[Résolu] Infecté par packed.genreic.200

Bonjour,

Tu as une variante du rootkit TDSSServ.

/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\

• Télécharge ComboFix (sUBs) sur ton Bureau.
• Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
• Il va te demander d'installer la console de récupération : accepte.
• Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix

Renomme-le en IDN puis essaie de l'exécuter.

• Télécharge The Avenger sur ton Bureau.
• Dézippe le fichier avenger.zip (Clique droit > Extraire).
• Ferme toutes les fenêtres et toutes les applications en cours et double-clique sur l'icône avenger (Icône avec l'épée).
• Clique sur OK pour accepter les termes d'utilisation.
• Une fois le programme lancé, verifie bien que :

• Clique sur Execute pour lancer le scan.
• Répondre Oui à ce message de confirmation.
• Répondre Oui pour exécuter un scan antirootkit.
• La première étape étant finie, The Avenger a désormais besoin de redémarrer votre PC pour finir, clique sur Oui.

Ton PC redémarrera alors automatiquement.

• Au redémarrage, le rapport de The Avenger s'ouvrira automatiquement, poste-le (C:\avenger.txt).

Tu sais redémarrer en mode sans échec ?

Voila je suis en mode sans echec.

Ca se lance, je fais la manip précité dans ton post.

Norton, ne me signale plus la présence de packed.generic.200. Merci beaucoup
Que me conseilles-tu comme protection pour m'éviter d'être de nouveau confronter à ce genre de problèmes??

Voici le rapport :

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2276
Windows 5.1.2600 Service Pack 3

14/06/2009 18:15:23
mbam-log-2009-06-14 (18-15-23).txt

Type de recherche: Examen rapide
Eléments examinés: 88423
Temps écoulé: 5 minute(s), 3 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Voici le rapport :


