[Résolu] Trojans (redirection google et cie)

Bonjour,

Voici une brève description de mes problèmes... un de ceux-ci ressemble à ce post: http://www.infos-du-net.com/forum/ [...] hes-google

En gros
- Redirection des liens lors de recherches google. Quand je clique un lien AVG détecte qu'il y a un "Threat: Exploit Rogue Spyware Scanner" aussi.
- Adobe crash lorsque j'essai d'ouvrir un document pdf (p-ê ou p-ê pas lié à un virus ou de quoi, je pourrais essayer de le réinstaller)
- mozilla et IE vont se fermer tout seul automatiquement parfois après 3-4 secondes. Mais si j'essai plusieurs fois ça risque de fonctionner.

J'ai AVG gratuit comme "protection". Quand je fais le scan il détecte plusieurs trojans, mais ils semblent revenir ou des semblables et ça ne règle pas mes problèmes.


Donc, j'ai fait un DDS comme c'était indiqué sur l'autre page au cas où ça accélèrerait le processus!


MERCI!!

Bonjour,

/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\

• Télécharge ComboFix (sUBs) sur ton Bureau.
• Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
• Il va te demander d'installer la console de récupération : accepte.
• Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix

Renomme ComboFix en IDN et réessaie de l'exécuter.

• Télécharge Lop S&D sur ton Bureau.
• Double-clique dessus pour lancer l'installation.
• Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
• Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche) .
• Patiente jusqu'à la fin du scan.
• Poste le rapport généré (C:\lopR.txt).

• Relance Lop S&D.
• Choisis cette fois-ci l'option 2 (Suppression).
• Ne ferme pas la fenêtre lors de la suppression !
• Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

• Télécharge SystemLook sur ton Bureau.
• Double-clique sur SystemLook.exe pour le lancer.
• Copir-colle le contenu du cadre ci-dessous dans la zone texte de SystemLook :

• Clique sur le bouton Look pour démarrer l'examen.
• A la fin, le Bloc-notes s'ouvre avec le résultat de l'analyse. Copie-colle le rapport dans ta prochaine réponse.

Note : Le rapport peut aussi être trouvé sur ton Bureau sous le nom SystemLook.txt

Je m'absente jusqu'à 23h.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GPL CAST BYTE SETUP moved successfully.
C:\Program Files\chic ooze win moved successfully.
c:\documents and settings\Daniel\Application Data\AdobeUM\socks1.exe moved successfully.
c:\documents and settings\Daniel\Application Data\Apple Computer\lego.exe moved successfully.
c:\documents and settings\Daniel\Application Data\Ahead\nomad.exe moved successfully.
LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll
c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll NOT unregistered.
c:\documents and settings\Daniel\Application Data\Adobe\rengo.dll moved successfully.
LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll
c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll NOT unregistered.
c:\documents and settings\Daniel\Application Data\Azureus\msgdi.dll moved successfully.
c:\documents and settings\Daniel\Application Data\.bittorrent\shalom.exe moved successfully.
LoadLibrary failed for c:\documents and settings\Daniel\Application Data\Corel\kern.dll
c:\documents and settings\Daniel\Application Data\Corel\kern.dll NOT unregistered.
c:\documents and settings\Daniel\Application Data\Corel\kern.dll moved successfully.
========== REGISTRY ==========
Registry key HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hsperfdata_Daniel\2028 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\e4j19.tmp_dir10394\exe4jlib.jar scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\etilqs_2YpDAtvzZwRX3umi5ffP scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_604.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.

OTM by OldTimer - Version 2.1.0.0 log created on 06032009_003604

Files moved on Reboot...
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\hsperfdata_Daniel\2028 not found!
C:\DOCUME~1\Daniel\LOCALS~1\Temp\e4j19.tmp_dir10394\exe4jlib.jar moved successfully.
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\etilqs_2YpDAtvzZwRX3umi5ffP not found!
C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log moved successfully.
DllUnregisterServer procedure not found in C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll
C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll NOT unregistered.
C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-gdip-win32-3448.dll moved successfully.
DllUnregisterServer procedure not found in C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll
C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll NOT unregistered.
C:\DOCUME~1\Daniel\LOCALS~1\Temp\swt-win32-3448.dll moved successfully.
File C:\WINDOWS\temp\Perflib_Perfdata_604.dat not found!
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Daniel\Local Settings\Application Data\Mozilla\Firefox\Profiles\sf4lozgb.default\XUL.mfl moved successfully.

Registry entries deleted on Reboot...

