[Résolu] Je crois que j'ai un virus , cheval de troie.. urgent

Bonjour,

• Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
• Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
• Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
• Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
• Sélectionne Exécuter un examen rapide.
• Clique sur Rechercher. L'analyse démarre.
• A la fin de l'analyse, un message s'affiche :

• Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
• Ferme tes navigateurs.
• Si des malwares ont été détectés, clique sur Afficher les résultats.
• Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
• MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

• Relance MBAM, va dans Quarantaine et supprime tout.

• Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
• Double-clique sur RSIT.exe afin de lancer le programme.

(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

• Clique sur Continue à l'écran Disclaimer.
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

• Fais analyser le fichier suivant : C:\Documents and Settings\alis\alis.exe

• Sur VirusTotal et poste le lien de l'analyse.

• Télécharge SystemLook sur ton Bureau.
• Double-clique sur SystemLook.exe pour le lancer.
• Copie-colle le contenu du cadre ci-dessous dans la zone texte de SystemLook (sans le mot Quote) :

• Clique sur le bouton Look pour démarrer l'examen.
• A la fin, le Bloc-notes s'ouvre avec le résultat de l'analyse. Copie-colle le rapport dans ta prochaine réponse.

Note : Le rapport peut aussi être trouvé sur ton Bureau sous le nom SystemLook.txt

• Désinstalle Dealio toolbar et Search Settings.

• Télécharge OTM (OldTimer) sur ton Bureau.
• Double-clique sur OTM.exe afin de le lancer.
• Copie (Ctrl+C) le texte suivant ci-dessous :

• Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
• Clique maintenant sur le bouton MoveIt! puis ferme OTM.

---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

• Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\

---> Le nom du rapport correspond au moment de sa création : date_heure.log

OTM ne s'installe pas.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service\Driver podmenadrv not found.
Service\Driver podmenadrv not found.
Service\Driver podmenadrv not found.
Service\Driver podmena deleted successfully.
========== FILES ==========
C:\Program Files\podmena moved successfully.
C:\Program Files\Circle Developement moved successfully.
File/Folder C:\Program Files\Dealio Toolbar not found.
C:\Program Files\Search Settings\kb128\temp moved successfully.
C:\Program Files\Search Settings\kb128\res moved successfully.
C:\Program Files\Search Settings\kb128 moved successfully.
C:\Program Files\Search Settings moved successfully.
File/Folder C:\Documents and Settings\alis\Application Data\Dealio not found.
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings\kb128\temp scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings\kb128 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings scheduled to be moved on reboot.
C:\WINDOWS\ld09.exe moved successfully.
C:\WINDOWS\freddy46.exe moved successfully.
C:\Documents and Settings\alis\Menu Démarrer\Programmes\Démarrage\rncsys32.exe moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\sysldtray deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\sysfbtray deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UserFaultCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}\\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}\ not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\JETE876.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\~DF4863.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\~DFC4E9.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\alis\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\CLML_AGENT_LOG1.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\JET409E.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_548.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_a6c.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_ce0.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_1Y3hj6NqRsMaK4P scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.

OTM by OldTimer - Version 2.1.0.1 log created on 06162009_172254

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) CPU 3.06GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : alis ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
C:\ (Local Disk) - NTFS - Total:113 Go (Free:98 Go)
D:\ (Local Disk) - FAT32 - Total:114 Go (Free:69 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 16/06/2009|17:46 )