SDFix: Version 1.240
Run by Administrateur on 14/06/2009 at 18:35

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-14 18:46:35
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:2f,c4,bd,a3,1a,25,0c,48,e4,3a,14,1e,ac,c8,15,88,15,c9,03,11,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,90,10,32,a4,07,2c,11,56,40,6d,41,ad,44,e5,77,9b,c6,..
"hdf12"=hex:9d,83,a2,b1,6f,c1,a8,a3,45,74,07,19,bc,bc,73,83,88,03,3f,2c,99,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:74,89,fb,a0,f9,5f,f6,5b,db,ff,66,bb,2d,ef,45,9f,6a,b0,aa,34,47,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1]
"hdf12"=hex:00,45,bd,ac,82,4f,45,0d,9f,61,59,6f,eb,7d,f9,78,a2,e9,ce,ac,4b,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2]
"hdf12"=hex:c8,db,6a,fc,c2,4f,2f,86,c7,ba,d1,0a,0c,78,47,01,0f,eb,12,8c,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq3]
"hdf12"=hex:a1,eb,1c,af,80,51,36,97,25,e5,9d,97,a6,bb,f0,56,9d,a4,ee,f1,31,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:2f,c4,bd,a3,1a,25,0c,48,e4,3a,14,1e,ac,c8,15,88,15,c9,03,11,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,90,10,32,a4,07,2c,11,56,40,6d,41,ad,44,e5,77,9b,c6,..
"hdf12"=hex:9d,83,a2,b1,6f,c1,a8,a3,45,74,07,19,bc,bc,73,83,88,03,3f,2c,99,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:74,89,fb,a0,f9,5f,f6,5b,db,ff,66,bb,2d,ef,45,9f,6a,b0,aa,34,47,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1]
"hdf12"=hex:00,45,bd,ac,82,4f,45,0d,9f,61,59,6f,eb,7d,f9,78,a2,e9,ce,ac,4b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2]
"hdf12"=hex:c8,db,6a,fc,c2,4f,2f,86,c7,ba,d1,0a,0c,78,47,01,0f,eb,12,8c,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq3]
"hdf12"=hex:a1,eb,1c,af,80,51,36,97,25,e5,9d,97,a6,bb,f0,56,9d,a4,ee,f1,31,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG10.00.00.01WORKSTATION"="B16E2CC24BED3E949C014FD66903A7F45FD4A4095F0D08FCDA03270CB2A42916F661B03DF67D14BF6BA50C00C5158132D81C4E24F66F260F2FEE04E5BBE8BF25697B2EF4F114FAC1123C8C8CDF26AB9521B73E27AFF54DA59E11292C3E8BD94C9F973B46423FEDCE0D6EF4B534653A7EB9C243BF1690CEE85016B2A6005BA71E0811E2B4024E18822CE85B55D1C378AF785A2344D171B165BE2CB0C25A6E0D11DF4821E35ED7D9DB94DEFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A9C6AECB7A5D1407BA7FD869164D6794A6A0AC4980AC7933623B24FAB518F2E5A319241F829062508CF791B49EBB9D31D4791A882937E77A6FECEB316AF01B2CBD1C57347ABCF0721FA63EAF31F71DE3D0E95697F0B732BF93FCB68A3410DCD031BBBBA978E26C443FE0B38A70C4292F4230E33584EF7D09182FD5B22EC3724A35F4F62B17D7F110AE7E8D1411A3E2CE1A9C746F57A89121B86EAD1BA7BCE697F16944ABA0D6722124F8F9DEFBF4C0813CA24A9A908D0858A6C4B8F524911AB8076071DE96FD324ACBEFBDC1D0030E8801DA3F4D09AFCF8207E403BDDBBABE310741E0BEADCF4B61C32730D4DE7665AC34803FE150822CF57324AEACB995DD89769B8908CE32A8C09E04B978AC613B3617F4C977295F340F78F970C3DEE35450CF21F43C15708CC465925DCCF3B4D4755A3AF4728903D02E968491C79C4B4E1501A8C09F52380BCF91812DB9224ACA3DA978E6F91C8BC2374404F0BFFAD4536CEC2A9FBC891D8D4812224FE758DB8B639F7DDCF8BF001C1068DC7DF8B56EB96F6845D8E07593CF16CAED7F466B8959C14B36A71D85C74426E2993D023D68ACB9BD3A461B80F6E3A6127E0E08E6D5C93932392BDBB6AFF46781E5CA3034F82C6D2C70D4C24C86ADED33135D2108A9C5A9CCBDDE6A4BE63E490C92521B713A8CAE647189EF2EE2E5606C8DE4CD3ECE8CFC841ECF44F20301C13A15149F82A7F5A50DE9F7002D1519F672F5AF8AB075AE9ABBDB1F2B107C754E3A06E75EA5A4637F3FAD4B930604A9B06BF6DC9AB83192F3459A7F9DB9AE266D2BA2B439CD7524EB0AB1C2902A814A8D72DEA00363F8F1F96A223966B85A7223234BF8DAA3435C21708FAFA03D3E061595A1C18FF2A8DA23665E2A100DA50B762B06C4AD821C0556E506F72F18D0B7505AD59B4C5C00AD6CE8DEC069E996797340F9BF61F8F1E8C856F596EE46B310CBB4B51D8D4A21A15195580305B31B96AA53F421EC4B1928391FE599548A45959991204AE89794BFD586A1083A860212AD49E8B786714B366C917FA398D7C72051CF99393758C4E681C5387CA431816E16FB68E2A996265A2B75126BB8D761DB8941C69618518248DED3B921A3B430827FB72F98181AAA"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"="C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"="C:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:EnablednkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:EnablednkBstrB"
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"="C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe:*:Enabled:Crysis_32"
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe"="C:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe:*:Enabled:Supreme Commander"
"C:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"="C:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe:*:Enabled:GPGNet - Supreme Commander"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

Remaining Files :



Files with Hidden Attributes :

Thu 14 Aug 2008 393,216 ...H. --- "C:\ASUS.SYS\SplashtopDll.dll"

Finished!