Logfile of random's system information tool 1.06 (written by random/random)
Run by Daniel at 2009-06-03 11:20:26
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 2 GB (2%) free of 114 GB
Total RAM: 1023 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:21:09, on 2009-06-03
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Utopia\Angel\Angel.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\QUICKENW\QWDLLS.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Azureus\Azureus.exe
C:\Documents and Settings\Daniel\Bureau\RSIT.exe
C:\Program Files\trend micro\Daniel.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Utopia Angel] "C:\Utopia\Angel\Angel.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\QUICKENW\BILLMIND.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{57D0FD1F-3899-478C-9C1D-AC366DDC9C28}: NameServer = 67.69.235.1 207.164.234.193
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6970 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-05-26 1107224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-04-08 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-08 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-08 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-08 136600]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-05-26 1947928]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Utopia Angel"=C:\Utopia\Angel\Angel.exe [2006-07-01 3281408]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-04-19 3297280]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Billminder.lnk - C:\Program Files\QUICKENW\BILLMIND.EXE
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
Quicken Startup.lnk - C:\Program Files\QUICKENW\QWDLLS.EXE

C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\Démarrage
Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-11-30 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-05-26 11952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Last.fm\LastFM.exe"="C:\Program Files\Last.fm\LastFM.exe:*:Enabled:LastFM"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2009-06-03 11:20:26 ----D---- C:\rsit
2009-06-03 11:20:26 ----D---- C:\Program Files\trend micro
2009-06-03 11:19:05 ----SD---- C:\IDN
2009-06-03 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-06-03 03:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-06-03 00:36:04 ----D---- C:\_OTM
2009-06-02 03:01:10 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-06-01 23:46:27 ----A---- C:\lopR.txt
2009-06-01 23:45:26 ----D---- C:\Lop SD
2009-06-01 20:34:54 ----D---- C:\WINDOWS\Prefetch
2009-06-01 20:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-06-01 20:10:49 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-06-01 20:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-06-01 20:10:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-06-01 20:10:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2009-06-01 20:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-06-01 20:10:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-06-01 20:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-06-01 20:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-06-01 20:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-06-01 20:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
2009-06-01 20:09:32 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-06-01 20:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-06-01 20:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-06-01 20:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-06-01 20:08:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-06-01 20:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-06-01 20:08:41 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-06-01 20:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-06-01 20:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2009-06-01 20:08:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-06-01 20:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-06-01 20:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-06-01 20:07:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-06-01 20:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-06-01 20:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-01 20:07:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-06-01 20:07:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-06-01 20:07:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-01 20:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-06-01 20:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-06-01 20:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-06-01 20:04:44 ----A---- C:\WINDOWS\setuplog.txt
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr
2009-06-01 20:03:50 ----D---- C:\WINDOWS\l2schemas
2009-06-01 20:03:49 ----D---- C:\WINDOWS\system32\bits
2009-06-01 20:02:06 ----D---- C:\WINDOWS\ServicePackFiles
2009-06-01 19:59:49 ----D---- C:\WINDOWS\network diagnostic
2009-06-01 19:55:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-06-01 19:55:33 ----D---- C:\WINDOWS\EHome
2009-06-01 19:47:50 ----SHD---- C:\RECYCLER
2009-06-01 19:24:57 ----A---- C:\ComboFix.txt
2009-06-01 19:05:19 ----A---- C:\Boot.bak
2009-06-01 19:05:12 ----RASHD---- C:\cmdcons
2009-06-01 19:02:49 ----D---- C:\WINDOWS\ERDNT
2009-06-01 19:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-06-01 19:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
2009-06-01 19:00:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-06-01 19:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2009-06-01 19:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-06-01 19:00:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-06-01 19:00:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-06-01 19:00:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-06-01 18:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-06-01 18:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2009-06-01 18:59:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958690_0$
2009-06-01 18:59:18 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2009-06-01 18:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-06-01 18:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-06-01 18:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB963027_0$
2009-06-01 18:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2009-06-01 18:19:37 ----D---- C:\WINDOWS\pss
2009-05-27 11:20:07 ----HD---- C:\$AVG8.VAULT$
2009-05-27 11:11:25 ----HD---- C:\WINDOWS\PIF
2009-05-26 15:50:53 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2009-05-26 15:50:36 ----D---- C:\Program Files\AVG
2009-05-26 15:50:36 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-05-24 21:46:46 ----D---- C:\Documents and Settings\All Users\Application Data\vsosdk
2009-05-24 20:46:44 ----A---- C:\WINDOWS\system32\sipr3260.dll