--------------------\\ Listing des dossiers dans APPLIC~1

[18/05/2009|19:12] C:\DOCUME~1\alis\APPLIC~1\Adobe
[26/05/2009|16:22] C:\DOCUME~1\alis\APPLIC~1\AdobeUM
[21/05/2009|15:41] C:\DOCUME~1\alis\APPLIC~1\Apple Computer
[07/06/2009|13:39] C:\DOCUME~1\alis\APPLIC~1\ArcSoft
[17/05/2009|11:44] C:\DOCUME~1\alis\APPLIC~1\CyberLink
[07/06/2009|10:36] C:\DOCUME~1\alis\APPLIC~1\EPSON
[16/06/2009|17:43] C:\DOCUME~1\alis\APPLIC~1\Free Download Manager
[17/05/2009|06:10] C:\DOCUME~1\alis\APPLIC~1\Identities
[02/06/2009|21:02] C:\DOCUME~1\alis\APPLIC~1\InstallShield
[16/05/2009|21:41] C:\DOCUME~1\alis\APPLIC~1\Macromedia
[16/06/2009|14:40] C:\DOCUME~1\alis\APPLIC~1\Malwarebytes
[27/05/2009|20:06] C:\DOCUME~1\alis\APPLIC~1\Microsoft
[16/05/2009|22:30] C:\DOCUME~1\alis\APPLIC~1\Mozilla
[31/05/2009|14:45] C:\DOCUME~1\alis\APPLIC~1\OpenOffice.org
[21/05/2009|21:41] C:\DOCUME~1\alis\APPLIC~1\Search Settings
[16/05/2009|23:19] C:\DOCUME~1\alis\APPLIC~1\Sun

[20/05/2009|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[17/05/2009|06:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/05/2009|23:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/05/2009|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[16/06/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[17/05/2009|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[30/05/2009|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
[27/05/2009|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
[07/06/2009|10:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[24/05/2009|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreeDownloadManager.ORG
[16/06/2009|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[17/05/2009|11:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[27/05/2009|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[20/05/2009|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[02/06/2009|21:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[25/05/2009|19:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[17/05/2009|06:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[18/05/2009|21:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/11/2005|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[16/05/2009|21:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[20/05/2009|03:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[12/06/2009 22:22][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[16/06/2009 17:25][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[16/05/2009|21:39] C:\Program Files\Acer
[16/05/2009|21:40] C:\Program Files\Acer TV-FM
[17/05/2009|06:14] C:\Program Files\Acer WLAN 11g USB Dongle
[17/05/2009|06:14] C:\Program Files\Adobe
[16/05/2009|21:46] C:\Program Files\Alwil Software
[20/05/2009|23:14] C:\Program Files\Apple Software Update
[16/06/2009|17:38] C:\Program Files\Avira
[20/05/2009|23:16] C:\Program Files\Bonjour
[03/11/2005|00:51] C:\Program Files\ComPlus Applications
[16/05/2009|21:39] C:\Program Files\CyberLink
[02/06/2009|21:09] C:\Program Files\epson
[16/06/2009|15:59] C:\Program Files\Fichiers communs
[21/05/2009|21:49] C:\Program Files\Free Audio Pack
