 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\SetDepNx.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\PDMSetup.exe
2009-04-01 11:01:24 ----A---- C:\Windows\system32\ieUnatt.exe
2009-04-01 11:01:23 ----A---- C:\Windows\system32\wininet.dll
2009-04-01 11:01:23 ----A---- C:\Windows\system32\iertutil.dll
2009-04-01 11:01:23 ----A---- C:\Windows\system32\ie4uinit.exe
2009-04-01 11:01:22 ----A---- C:\Windows\system32\urlmon.dll
2009-04-01 11:01:20 ----A---- C:\Windows\system32\mshtml.dll
2009-04-01 11:01:20 ----A---- C:\Windows\system32\ieframe.dll
2009-04-01 10:49:09 ----D---- C:\Program Files\FileASSASSIN
2009-04-01 10:07:21 ----D---- C:\Program Files\DreamSys Software
2009-03-30 18:13:47 ----SHD---- C:\Windows\ftpcache
2009-03-30 18:13:39 ----D---- C:\Program Files\Photo Watermark Professional
2009-03-30 17:25:31 ----D---- C:\Program Files\Stamp
2009-03-30 17:25:13 ----N---- C:\Windows\Setup1.exe
2009-03-30 17:25:12 ----A---- C:\Windows\ST6UNST.EXE
2009-03-29 19:14:46 ----D---- C:\Program Files\SFRWidget
2009-03-29 11:28:26 ----D---- C:\Program Files\SyncTime
2009-03-27 14:19:05 ----A---- C:\Windows\system32\javaws.exe
2009-03-27 14:19:05 ----A---- C:\Windows\system32\javaw.exe
2009-03-27 14:19:05 ----A---- C:\Windows\system32\java.exe