======List of files/folders modified in the last 1 months======

2009-06-03 11:21:09 ----D---- C:\Documents and Settings\Daniel\Application Data\Azureus
2009-06-03 11:20:26 ----RD---- C:\Program Files
2009-06-03 11:19:50 ----D---- C:\Program Files\Mozilla Firefox
2009-06-03 11:19:19 ----D---- C:\WINDOWS
2009-06-03 11:19:14 ----D---- C:\WINDOWS\system32
2009-06-03 03:04:51 ----D---- C:\WINDOWS\Temp
2009-06-03 03:03:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-03 03:01:31 ----HD---- C:\WINDOWS\inf
2009-06-03 03:01:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-03 03:01:18 ----A---- C:\WINDOWS\imsins.BAK
2009-06-03 03:00:25 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-03 00:36:22 ----D---- C:\Documents and Settings\Daniel\Application Data\Corel
2009-06-03 00:36:19 ----D---- C:\Documents and Settings\Daniel\Application Data\.bittorrent
2009-06-03 00:36:17 ----D---- C:\Documents and Settings\Daniel\Application Data\Adobe
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Apple Computer
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Ahead
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\AdobeUM
2009-06-02 11:09:03 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-02 03:07:14 ----HD---- C:\Config.Msi
2009-06-02 03:01:11 ----D---- C:\WINDOWS\WinSxS
2009-06-01 22:56:12 ----SHD---- C:\WINDOWS\Installer
2009-06-01 22:56:05 ----D---- C:\Program Files\MSN Messenger
2009-06-01 22:49:03 ----RASH---- C:\boot.ini
2009-06-01 22:49:03 ----A---- C:\WINDOWS\win.ini
2009-06-01 22:49:03 ----A---- C:\WINDOWS\system.ini
2009-06-01 22:48:12 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-01 20:39:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-01 20:35:26 ----D---- C:\WINDOWS\Debug
2009-06-01 20:34:30 ----D---- C:\WINDOWS\system32\Setup
2009-06-01 20:34:30 ----D---- C:\WINDOWS\AppPatch
2009-06-01 20:34:29 ----D---- C:\WINDOWS\system32\wbem
2009-06-01 20:34:27 ----RSD---- C:\WINDOWS\Fonts
2009-06-01 20:34:21 ----D---- C:\WINDOWS\system32\drivers
2009-06-01 20:33:46 ----D---- C:\WINDOWS\security
2009-06-01 20:11:05 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-01 20:07:14 ----D---- C:\Program Files\Messenger
2009-06-01 20:04:03 ----D---- C:\WINDOWS\ime
2009-06-01 20:04:03 ----D---- C:\WINDOWS\Help
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\usmt
2009-06-01 20:03:50 ----D---- C:\Program Files\Internet Explorer
2009-06-01 20:03:49 ----D---- C:\WINDOWS\PeerNet
2009-06-01 20:03:49 ----D---- C:\Program Files\Movie Maker
2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\Restore
2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\npp
2009-06-01 20:01:59 ----D---- C:\WINDOWS\msagent
2009-06-01 20:01:57 ----D---- C:\WINDOWS\srchasst
2009-06-01 20:01:57 ----D---- C:\Program Files\NetMeeting
2009-06-01 20:01:56 ----D---- C:\WINDOWS\system32\Com
2009-06-01 20:01:53 ----D---- C:\Program Files\Windows Media Player
2009-06-01 20:01:52 ----D---- C:\Program Files\Windows NT
2009-06-01 20:01:52 ----D---- C:\Program Files\Outlook Express
2009-06-01 20:01:49 ----D---- C:\Program Files\Fichiers communs\System
2009-06-01 20:01:30 ----D---- C:\WINDOWS\system32\oobe
2009-06-01 20:01:28 ----D---- C:\WINDOWS\system
2009-06-01 19:58:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-01 19:24:02 ----SD---- C:\WINDOWS\Tasks
2009-06-01 19:20:49 ----D---- C:\Program Files\Fichiers communs
2009-06-01 18:21:59 ----D---- C:\Program Files\Google
2009-06-01 16:23:28 ----D---- C:\Documents and Settings\Daniel\Application Data\Vso
2009-05-31 23:40:54 ----HD---- C:\Program Files\InstallShield Installation Information
2009-05-31 23:40:54 ----A---- C:\WINDOWS\WININIT.INI
2009-05-31 23:39:52 ----D---- C:\Program Files\PartyGaming.Net
2009-05-31 23:13:08 ----D---- C:\Documents and Settings\Daniel\Application Data\dvdcss
2009-05-31 20:36:00 ----D---- C:\ppwork
2009-05-31 20:35:37 ----A---- C:\WINDOWS\NeroDigital.ini
2009-05-31 20:34:04 ----D---- C:\Documents and Settings\Daniel\Application Data\CyberLink
2009-05-31 10:33:41 ----D---- C:\Documents and Settings\Daniel\Application Data\Google
2009-05-12 15:02:34 ----D---- C:\Downloads
2009-05-07 00:16:30 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-05-26 325896]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-05-26 27784]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-05-26 108552]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-11-30 873984]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-10-04 47360]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-11-30 425984]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-08 152984]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-09-14 516096]
S2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe []
S2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