[24/05/2009|16:04] C:\Program Files\Free Download Manager
[02/06/2009|21:15] C:\Program Files\InstallShield Installation Information
[11/06/2009|21:53] C:\Program Files\Internet Explorer
[31/05/2009|14:39] C:\Program Files\Java
[31/05/2009|15:52] C:\Program Files\JRE
[16/06/2009|14:40] C:\Program Files\Malwarebytes' Anti-Malware
[18/05/2009|21:56] C:\Program Files\Messenger
[10/07/2009|22:12] C:\Program Files\Messenger Plus! Live
[16/05/2009|22:03] C:\Program Files\Microsoft
[18/05/2009|21:55] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/05/2009|06:15] C:\Program Files\microsoft frontpage
[27/05/2009|20:06] C:\Program Files\Microsoft WSE
[17/05/2009|06:15] C:\Program Files\Movie Maker
[16/06/2009|17:36] C:\Program Files\Mozilla Firefox
[17/05/2009|06:15] C:\Program Files\MSN
[03/11/2005|00:51] C:\Program Files\MSN Gaming Zone
[18/05/2009|21:49] C:\Program Files\MSXML 4.0
[21/05/2009|21:53] C:\Program Files\NCH Software
[21/05/2009|21:54] C:\Program Files\NCH Swift Sound
[17/05/2009|06:15] C:\Program Files\NetMeeting
[16/05/2009|21:41] C:\Program Files\NewTech Infosystems
[20/05/2009|18:11] C:\Program Files\Norton AntiVirus
[17/05/2009|06:16] C:\Program Files\Oca History Tool
[17/05/2009|06:16] C:\Program Files\Online Services
[31/05/2009|15:52] C:\Program Files\OpenOffice.org 3
[17/05/2009|06:16] C:\Program Files\Outlook Express
[16/05/2009|23:18] C:\Program Files\PhotoFiltre
[17/05/2009|06:16] C:\Program Files\Realtek AC97
[17/05/2009|06:16] C:\Program Files\Services en ligne
[21/05/2009|17:32] C:\Program Files\SFR
[17/05/2009|06:16] C:\Program Files\sisagp
[16/05/2009|21:29] C:\Program Files\SiSLan
[20/05/2009|14:18] C:\Program Files\Symantec
[16/06/2009|15:04] C:\Program Files\trend micro
[03/11/2005|01:01] C:\Program Files\Uninstall Information
[16/05/2009|22:03] C:\Program Files\Windows Live
[16/05/2009|22:03] C:\Program Files\Windows Live SkyDrive
[24/05/2009|16:08] C:\Program Files\Windows Media Connect 2
[24/05/2009|16:08] C:\Program Files\Windows Media Player
[17/05/2009|06:17] C:\Program Files\Windows NT
[03/11/2005|00:52] C:\Program Files\WindowsUpdate
[17/05/2009|06:17] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[17/05/2009|06:15] C:\Program Files\Fichiers communs\Adobe
[16/05/2009|21:42] C:\Program Files\Fichiers communs\ArcSoft
[02/06/2009|21:13] C:\Program Files\Fichiers communs\InstallShield
[16/05/2009|21:34] C:\Program Files\Fichiers communs\Java
[20/05/2009|23:49] C:\Program Files\Fichiers communs\logishrd
[27/05/2009|20:06] C:\Program Files\Fichiers communs\Microsoft Shared
[17/05/2009|06:15] C:\Program Files\Fichiers communs\MSSoap
[03/11/2005|01:07] C:\Program Files\Fichiers communs\muvee Technologies
[03/11/2005|01:07] C:\Program Files\Fichiers communs\NewTech Infosystems
[17/05/2009|06:15] C:\Program Files\Fichiers communs\ODBC
[17/05/2009|06:15] C:\Program Files\Fichiers communs\Services
[17/05/2009|06:15] C:\Program Files\Fichiers communs\SpeechEngines
[20/05/2009|18:11] C:\Program Files\Fichiers communs\Symantec Shared
[17/05/2009|06:15] C:\Program Files\Fichiers communs\System
[16/05/2009|21:49] C:\Program Files\Fichiers communs\Windows Live