======List of files/folders modified in the last 1 months======

2009-04-25 15:31:38 ----D---- C:\Windows\Temp
2009-04-25 15:29:12 ----D---- C:\Users\Guy\AppData\Roaming\Free Download Manager
2009-04-25 15:28:51 ----SHD---- C:\Windows\Installer
2009-04-25 15:28:51 ----HD---- C:\Config.Msi
2009-04-25 15:28:48 ----D---- C:\Program Files\Java
2009-04-25 15:28:25 ----D---- C:\Windows\System32
2009-04-25 15:27:17 ----SHD---- C:\System Volume Information
2009-04-25 15:11:01 ----D---- C:\ProgramData\Babylon
2009-04-25 13:11:37 ----D---- C:\Program Files\SPAMfighter
2009-04-25 12:27:26 ----D---- C:\Windows\Tasks
2009-04-25 12:27:26 ----D---- C:\Windows\system32\Tasks
2009-04-25 12:19:16 ----AD---- C:\ProgramData\TEMP
2009-04-25 12:13:58 ----D---- C:\Windows
2009-04-25 12:11:43 ----D---- C:\Users\Guy\AppData\Roaming\Orbit
2009-04-25 12:06:52 ----D---- C:\Windows\system32\catroot
2009-04-25 12:06:51 ----HD---- C:\Windows\system32\drivers
2009-04-25 12:06:49 ----DC---- C:\Windows\system32\DRVSTORE
2009-04-25 12:04:44 ----HD---- C:\ProgramData
2009-04-25 12:01:04 ----A---- C:\Windows\NeroDigital.ini
2009-04-25 11:24:33 ----D---- C:\Program Files\Registry Mechanic
2009-04-25 10:26:49 ----D---- C:\Program Files\Orbitdownloader
2009-04-25 03:05:32 ----SD---- C:\Windows\Downloaded Program Files
2009-04-25 03:01:02 ----RD---- C:\Program Files
2009-04-25 01:46:23 ----D---- C:\Downloads
2009-04-24 23:41:40 ----D---- C:\Windows\Minidump
2009-04-24 23:07:05 ----D---- C:\Windows\system32\catroot2
2009-04-24 21:00:30 ----D---- C:\ProgramData\WeFi
2009-04-24 08:39:09 ----D---- C:\Program Files\Mozilla Firefox
2009-04-23 21:33:57 ----D---- C:\Users\Guy\AppData\Roaming\dvdcss
2009-04-23 20:08:37 ----D---- C:\Windows\inf
2009-04-23 20:06:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-04-21 22:41:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-04-19 22:46:47 ----D---- C:\Program Files\PowerArchiver
2009-04-17 18:01:30 ----D---- C:\Windows\Debug
2009-04-17 06:51:23 ----D---- C:\Windows\winsxs
2009-04-17 04:38:40 ----D---- C:\Windows\system32\wbem
2009-04-17 04:38:40 ----D---- C:\Program Files\Windows Mail
2009-04-17 04:38:37 ----D---- C:\Windows\system32\manifeststore
2009-04-17 04:38:37 ----D---- C:\Windows\AppPatch
2009-04-15 16:55:25 ----A---- C:\Windows\win.ini
2009-04-07 03:13:49 ----D---- C:\Windows\Prefetch
2009-04-06 16:57:24 ----A---- C:\Windows\system32\mrt.exe
2009-04-06 12:46:44 ----D---- C:\Program Files\Dipisoft
2009-04-03 17:15:10 ----D---- C:\Program Files\Winferno
2009-04-03 17:13:01 ----D---- C:\Program Files\Steganos Internet Anonym 2006
2009-04-01 20:18:17 ----D---- C:\Program Files\SnadBoy's Revelation v2
2009-04-01 17:20:19 ----D---- C:\Users\Guy\AppData\Roaming\Babylon
2009-04-01 16:00:32 ----D---- C:\Users\Guy\AppData\Roaming\TeraCopy
2009-04-01 11:50:49 ----D---- C:\Windows\rescache
2009-04-01 11:30:58 ----D---- C:\Program Files\Internet Explorer
2009-04-01 11:30:57 ----D---- C:\Windows\system32\migration
2009-04-01 11:30:57 ----D---- C:\Windows\system32\fr-FR
2009-04-01 11:30:57 ----D---- C:\Windows\PolicyDefinitions
2009-04-01 11:30:56 ----D---- C:\Windows\system32\en-US
2009-03-31 13:27:25 ----D---- C:\Program Files\glassfish-v2ur2
2009-03-30 18:13:40 ----RSD---- C:\Windows\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 InCDPass;Nero InCDPass; C:\Windows\system32\drivers\InCDPass.sys [2008-05-06 36648]
R1 incdrm;Nero InCD MRW Remapper; C:\Windows\system32\drivers\InCDRm.sys [2008-05-06 38312]
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys [2008-12-09 215872]
R2 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 55264]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2008-09-18 32304]
R2 vmci;VMware vmci; \??\C:\Windows\system32\Drivers\vmci.sys [2008-09-18 54960]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2008-09-18 31280]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2008-09-18 26288]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\Drivers\vmx86.sys [2008-09-18 857392]
R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\H:\VMware\VMware Workstation\vstor2-ws60.sys [2008-08-25 22448]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2006-11-23 1652968]
R3 NETw3v32;Pilote de carte réseau Intel(R) PRO/Wireless 3945ABG pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-10-30 1786880]
R3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-24 2085888]
R3 StillCam;Pilote d'appareil photo numérique série; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-19 9216]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-10-09 192560]
R3 Vfscan;Vfscan; C:\Windows\system32\DRIVERS\vffilter.sys [2008-11-18 15496]
R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys [2008-09-18 23216]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2008-09-18 16560]
R4 InCDfs;Nero InCD File System; C:\Windows\system32\drivers\InCDFs.sys [2008-05-06 118952]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\drivers\mdmxsdk.sys []
S2 XAudio;XAudio; C:\Windows\system32\drivers\XAudio.sys []
S3 aniqcr22;aniqcr22; C:\Windows\system32\drivers\aniqcr22.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [2007-09-25 15152]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2008-06-26 15352]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 FETNDIS;Service de pilote de carte VIA famille Rhine 10/100Mo Fast Ethernet; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2007-03-08 8320]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\drivers\HSXHWAZL.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 PAC7311;CRYSTAL CAM; C:\Windows\system32\DRIVERS\PA707UCM.SYS [2005-10-18 154752]
S3 SIS163u;SiS163 usb Wireless LAN Adapter Driver; C:\Windows\system32\DRIVERS\sis163u.sys [2005-06-20 215040]
S3 UfasoftSnifDriver4;Ufasoft Snif Driver v4; \??\C:\Program Files\Ufasoft\Sniffer\usft_sn4.sys [2009-01-13 34816]
S3 usb_rndisx;Carte RNDIS USB; C:\Windows\system32\DRIVERS\usb8023x.sys [2008-01-19 15872]
S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 winachsf;winachsf; C:\Windows\system32\drivers\winachsf.sys []
S3 winusb;Pilote WinUsb; C:\Windows\system32\DRIVERS\winusb.sys [2008-01-19 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2006-11-02 82432]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\drivers\UIUSys.sys []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2006-11-24 557056]
R2 BroadCamService;BroadCam Service; C:\Program Files\NCH Software\BroadCam\broadCam.exe [2008-12-06 368644]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2008-05-06 1553192]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-04-25 953168]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt --defaults-file=C:\Program Files\MySQL\MySQL Server 5.0\my.ini MySQL []
R2 O2Flash;O2Micro Flash Memory; C:\Windows\system32\o2flash.exe [2006-10-19 65536]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PTK License-FIGHTERS-297811811;PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [2008-11-18 283272]
R2 PTK Live Update-FIGHTERS-297811811;PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [2008-11-18 307848]
R2 PTK Scanner-FIGHTERS-297811811;PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [2008-11-18 311944]
R2 PTK SharedAccess-FIGHTERS-297811811;PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [2008-11-18 139912]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 SPAMfighter Update Service;SPAMfighter Update Service; C:\Program Files\SPAMfighter\sfus.exe [2009-01-16 184968]
R2 STI Simulator;STI Simulator; C:\Windows\System32\PAStiSvc.exe [2005-01-14 53248]
R2 VMAuthdService;VMware Authorization Service; H:\VMware\VMware Workstation\vmware-authd.exe [2008-09-18 113200]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\system32\vmnetdhcp.exe [2008-09-18 326192]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\system32\vmnat.exe [2008-09-18 399920]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S1 InCDrec;Nero InCD File System Recognizer; C:\Windows\system32\drivers\InCDRec.sys [2008-05-06 16936]
S2 pr2agqwb;Loki Drivers Auto Removal (pr2agqwb); C:\Windows\system32\pr2agqwb.exe [2007-09-27 410984]
S2 pr2agqwc;Loki Drivers Auto Removal (pr2agqwc); C:\Windows\system32\pr2agqwc.exe [2007-08-02 410984]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-12-01 33752]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-25 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ufad-ws60;VMware Agent Service; H:\VMware\VMware Workstation\vmware-ufad.exe [2008-08-25 191024]

-----------------EOF-----------------

gb57

Bonjour et encore merci;
comment déclarer le sujet comme réglé ?
A+