-----------------EOF-----------------



info.txt logfile of random's system information tool 1.06 2009-06-03 11:21:13

======Uninstall list======

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec.exe /X{27579b3c-5470-4496-be6c-0c872674f19f}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop Album 2.0 Edition Découverte-->MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
Adobe Reader 8.1.5 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
AFMP v 1.0.0.0-->C:\Program Files\AFMP\uninst.exe
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
ATI HYDRAVISION-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{083F79E4-6FE9-46FB-A6C6-4F8862742947}\setup.exe"
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
AVG Free 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Azureus-->C:\Program Files\Azureus\Uninstall.exe
Baldur's Gate(TM) II - Shadows of Amn(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAE4336-2B71-11D4-9A6C-006067325E47}\setup.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
ConvertXtoDVD 2.1.5.173-->"C:\Program Files\vso\ConvertXtoDVD\unins000.exe"
ConvertXtoDVD 3.5.3.139-->"C:\Program Files\VSO\ConvertX\3\unins000.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Diablo II-->C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat
Dreamship Tales-->C:\WINDOWS\TLCUninstall.exe -f "C:\Program Files\The Learning Company\Dreamship Tales\Uninstall.xml"
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVD Solution-->"C:\Program Files\Uninstall_CDS.exe"
Enigma-->"C:\Daniel\Enigma\uninstall.exe"
Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
Google Talk (remove only)-->"C:\Program Files\Google\Google Talk\uninstall.exe"
GTK+ 2.6.4 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
Heroes of Might and Magic V-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28101984-0BA6-40FD-9ABE-72F62F80C06C}\setup.exe" -l0x9
Heroes of Might and Magic® IV-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\3DO\Heroes of Might and Magic IV\Heroes of Might and Magic IV.isu" -c"C:\Program Files\Fichiers communs\3DO Shared\3DOUnInst.dll
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential-->MsiExec.exe /X{6994491D-D491-48F1-AE1F-E179C1FFFC2F}
HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Icewind Dale II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{588C135F-0B15-4A02-8F2D-04697BE2904E}\setup.exe" -l0x9
Icewind Dale-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Black Isle\Icewind Dale\Uninst.isu"
Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
ImpôtRapide 2004-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{484575DD-32E3-458C-B3BF-E36EEF44E276}\isetup.ex_" -l0xc0c -uninst
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Jardinains!-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Jardinains!.dat
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
JumpStart PreSchool v1.4-->C:\WINDOWS\IsUninst.exe -fC:\KA\PRSCHOOL\DeIsL1.isu
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
LBreakout2 2.4.1-->C:\Daniel\lbreakout2\unins000.exe
Learn to Read with Phonics 1st and 2nd Grade-->C:\WINDOWS\TLCUninstall.exe -f "C:\Program Files\The Learning Company\Learn to Read with Phonics 1st and 2nd Grade\Uninstall.xml"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 5.1.2-->"C:\Program Files\LimeWire\uninstall.exe"
Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Plus! pour Windows XP-->MsiExec.exe /I{EEC2DAFD-5558-40AC-8E9C-5005C8F810E8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.12)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
Mr. Potato Head Uninstaller-->C:\WINDOWS\uninst.exe -fC:\mrpotato\DeIsL1.isu
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Multimedia Launcher-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
Myst Masterpiece Edition-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D1CE80E-3EAE-441E-BE97-625F9ABD07D9}\setup.exe"
Nero 7 Premium-->MsiExec.exe /I{2D7D9D86-923A-41A8-919F-437332AB1036}
Neverwinter Nights-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C503E58-B2BC-11D5-978A-0050BA84F5F7}\Setup.exe" -l0x9
OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
PrimoPDF-->"C:\WINDOWS\PrimoPDF\uninstall.exe" "/U:C:\Program Files\activePDF\PrimoPDF\Uninstall\uninstall.xml"
Quicken 2002 Deluxe-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\QUICKENW\Uninst.isu" -c"C:\Program Files\QUICKENW\uninst.dll"
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Replay Media Catcher 3.02-->"C:\WINDOWS\Replay Media Catcher\uninstall.exe" "/U:C:\Program Files\Replay Media Catcher\Uninstall\uninstall.xml"
Screenscapes-->C:\WINDOWS\IsUninst.exe -fC:\Sierra\Scapes\Uninst.isu
SFV Checker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9736F27-3CFC-4AF9-B2A7-5B1A54B1A84F}\setup.exe"
SierraHome Print Artist 12.0-->C:\WINDOWS\IsUninst.exe -f"C:\Sierra\Print Artist 12.0\PaUninst.isu" -c"C:\Sierra\Print Artist 12.0\Uninstpa.DLL"
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe"
Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Starcraft-->C:\WINDOWS\SCunin.exe C:\WINDOWS\SCunin.dat
SYSTAT 12 Manuals-->MsiExec.exe /I{D683E370-3B68-4BE0-8C29-1326F2EABCCC}
SYSTAT 12-->MsiExec.exe /I{4EB092F5-185E-4FE6-8ED7-23F61C17D76C}
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
TERMIUM®-->C:\TERMIUM\UNWISE.EXE C:\TERMIUM\INSTALL.LOG
Test Drive 4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Test Drive 4\Uninst.isu"
The GIMP 2.2.4-->"C:\Program Files\GIMP-2.2\unins000.exe"
Trillian-->C:\Program Files\Trillian\trillian.exe /uninstall
VideoLAN VLC media player 0.8.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
VobSub v2.23 (Remove Only)-->"C:\Program Files\VobSub\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Messenger-->MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
WordPerfect Office 12-->MsiExec.exe /I{AF19F291-F22F-4798-9662-525305AE9E48}