Ok, alors voici le contenu de log.txt :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-06-14 18:56:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 57 GB (37%) free of 153 GB
Total RAM: 3583 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:56:30, on 14/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
C:\WINDOWS\system32\oodtray.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\BOINC\boinctray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Windows\LSD\LClock\lclock.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files\BOINC\boincmgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\BOINC\boinc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gomyhit.com/MTk2MjQ=/2/288//
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\IPSBHO.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [boinctray] "C:\Program Files\BOINC\boinctray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] C:\Windows\LSD\LClock\lclock.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [boincmgr] "C:\Program Files\BOINC\boincmgr.exe" /a /s
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activ [...] stubie.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/g [...] wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 10682 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll [2009-06-09 372592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\IPSBHO.DLL [2009-06-09 107896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-14 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-14 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll [2009-06-09 372592]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"=C:\WINDOWS\system32\oodtray.exe [2007-06-28 2512128]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-08-15 30003200]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-08 13680640]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-08 86016]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe [2005-03-08 176128]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2006-10-22 620152]
"Adobe_ID0EYTHM"=C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160]
"CamserviceDP"=C:\Program Files\Hercules\DualPix Exchange\Camservice.exe [2007-08-10 81920]
"boinctray"=C:\Program Files\BOINC\boinctray.exe [2008-11-17 58112]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-14 148888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LClock"=C:\Windows\LSD\LClock\lclock.exe [2004-09-19 65536]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"EVEREST AutoStart"=C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe [2009-03-30 2363488]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-11-18 21633320]
"boincmgr"=C:\Program Files\BOINC\boincmgr.exe [2008-11-17 3916544]
"Steam"=c:\program files\steam\steam.exe [2009-06-11 1217784]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-07-31 139264]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
Lancement rapide d'Adobe Acrobat.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoSMBalloonTip"=0
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe"="C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:EnablednkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:EnablednkBstrB"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\Program Files\THQ\Gas Powered Games\Supreme Commander\bin\SupremeCommander.exe"="C:\Program Files\THQ\Gas Powered Games\Supreme Commander\bin\SupremeCommander.exe:*:Enabled:Supreme Commander"
"C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe"="C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe:*:Enabled:GPGNet - Supreme Commander"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2009-06-14 18:33:30 ----D---- C:\WINDOWS\ERUNT
2009-06-14 18:28:27 ----D---- C:\SDFix
2009-06-14 18:07:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-14 18:06:56 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-06-14 18:04:22 ----D---- C:\Program Files\xerox
2009-06-14 18:04:21 ----D---- C:\WINDOWS\system32\xircom
2009-06-14 18:04:21 ----D---- C:\WINDOWS\srchasst
2009-06-14 18:04:21 ----D---- C:\Program Files\windows nt
2009-06-14 18:04:21 ----D---- C:\Program Files\netmeeting
2009-06-14 18:04:21 ----D---- C:\Program Files\msn gaming zone
2009-06-14 18:04:21 ----D---- C:\Program Files\movie maker
2009-06-14 18:04:21 ----D---- C:\Program Files\Fichiers communs\speechengines
2009-06-14 18:04:20 ----D---- C:\Program Files\microsoft frontpage
2009-06-14 18:00:30 ----SHD---- C:\RECYCLER
2009-06-14 18:00:20 ----A---- C:\WINDOWS\system32\CF6488.exe
2009-06-14 17:54:02 ----RASHD---- C:\autorun.inf
2009-06-14 17:51:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-06-14 17:29:06 ----A---- C:\Boot.bak
2009-06-14 17:29:03 ----RASHD---- C:\cmdcons
2009-06-14 17:27:52 ----D---- C:\WINDOWS\ERDNT
2009-06-14 17:27:50 ----SD---- C:\IDN
2009-06-14 15:13:14 ----D---- C:\Program Files\Panda Security
2009-06-14 15:08:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-14 14:00:25 ----SHD---- C:\WINDOWS\CSC
2009-06-14 14:00:17 ----A---- C:\WINDOWS\ntbtlog.txt
2009-06-14 13:56:09 ----A---- C:\WINDOWS\system32\tmp.txt
2009-06-14 13:55:59 ----A---- C:\rapport.txt
2009-06-14 13:33:51 ----A---- C:\UsbFix.txt
2009-06-14 12:48:10 ----D---- C:\WINDOWS\Sun
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\java.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-06-14 12:45:53 ----D---- C:\Program Files\Java
2009-06-14 12:45:46 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2009-06-14 12:45:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\Sun
2009-06-14 12:36:09 ----D---- C:\UsbFix
2009-06-14 12:26:19 ----D---- C:\rsit
2009-06-14 12:26:19 ----D---- C:\Program Files\trend micro
2009-06-14 12:15:31 ----D---- C:\Program Files\Norton Support
2009-06-14 01:32:10 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-06-14 01:32:08 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2009-06-14 01:32:08 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2009-06-14 01:32:07 ----D---- C:\Documents and Settings\Administrateur\Application Data\TuneUp Software