======Security center information======

AV: AVG Anti-Virus Free (disabled)

======System event log======

Computer Name: DANIELCAYLEY
Event Code: 10010
Message: Le serveur {204810B9-73B2-11D4-BF42-00B0D0118B56} ne s'est pas enregistré sur DCOM avant la fin du temps imparti.

Record Number: 32960
Source Name: DCOM
Time Written: 20090201011025.000000-300
Event Type: error
User: DANIELCAYLEY\Daniel

Computer Name: DANIELCAYLEY
Event Code: 1000
Message: Votre ordinateur a perdu le bail de son adresse IP 192.168.0.166 sur la
carte réseau d'adresse réseau 00112FAEDEAA.

Record Number: 32954
Source Name: Dhcp
Time Written: 20090131124622.000000-300
Event Type: error
User:

Computer Name: DANIELCAYLEY
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00112FAEDEAA. Il s'est
produit l'erreur suivante :
Le délai de temporisation de sémaphore a expiré.
.
Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
serveur d'adresse réseau (DHCP).

Record Number: 32953
Source Name: Dhcp
Time Written: 20090131124622.000000-300
Event Type: warning
User:

Computer Name: DANIELCAYLEY
Event Code: 1000
Message: Votre ordinateur a perdu le bail de son adresse IP 192.168.0.166 sur la
carte réseau d'adresse réseau 00112FAEDEAA.

Record Number: 32948
Source Name: Dhcp
Time Written: 20090131002037.000000-300
Event Type: error
User:

Computer Name: DANIELCAYLEY
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00112FAEDEAA. Il s'est
produit l'erreur suivante :
Le délai de temporisation de sémaphore a expiré.
.
Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
serveur d'adresse réseau (DHCP).

Record Number: 32947
Source Name: Dhcp
Time Written: 20090131002037.000000-300
Event Type: warning
User:

=====Application event log=====

Computer Name: DANIELCAYLEY
Event Code: 1517
Message: Windows a sauvegardé le Registre utilisateur DANIELCAYLEY\Daniel alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.


Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

Record Number: 10548
Source Name: Userenv
Time Written: 20080225172920.000000-300
Event Type: warning
User: AUTORITE NT\SYSTEM

Computer Name: DANIELCAYLEY
Event Code: 1000
Message: Application défaillante nero.exe, version 7.5.9.0, module défaillant audiopluginmgr.dll, version 2.1.16.0, adresse de défaillance 0x000021e5.

Record Number: 10543
Source Name: Application Error
Time Written: 20080225171755.000000-300
Event Type: error
User:

Computer Name: DANIELCAYLEY
Event Code: 1000
Message: Application défaillante nero.exe, version 7.5.9.0, module défaillant audiopluginmgr.dll, version 2.1.16.0, adresse de défaillance 0x000021e5.

Record Number: 10542
Source Name: Application Error
Time Written: 20080225171631.000000-300
Event Type: error
User:

Computer Name: DANIELCAYLEY
Event Code: 12001
Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 10495
Source Name: usnjsvc
Time Written: 20080221212255.000000-300
Event Type:
User:

Computer Name: DANIELCAYLEY
Event Code: 1000
Message: Application défaillante winword.exe, version 10.0.6612.0, module défaillant mso.dll, version 10.0.6714.0, adresse de défaillance 0x0000de2c.

Record Number: 10432
Source Name: Application Error
Time Written: 20080214234745.000000-300
Event Type: error
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2225
Windows 5.1.2600 Service Pack 3

2009-06-03 17:53:43
mbam-log-2009-06-03 (17-53-31).txt

Type de recherche: Examen rapide
Eléments examinés: 88048
Temps écoulé: 3 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\anti-leech alie (Trojan.AntiLeechPlugin) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\documents and settings\Sara\menu démarrer\XP Antivirus 2008 (Rogue.XPAntivirus) -> No action taken.

Fichier(s) infecté(s):
c:\documents and settings\Sara\menu démarrer\xp antivirus 2008\Uninstall XP Antivirus 2008.lnk (Rogue.XPAntivirus) -> No action taken.
c:\documents and settings\Sara\menu démarrer\xp antivirus 2008\XP Antivirus 2008.lnk (Rogue.XPAntivirus) -> No action taken.

Et j'ai supprimé!

Logfile of random's system information tool 1.06 (written by random/random)
Run by Daniel at 2009-06-03 22:02:02
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 3 GB (2%) free of 114 GB
Total RAM: 1023 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:02:08, on 2009-06-03
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Utopia\Angel\Angel.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Daniel\Bureau\RSIT.exe
C:\Program Files\trend micro\Daniel.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Utopia Angel] "C:\Utopia\Angel\Angel.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\QUICKENW\BILLMIND.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyGaming.Net\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{57D0FD1F-3899-478C-9C1D-AC366DDC9C28}: NameServer = 67.69.235.1 207.164.234.193
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6756 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-05-26 1107224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-03 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-03 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-05-26 1947928]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-03 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Utopia Angel"=C:\Utopia\Angel\Angel.exe [2006-07-01 3281408]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-11-16 139264]
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-04-19 3297280]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Billminder.lnk - C:\Program Files\QUICKENW\BILLMIND.EXE
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
Quicken Startup.lnk - C:\Program Files\QUICKENW\QWDLLS.EXE

C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\Démarrage
Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-11-30 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-05-26 11952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Last.fm\LastFM.exe"="C:\Program Files\Last.fm\LastFM.exe:*:Enabled:LastFM"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2009-06-03 17:48:49 ----D---- C:\Documents and Settings\Daniel\Application Data\Malwarebytes
2009-06-03 17:48:45 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-03 17:48:44 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-03 16:41:12 ----D---- C:\WINDOWS\WBEM
2009-06-03 16:39:40 ----HDC---- C:\WINDOWS\ie8
2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-03 15:28:49 ----A---- C:\WINDOWS\system32\java.exe
2009-06-03 11:20:26 ----D---- C:\rsit
2009-06-03 11:20:26 ----D---- C:\Program Files\trend micro
2009-06-03 11:19:05 ----SD---- C:\IDN
2009-06-03 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-06-03 03:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-06-03 00:36:04 ----D---- C:\_OTM
2009-06-02 03:01:10 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-06-01 23:46:27 ----A---- C:\lopR.txt
2009-06-01 23:45:26 ----D---- C:\Lop SD
2009-06-01 20:34:54 ----D---- C:\WINDOWS\Prefetch
2009-06-01 20:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-06-01 20:10:49 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-06-01 20:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-06-01 20:10:35 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-06-01 20:10:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2009-06-01 20:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-06-01 20:10:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-06-01 20:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-06-01 20:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-06-01 20:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-06-01 20:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
2009-06-01 20:09:32 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-06-01 20:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-06-01 20:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-06-01 20:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-06-01 20:08:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-06-01 20:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-06-01 20:08:41 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-06-01 20:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-06-01 20:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2009-06-01 20:08:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-06-01 20:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-06-01 20:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-06-01 20:07:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-06-01 20:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-06-01 20:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-01 20:07:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-06-01 20:07:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-06-01 20:07:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-01 20:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-06-01 20:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-06-01 20:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-06-01 20:04:44 ----A---- C:\WINDOWS\setuplog.txt
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\fr
2009-06-01 20:03:50 ----D---- C:\WINDOWS\l2schemas
2009-06-01 20:03:49 ----D---- C:\WINDOWS\system32\bits
2009-06-01 20:02:06 ----D---- C:\WINDOWS\ServicePackFiles
2009-06-01 19:59:49 ----D---- C:\WINDOWS\network diagnostic
2009-06-01 19:55:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-06-01 19:55:33 ----D---- C:\WINDOWS\EHome
2009-06-01 19:47:50 ----SHD---- C:\RECYCLER
2009-06-01 19:24:57 ----A---- C:\ComboFix.txt
2009-06-01 19:05:19 ----A---- C:\Boot.bak
2009-06-01 19:05:12 ----RASHD---- C:\cmdcons
2009-06-01 19:02:49 ----D---- C:\WINDOWS\ERDNT
2009-06-01 19:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-06-01 19:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
2009-06-01 19:00:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-06-01 19:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2009-06-01 19:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-06-01 19:00:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-06-01 19:00:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-06-01 19:00:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-06-01 18:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-06-01 18:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2009-06-01 18:59:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958690_0$
2009-06-01 18:59:18 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2009-06-01 18:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-06-01 18:51:28 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-06-01 18:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB963027_0$
2009-06-01 18:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2009-06-01 18:19:37 ----D---- C:\WINDOWS\pss
2009-05-27 11:20:07 ----HD---- C:\$AVG8.VAULT$
2009-05-27 11:11:25 ----HD---- C:\WINDOWS\PIF
2009-05-26 15:50:53 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2009-05-26 15:50:36 ----D---- C:\Program Files\AVG
2009-05-26 15:50:36 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-05-24 21:46:46 ----D---- C:\Documents and Settings\All Users\Application Data\vsosdk
2009-05-24 20:46:44 ----A---- C:\WINDOWS\system32\sipr3260.dll