2009-06-14 01:31:58 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-06-14 01:31:58 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2009-06-13 22:16:19 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-13 04:27:11 ----D---- C:\Program Files\Counter-Strike 1.6
2009-06-12 22:26:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\Command & Conquer 3 Les guerres du Tiberium
2009-06-11 22:25:10 ----D---- C:\Documents and Settings\Administrateur\Application Data\Ahead
2009-06-11 22:23:54 ----D---- C:\Program Files\Nero
2009-06-11 22:23:54 ----D---- C:\Program Files\Fichiers communs\Ahead
2009-06-11 21:56:04 ----D---- C:\Program Files\Yamp 2.3
2009-06-11 20:40:48 ----D---- C:\Program Files\BOINC
2009-06-11 20:40:48 ----D---- C:\Documents and Settings\All Users\Application Data\BOINC
2009-06-11 20:40:33 ----D---- C:\WINDOWS\Downloaded Installations
2009-06-10 18:28:28 ----D---- C:\RESTORE
2009-06-10 17:31:03 ----D---- C:\Program Files\Microsoft Works
2009-06-10 17:30:56 ----D---- C:\Program Files\MSBuild
2009-06-10 17:30:47 ----D---- C:\Program Files\Microsoft Visual Studio
2009-06-10 17:30:47 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-06-10 17:30:28 ----D---- C:\Program Files\Microsoft.NET
2009-06-10 17:28:16 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-06-10 17:27:33 ----D---- C:\WINDOWS\SHELLNEW
2009-06-10 17:26:15 ----RHD---- C:\MSOCache
2009-06-09 17:10:45 ----D---- C:\Program Files\Symantec
2009-06-09 17:10:45 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-06-09 17:10:04 ----D---- C:\Program Files\Norton Internet Security
2009-06-08 12:57:05 ----D---- C:\Documents and Settings\All Users\Application Data\PCSettings
2009-06-08 12:57:05 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2009-06-08 12:40:17 ----D---- C:\Program Files\NortonInstaller
2009-06-08 12:40:17 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-06-08 11:20:33 ----D---- C:\Documents and Settings\Administrateur\Application Data\skypePM
2009-06-08 11:17:48 ----D---- C:\Documents and Settings\Administrateur\Application Data\Skype
2009-06-08 11:17:11 ----D---- C:\Program Files\Skype
2009-06-08 11:17:11 ----D---- C:\Program Files\Fichiers communs\Skype
2009-06-08 02:14:09 ----D---- C:\Program Files\Microsoft Silverlight
2009-06-07 12:33:18 ----A---- C:\WINDOWS\system32\csnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\system32\vsnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\system32\rsnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\snp2uvc.ini
2009-06-07 12:32:56 ----A---- C:\WINDOWS\ffmpeg.exe
2009-06-07 12:32:52 ----D---- C:\WINDOWS\system32\HWC HD
2009-06-07 12:32:52 ----D---- C:\Program Files\Hercules
2009-06-06 22:20:18 ----D---- C:\Documents and Settings\All Users\Application Data\RICOH
2009-06-06 22:20:18 ----A---- C:\WINDOWS\ricdb.ini
2009-06-06 08:37:22 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2009-06-06 08:23:37 ----D---- C:\temp
2009-06-06 08:22:55 ----D---- C:\Documents and Settings\All Users\Application Data\Media Center Programs
2009-06-06 07:59:44 ----D---- C:\Program Files\THQ
2009-06-06 07:59:44 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-06-06 07:59:44 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-06-06 07:59:42 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-06-06 07:59:42 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-06-06 07:53:48 ----D---- C:\Program Files\Steam
2009-06-06 07:49:47 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-06-06 07:48:40 ----HDC---- C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
2009-06-06 07:41:03 ----D---- C:\WINDOWS\system32\oodag
2009-06-06 07:33:18 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-06-06 07:33:10 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-06-06 07:33:10 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-06-06 07:33:09 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-06-06 07:33:08 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-06-06 07:33:08 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-06-06 07:33:07 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-06-06 07:33:03 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-06-06 07:22:09 ----D---- C:\Program Files\WARCRAFT III
2009-06-06 07:20:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-06-06 07:16:03 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-06-06 04:50:37 ----RA---- C:\WINDOWS\system32\vp6vfw.dll
2009-06-06 04:50:36 ----D---- C:\Program Files\Microsoft WSE
2009-06-06 04:49:34 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-06-06 04:49:29 ----D---- C:\WINDOWS\Logs
2009-06-06 04:15:46 ----D---- C:\Program Files\Lavalys
2009-06-06 03:56:39 ----D---- C:\Program Files\Electronic Arts
2009-06-06 03:54:52 ----A---- C:\WINDOWS\system32\h323log.txt
2009-06-06 03:53:56 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-06-06 03:53:13 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-06-06 03:53:11 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-06-06 03:52:12 ----A---- C:\WINDOWS\system32\usbui.dll
2009-06-06 03:51:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-06 03:51:27 ----SHD---- C:\WINDOWS\Installer
2009-06-06 03:51:27 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-06-06 03:51:27 ----D---- C:\Program Files\Fichiers communs
2009-06-06 03:51:27 ----D---- C:\Program Files
2009-06-06 03:51:27 ----A---- C:\WINDOWS\ODBCINST.INI
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-06-06 03:51:07 ----A---- C:\WINDOWS\system32\irclass.dll
2009-06-06 03:51:05 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-06-06 03:51:05 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-06-06 03:51:04 ----A---- C:\WINDOWS\system32\batt.dll
2009-06-06 03:51:04 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-06-06 03:51:00 ----A---- C:\WINDOWS\system32\storprop.dll
2009-06-06 03:50:54 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-06-06 03:49:07 ----RA---- C:\WINDOWS\SET7.tmp