======List of files/folders modified in the last 1 months======

2009-06-03 22:02:07 ----D---- C:\Documents and Settings\Daniel\Application Data\Azureus
2009-06-03 21:59:08 ----D---- C:\Program Files\Mozilla Firefox
2009-06-03 18:09:28 ----D---- C:\WINDOWS\Temp
2009-06-03 17:56:32 ----D---- C:\WINDOWS\system32\drivers
2009-06-03 17:56:32 ----D---- C:\WINDOWS
2009-06-03 17:56:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-03 17:48:44 ----RD---- C:\Program Files
2009-06-03 17:41:11 ----D---- C:\WINDOWS\system32
2009-06-03 17:40:51 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-03 17:40:51 ----D---- C:\WINDOWS\Help
2009-06-03 17:40:51 ----D---- C:\Program Files\Internet Explorer
2009-06-03 16:41:25 ----HD---- C:\WINDOWS\inf
2009-06-03 16:41:18 ----D---- C:\WINDOWS\system32\config
2009-06-03 16:41:02 ----D---- C:\WINDOWS\Media
2009-06-03 16:40:56 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-03 16:38:27 ----D---- C:\Downloads
2009-06-03 16:04:27 ----SHD---- C:\System Volume Information
2009-06-03 16:04:27 ----D---- C:\WINDOWS\system32\Restore
2009-06-03 16:04:11 ----HD---- C:\Config.Msi
2009-06-03 15:38:26 ----SHD---- C:\WINDOWS\Installer
2009-06-03 15:38:10 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-03 15:37:11 ----D---- C:\Program Files\Adobe
2009-06-03 15:28:36 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-06-03 15:28:34 ----D---- C:\Program Files\Java
2009-06-03 15:24:50 ----D---- C:\Program Files\Fichiers communs
2009-06-03 15:05:13 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-03 03:01:31 ----A---- C:\WINDOWS\imsins.BAK
2009-06-03 00:36:22 ----D---- C:\Documents and Settings\Daniel\Application Data\Corel
2009-06-03 00:36:19 ----D---- C:\Documents and Settings\Daniel\Application Data\.bittorrent
2009-06-03 00:36:17 ----D---- C:\Documents and Settings\Daniel\Application Data\Adobe
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Apple Computer
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\Ahead
2009-06-03 00:36:06 ----D---- C:\Documents and Settings\Daniel\Application Data\AdobeUM
2009-06-02 11:09:03 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-02 03:01:11 ----D---- C:\WINDOWS\WinSxS
2009-06-01 22:56:05 ----D---- C:\Program Files\MSN Messenger
2009-06-01 22:49:03 ----RASH---- C:\boot.ini
2009-06-01 22:49:03 ----A---- C:\WINDOWS\win.ini
2009-06-01 22:49:03 ----A---- C:\WINDOWS\system.ini
2009-06-01 22:48:12 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-01 20:39:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-01 20:35:26 ----D---- C:\WINDOWS\Debug
2009-06-01 20:34:30 ----D---- C:\WINDOWS\system32\Setup
2009-06-01 20:34:30 ----D---- C:\WINDOWS\AppPatch
2009-06-01 20:34:29 ----D---- C:\WINDOWS\system32\wbem
2009-06-01 20:34:27 ----RSD---- C:\WINDOWS\Fonts
2009-06-01 20:33:46 ----D---- C:\WINDOWS\security
2009-06-01 20:11:05 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-01 20:07:14 ----D---- C:\Program Files\Messenger
2009-06-01 20:04:03 ----D---- C:\WINDOWS\ime
2009-06-01 20:03:50 ----D---- C:\WINDOWS\system32\usmt
2009-06-01 20:03:49 ----D---- C:\WINDOWS\PeerNet
2009-06-01 20:03:49 ----D---- C:\Program Files\Movie Maker
2009-06-01 20:02:00 ----D---- C:\WINDOWS\system32\npp
2009-06-01 20:01:59 ----D---- C:\WINDOWS\msagent
2009-06-01 20:01:57 ----D---- C:\WINDOWS\srchasst
2009-06-01 20:01:57 ----D---- C:\Program Files\NetMeeting
2009-06-01 20:01:56 ----D---- C:\WINDOWS\system32\Com
2009-06-01 20:01:53 ----D---- C:\Program Files\Windows Media Player
2009-06-01 20:01:52 ----D---- C:\Program Files\Windows NT
2009-06-01 20:01:52 ----D---- C:\Program Files\Outlook Express
2009-06-01 20:01:49 ----D---- C:\Program Files\Fichiers communs\System
2009-06-01 20:01:30 ----D---- C:\WINDOWS\system32\oobe
2009-06-01 20:01:28 ----D---- C:\WINDOWS\system
2009-06-01 19:58:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-01 19:24:02 ----SD---- C:\WINDOWS\Tasks
2009-06-01 18:21:59 ----D---- C:\Program Files\Google
2009-06-01 16:23:28 ----D---- C:\Documents and Settings\Daniel\Application Data\Vso
2009-05-31 23:40:54 ----HD---- C:\Program Files\InstallShield Installation Information
2009-05-31 23:40:54 ----A---- C:\WINDOWS\WININIT.INI
2009-05-31 23:39:52 ----D---- C:\Program Files\PartyGaming.Net
2009-05-31 23:13:08 ----D---- C:\Documents and Settings\Daniel\Application Data\dvdcss
2009-05-31 20:36:00 ----D---- C:\ppwork
2009-05-31 20:35:37 ----A---- C:\WINDOWS\NeroDigital.ini
2009-05-31 20:34:04 ----D---- C:\Documents and Settings\Daniel\Application Data\CyberLink
2009-05-31 10:33:41 ----D---- C:\Documents and Settings\Daniel\Application Data\Google
2009-05-07 00:16:30 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-05-26 325896]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-05-26 27784]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-05-26 108552]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-11-30 873984]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-10-04 47360]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-11-30 425984]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-03 152984]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-09-14 516096]
S2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe []
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