2009-06-06 03:49:06 ----RA---- C:\WINDOWS\SET4.tmp
2009-06-06 03:49:04 ----RA---- C:\WINDOWS\SET3.tmp
2009-06-06 03:49:01 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-06 03:49:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-06 03:48:55 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-06-06 03:48:17 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-06-06 03:48:14 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-06-06 03:48:13 ----D---- C:\Documents and Settings
2009-06-06 03:48:12 ----SHD---- C:\System Volume Information
2009-06-06 03:48:11 ----A---- C:\WINDOWS\game.ini
2009-06-06 03:47:15 ----RASH---- C:\boot.ini
2009-06-06 03:46:11 ----D---- C:\Documents and Settings\All Users\Application Data\TrackMania
2009-06-06 03:45:08 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-06 03:45:08 ----HD---- C:\WINDOWS\inf
2009-06-06 03:45:08 ----D---- C:\WINDOWS\WinSxS
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Web
2009-06-06 03:45:08 ----D---- C:\WINDOWS\WBEM
2009-06-06 03:45:08 ----D---- C:\WINDOWS\twain_32
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Temp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\wins
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\wbem
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\usmt
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\spool
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\Setup
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ras
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\oobe
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\npp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\mui
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\IME
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\icsxml
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ias
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\fr
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\export
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\drivers
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\dhcp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\config
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\3076
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\2052
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1054
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1042
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1041
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1037
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1036
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1033
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1031
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1028
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1025
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system
2009-06-06 03:45:08 ----D---- C:\WINDOWS\security
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Resources
2009-06-06 03:45:08 ----D---- C:\WINDOWS\repair
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Provisioning
2009-06-06 03:45:08 ----D---- C:\WINDOWS\PeerNet
2009-06-06 03:45:08 ----D---- C:\WINDOWS\PCHealth
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Offline Web Pages
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Network Diagnostic
2009-06-06 03:45:08 ----D---- C:\WINDOWS\mui
2009-06-06 03:45:08 ----D---- C:\WINDOWS\msapps
2009-06-06 03:45:08 ----D---- C:\WINDOWS\msagent
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Media
2009-06-06 03:45:08 ----D---- C:\WINDOWS\L2Schemas
2009-06-06 03:45:08 ----D---- C:\WINDOWS\java
2009-06-06 03:45:08 ----D---- C:\WINDOWS\ime
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Help
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Fonts
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Driver Cache
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Debug
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Cursors
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Connection Wizard
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Config
2009-06-06 03:45:08 ----D---- C:\WINDOWS\AppPatch
2009-06-06 03:45:08 ----D---- C:\WINDOWS\addins
2009-06-06 03:45:08 ----D---- C:\WINDOWS
2009-06-06 03:43:40 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-06-06 03:43:40 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-06-06 03:43:39 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-06-06 03:43:36 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-06-06 03:40:02 ----D---- C:\Program Files\TmUnitedForever
2009-06-06 03:38:52 ----D---- C:\Program Files\Activision
2009-06-06 03:37:42 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-06-06 03:37:40 ----SHD---- C:\WINDOWS\ftpcache
2009-06-06 03:26:04 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-06-06 03:23:54 ----D---- C:\Program Files\Fichiers communs\Control Panels
2009-06-06 03:22:14 ----D---- C:\Documents and Settings\All Users\Application Data\ALM
2009-06-06 03:16:06 ----D---- C:\Program Files\QuickTime
2009-06-06 03:13:25 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-06-06 03:13:24 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-06-06 03:13:20 ----D---- C:\WINDOWS\system32\DirectX
2009-06-06 03:11:38 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-06-06 03:11:15 ----A---- C:\WINDOWS\system32\NPSWF32_FlashUtil.exe
2009-06-06 03:11:15 ----A---- C:\WINDOWS\system32\NPSWF32.dll
2009-06-06 03:08:56 ----D---- C:\Program Files\EA GAMES
2009-06-06 03:08:29 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-06 03:06:34 ----D---- C:\Program Files\Bonjour
2009-06-06 03:05:00 ----D---- C:\Program Files\Adobe
2009-06-06 03:03:58 ----D---- C:\Program Files\Fichiers communs\Macrovision Shared
2009-06-06 03:03:46 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-06-06 03:02:47 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-06-06 03:01:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\LEA
2009-06-06 03:01:20 ----D---- C:\Program Files\LEA