-----------------EOF-----------------

OTM veut pas se lancer...

La dernière fois je n'ai pas eu de problème, mais cette fois ci lorsque je double-click il reste là à rien faire... il apparaît dans le Gestionnaire de tâche, utilise 50% de mon processeur et 4704 ko de mémoire, mais rien ne se produit... J'ai essayé de redémarrer, de fermer le plus de logiciels possibles, etc., re-télécharger.

Ça fait la même chose...

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\%windir%\system32\drivers\svchost.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list\\%windir%\system32\drivers\svchost.exe deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF983B.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF9877.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF02C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF045.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\87L3OA5C\MsgrConfig[1].asmx scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7d8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 06042009_131613

Files moved on Reboot...
C:\DOCUME~1\Daniel\LOCALS~1\Temp\hpodvd09.log moved successfully.
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF983B.tmp not found!
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DF9877.tmp not found!
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF02C.tmp not found!
File C:\DOCUME~1\Daniel\LOCALS~1\Temp\~DFF045.tmp not found!
C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\87L3OA5C\MsgrConfig[1].asmx moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_7d8.dat moved successfully.

Scan en cours. Oui le PC va bien

1/

• Désinstalle HijackThis.

• Télécharge ToolsCleaner2 sur ton Bureau.
• Double-clique sur ToolsCleaner2.exe pour le lancer.
• Clique sur Recherche et laisse le scan agir.
• Clique sur Suppression pour finaliser.
• Tu peux, si tu le souhaites, te servir des Options Facultatives.
• Clique sur Quitter pour obtenir le rapport.
• Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

2/

• Télécharge et installe CCleaner Slim.
• Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
• Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
• Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

3/

• Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

==Prévention==

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

Si tu estimes que ton problème est résolu :

---> Ajoute maintenant [Résolu] au titre. Pour cela :

• Clique, dans ton premier message, sur le bouton Editer .
• Rajoute la mention [Résolu] devant le titre.
• Clique ensuite sur Valider votre message.

Sois plus vigilant(e) sur Internet

Tu peux supprimer ToolsCleaner.

Certaines mises à jour Windows ont besoin d'un redémarrage.

Il y a l'option pour signaler qu'il y a des mises à jour mais sans les télécharger.