2009-06-06 03:01:20 ----D---- C:\Documents and Settings\Administrateur\Application Data\SoftPlug
2009-06-06 03:01:13 ----D---- C:\Program Files\WinPcap
2009-06-06 02:56:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-06-06 02:55:20 ----D---- C:\Program Files\adslTV
2009-06-06 02:51:13 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-06-06 02:51:07 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-06-06 02:51:06 ----D---- C:\Program Files\DAEMON Tools Lite
2009-06-06 02:48:29 ----D---- C:\Documents and Settings\Administrateur\Application Data\HP
2009-06-06 02:43:59 ----D---- C:\Documents and Settings\Administrateur\Application Data\Symantec
2009-06-06 02:43:14 ----D---- C:\Program Files\Windows Sidebar
2009-06-06 02:42:21 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-06-06 02:41:58 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-06-06 02:39:24 ----D---- C:\WINDOWS\nview
2009-06-06 02:39:24 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-06-06 02:39:04 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-06-06 02:38:49 ----D---- C:\Program Files\Microsoft Office
2009-06-06 02:38:49 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-06-06 02:37:05 ----D---- C:\Documents and Settings\Administrateur\Application Data\Sites prédéfinis
2009-06-06 02:36:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\Dynamique
2009-06-06 02:36:43 ----D---- C:\Program Files\Visicom Media
2009-06-06 02:36:28 ----D---- C:\Documents and Settings\Administrateur\Application Data\DAEMON Tools Lite
2009-06-06 02:35:58 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-06 02:33:46 ----D---- C:\Program Files\Microsoft
2009-06-06 02:33:32 ----D---- C:\Program Files\Windows Live SkyDrive
2009-06-06 02:33:08 ----D---- C:\Documents and Settings\All Users\Application Data\Corel
2009-06-06 02:33:07 ----D---- C:\My Music
2009-06-06 02:32:57 ----D---- C:\Program Files\Fichiers communs\Corel
2009-06-06 02:32:57 ----D---- C:\Program Files\Corel
2009-06-06 02:32:43 ----D---- C:\Program Files\Windows Live
2009-06-06 02:30:09 ----HD---- C:\ASUS.000
2009-06-06 02:30:04 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-06-06 02:29:58 ----HD---- C:\ASUS.SYS
2009-06-06 02:29:39 ----D---- C:\Program Files\Downloaded Installations
2009-06-06 02:28:43 ----A---- C:\WINDOWS\system32\RTLVLAN_NB.DLL
2009-06-06 02:28:28 ----RA---- C:\WINDOWS\system32\AsIO.dll
2009-06-06 02:28:17 ----D---- C:\Program Files\ASUS
2009-06-06 02:22:32 ----D---- C:\WINDOWS\OPTIONS
2009-06-06 02:22:32 ----D---- C:\Program Files\Realtek
2009-06-06 02:22:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\InstallShield
2009-06-06 02:21:07 ----D---- C:\WINDOWS\AsusInstAll
2009-06-06 02:21:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-06 02:21:03 ----D---- C:\Program Files\WinRAR
2009-06-06 02:21:00 ----D---- C:\Program Files\VideoLAN
2009-06-06 02:20:48 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-06-06 02:20:46 ----N---- C:\WINDOWS\system32\difxapi.dll
2009-06-06 02:20:46 ----D---- C:\Program Files\VIA
2009-06-06 02:20:43 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-06-06 02:20:32 ----D---- C:\Program Files\Mozilla Firefox
2009-06-06 02:20:19 ----A---- C:\WINDOWS\OODCNT.INI
2009-06-06 02:19:36 ----D---- C:\Program Files\OO Software
2009-06-06 02:17:30 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-06 02:17:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-06 02:17:28 ----D---- C:\Program Files\Intel
2009-06-06 02:17:21 ----D---- C:\Intel
2009-06-06 02:17:06 ----A---- C:\WINDOWS\Ascd_log.ini
2009-06-06 02:16:52 ----A---- C:\WINDOWS\Ascd_tmp.ini
2009-06-06 02:13:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2009-06-06 02:13:01 ----HD---- C:\Program Files\Uninstall Information
2009-06-06 02:12:56 ----H---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2009-06-06 02:12:55 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-06-06 02:12:55 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2009-06-06 02:06:49 ----D---- C:\WINDOWS\SoftwareDistribution
2009-06-06 02:06:47 ----D---- C:\WINDOWS\Prefetch
2009-06-06 02:06:46 ----SD---- C:\WINDOWS\system32\Microsoft
2009-06-06 02:06:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-06 02:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-06 02:04:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-06 02:04:25 ----D---- C:\WINDOWS\ie7updates
2009-06-06 02:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-06-06 02:04:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2009-06-06 02:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-06-06 02:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2009-06-06 02:04:09 ----D---- C:\WINDOWS\system32\PreInstall
2009-06-06 02:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-06-06 02:00:38 ----RSD---- C:\WINDOWS\assembly
2009-06-06 02:00:38 ----D---- C:\WINDOWS\system32\URTTemp
2009-06-06 02:00:38 ----D---- C:\WINDOWS\Microsoft.NET
2009-06-06 02:00:22 ----N---- C:\WINDOWS\system32\LegitCheckControl.dll
2009-06-06 01:59:48 ----D---- C:\WINDOWS\LSD
2009-06-06 01:59:48 ----A---- C:\WINDOWS\system32\oeminfo.ini
2009-06-06 01:59:20 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-06 01:59:17 ----D---- C:\WINDOWS\system32\LogFiles
2009-06-06 01:59:12 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-06-06 01:58:54 ----D---- C:\Program Files\Windows Media Connect 2
2009-06-06 01:58:53 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-06-06 01:58:38 ----A---- C:\WINDOWS\control.ini
2009-06-06 01:58:38 ----A---- C:\AUTOEXEC.BAT
2009-06-06 01:58:31 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-06 01:58:28 ----D---- C:\WINDOWS\system32\dllcache
2009-06-06 01:58:28 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-06-06 01:58:03 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-06-06 01:58:00 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-06-06 01:57:57 ----HD---- C:\Program Files\WindowsUpdate
2009-06-06 01:57:44 ----A---- C:\WINDOWS\system32\desktop.ini
2009-06-06 01:57:44 ----A---- C:\WINDOWS\desktop.ini
2009-06-06 01:57:43 ----A---- C:\WINDOWS\system32\acctres.dll
2009-06-06 01:57:42 ----D---- C:\Program Files\Fichiers communs\Services
2009-06-06 01:57:39 ----SD---- C:\WINDOWS\Tasks
2009-06-06 01:57:39 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-06-06 01:57:38 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-06-06 01:57:34 ----D---- C:\WINDOWS\system32\Macromed
2009-06-06 01:57:28 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-06-06 01:57:28 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-06-06 01:57:27 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-06-06 01:57:27 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wups.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-06-06 01:57:24 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-06-06 01:56:51 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-06-06 01:56:51 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-06-06 01:56:50 ----D---- C:\WINDOWS\system32\Restore
2009-06-06 01:56:50 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\srclient.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-06-06 01:56:46 ----A---- C:\WINDOWS\system32\inetres.dll
2009-06-06 01:56:45 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-06-06 01:56:41 ----D---- C:\Program Files\Outlook Express
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\mstask.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\isign32.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-06-06 01:56:28 ----D---- C:\Program Files\Fichiers communs\System
2009-06-06 01:56:27 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-06-06 01:56:25 ----D---- C:\Program Files\Internet Explorer
2009-06-06 01:56:01 ----D---- C:\Program Files\ComPlus Applications
2009-06-06 01:55:59 ----A---- C:\WINDOWS\vbaddin.ini
2009-06-06 01:55:59 ----A---- C:\WINDOWS\vb.ini
2009-06-06 01:55:56 ----D---- C:\WINDOWS\Registration
2009-06-06 01:55:50 ----D---- C:\Program Files\Windows Media Player
2009-06-06 01:55:47 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tskill.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tscon.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\reset.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\getuname.dll
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\charmap.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\calc.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\shadow.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\regini.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\msg.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\logoff.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-06-06 01:55:36 ----D---- C:\WINDOWS\system32\MsDtc
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-06-06 01:55:35 ----D---- C:\WINDOWS\system32\Com
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\colbact.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\stclient.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comuid.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-06-14 17:36:27 ----A---- C:\WINDOWS\system.ini
2009-06-10 17:27:45 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 BHDrvx86;Symantec Heuristics Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\ccHPx86.sys []
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20090610.006\IDSxpx86.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 SRTSP;Symantec Real Time Storage Protection; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SRTSP.SYS []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SRTSPX.SYS []
R1 SYMTDI;Symantec Network Dispatch Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMTDI.SYS []
R2 LANPkt;Realtek LANPkt Protocol Driver; C:\WINDOWS\system32\DRIVERS\LANPkt.sys [2007-11-20 8960]
R3 camfilt2;camfilt2; C:\WINDOWS\System32\Drivers\camfilt2.sys [2007-05-29 94208]
R3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-06-01 12288]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-15 5810]
R3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVEX15.SYS []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-08 6288672]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-05-16 9602944]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMFW;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMFW.SYS []
R3 SYMIDS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMIDS.SYS []
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-06-09 36400]
R3 SYMNDIS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMNDIS.SYS []
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-07-25 845184]
S2 ylyznc;ylyznc; C:\WINDOWS\system32\drivers\dswdcrw.sys []
S3 ave0fzou;ave0fzou; C:\WINDOWS\system32\drivers\ave0fzou.sys []
S3 BzSpIDer;BzSpIDer; \??\K:\OPiron\BzSpIDer.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 Diag69xp;Diag69xp; C:\WINDOWS\System32\Drivers\Diag69xp.sys [2007-12-03 11264]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-06-29 42512]
S3 RTLVLAN;Realtek VLAN Intermediate Driver; C:\WINDOWS\system32\DRIVERS\RTLVLAN.SYS [2007-11-20 16640]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-06-09 36400]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-14 152984]
R2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe [2009-06-09 115560]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-08 163908]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2007-06-28 1049856]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-06-07 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-06-13 189072]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2006-11-02 174656]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-06-14 603904]
R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-06-06 654848]
S3 Adobe Version Cue CS3;Adobe Version Cue CS3 {fr_FR} ; C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-07-31 720896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-06-29 92792]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-14 362240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

• Désinstalle DAEMON Tools Toolbar.
• Télécharge OTM (OldTimer) sur ton Bureau.
• Double-clique sur OTM.exe afin de le lancer.
• Copie (Ctrl+C) le texte suivant ci-dessous :

• Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
• Clique maintenant sur le bouton MoveIt! puis ferme OTM.

---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

• Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\

---> Le nom du rapport correspond au moment de sa création : date_heure.log

Plus de souci ?

Pfiou bin j'ai fait une analyse de tout mes disques et en complète du sytème donc c'est un peu long, mais j'ai bientot fini. je te tiens au courant dès que j'ai reboot le pc Merci pour tout le temps que tu passes !!

Alors, j'ai effectué l'analyse, il ne trouve plus rien. Mais lors du démarrage, norton me signale qu'il a détecté packed.generic.200. Donc j'ai effectué à nouveau une analyse et il me dit qu'il ne trouve rien. Mdr :s

Voici le rapport de Tools Cleaner :
[ Rapport ToolsCleaner version 2.3.6 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\UsbFix.txt: trouvé !
C:\SDFIX: trouvé !
C:\_OTM: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: trouvé !
C:\Documents and Settings\Administrateur\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Administrateur\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: supprimé !
C:\Documents and Settings\Administrateur\Bureau\OTM.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\Administrateur\Bureau\Rsit.exe: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\SDFIX: supprimé !
C:\_OTM: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\UsbFix: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

Tout a été effectué.

Merci pour tout !!

Et pour le coup, c'est plutôt faire attention quand tu laisses un ami travailler sur ton PC! LOL

Merci beaucoup

Merci Bonne soirée à toi aussi !!