--------------------\\ Process

( 85 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-16 17:50:55
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:9][D:6]-> C:\DOCUME~1\alis\LOCALS~1\Temp
[F:14][D:0]-> C:\DOCUME~1\alis\Cookies
[F:61][D:4]-> C:\DOCUME~1\alis\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 16/06/2009|17:52 - Option : [1]

--------------------\\ Fin du rapport a 17:52:23

Logfile of random's system information tool 1.06 (written by random/random)
Run by alis at 2009-06-16 18:25:02
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 101 GB (87%) free of 116 GB
Total RAM: 447 MB (12% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:25:11, on 16/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Documents and Settings\alis\alis.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\alis\Bureau\RSIT.exe
C:\Program Files\trend micro\alis.exe
C:\DOCUME~1\alis\LOCALS~1\Temp\BNB.tmp
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\GUARDGUI.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\WINDOWS\TEMP\E_S68.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [alis] C:\Documents and Settings\alis\alis.exe /i
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [alis] C:\Documents and Settings\alis\alis.exe /i (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 8404 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-31 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-31 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"ntiMUI"=C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-12 45056]
""= []
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-03 32768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-08-16 90112]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-31 148888]
"Acer Empowering Technology Monitor"=C:\WINDOWS\system32\SysMonitor.exe [2006-04-18 49152]
"AspireService"=C:\Program Files\Acer\Acer eMode Management\AspireService.exe [2006-06-09 110592]
"MediaSync"=C:\Program Files\Acer\Acer eConsole\MediaSync.exe [2006-05-04 425984]
"PCMService"=C:\Program Files\Acer TV-FM\PCMService.exe [2006-03-29 143360]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"EPSON Stylus DX7400 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE [2007-04-12 182272]
"alis"=C:\Documents and Settings\alis\alis.exe [2009-06-16 21090]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Acer WLAN 11g USB Dongle.lnk - C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Acer\Acer eConsole\MediaSync.exe"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer"
"C:\Program Files\Acer\Acer eConsole\eConsole.exe"="C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole"
"C:\Program Files\Acer\Acer eConsole\MediaServerService.exe"="C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server"
"C:\Program Files\Acer TV-FM\PowerCinema.exe"="C:\Program Files\Acer TV-FM\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\Program Files\Acer TV-FM\PCMService.exe"="C:\Program Files\Acer TV-FM\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\SFR\Media Center\httpd\httpd.exe"="C:\Program Files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:ENABLE"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:ENABLE"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:ENABLE"
"C:\Program Files\Avira\AntiVir Desktop\avgnt.exe"="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe:*:Enabled:ENABLE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-16 17:46:25 ----A---- C:\lopR.txt
2009-06-16 17:45:53 ----D---- C:\Lop SD
2009-06-16 17:38:24 ----D---- C:\Program Files\Avira
2009-06-16 17:38:24 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-06-16 17:10:34 ----D---- C:\_OTM
2009-06-16 15:04:14 ----D---- C:\Program Files\trend micro
2009-06-16 15:04:13 ----D---- C:\rsit
2009-06-16 14:40:20 ----D---- C:\Documents and Settings\alis\Application Data\Malwarebytes
2009-06-16 14:40:12 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-16 14:40:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-11 21:53:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 21:53:30 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-11 21:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 21:53:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 21:53:04 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-07 13:39:11 ----D---- C:\Documents and Settings\alis\Application Data\ArcSoft
2009-06-07 10:47:51 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-06-07 10:47:42 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FLBCDE.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FD4BCDE.DLL
2009-06-07 10:36:54 ----D---- C:\Documents and Settings\alis\Application Data\EPSON
2009-06-02 21:10:34 ----D---- C:\Documents and Settings\All Users\Application Data\UDL
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.ini
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICEntry.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2009-06-02 21:02:54 ----D---- C:\Documents and Settings\alis\Application Data\InstallShield
2009-06-02 20:49:31 ----D---- C:\Program Files\epson
2009-06-02 20:49:29 ----A---- C:\WINDOWS\system32\escwiad.dll
2009-06-02 20:49:02 ----A---- C:\WINDOWS\CDE DX7400DEFGIPS.ini
2009-05-31 15:52:41 ----D---- C:\Program Files\JRE
2009-05-31 14:45:10 ----D---- C:\Documents and Settings\alis\Application Data\OpenOffice.org
2009-05-31 14:40:08 ----D---- C:\Program Files\OpenOffice.org 3
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\javaws.exe
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\javaw.exe
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\java.exe
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-30 15:00:21 ----D---- C:\Documents and Settings\All Users\Application Data\eConsole
2009-05-27 20:07:30 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2009-05-27 20:06:16 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2009-05-27 20:06:15 ----D---- C:\Program Files\Microsoft WSE
2009-05-27 20:01:54 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-05-27 20:01:49 ----D---- C:\WINDOWS\Logs
2009-05-26 16:22:18 ----D---- C:\Documents and Settings\alis\Application Data\AdobeUM
2009-05-25 19:12:51 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-05-24 21:13:10 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-05-24 21:12:49 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-05-24 21:12:29 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-05-24 21:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-05-24 21:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-05-24 21:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-05-24 16:09:15 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-05-24 16:08:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-05-24 16:08:48 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-05-24 16:08:20 ----D---- C:\Program Files\Windows Media Connect 2
2009-05-24 16:08:09 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-05-24 16:05:59 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-05-24 16:05:53 ----D---- C:\Downloads
2009-05-24 16:04:53 ----D---- C:\WINDOWS\system32\LogFiles
2009-05-24 16:04:44 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-05-24 16:04:10 ----D---- C:\Documents and Settings\alis\Application Data\Free Download Manager
2009-05-24 16:03:58 ----D---- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-24 16:03:56 ----D---- C:\Program Files\Free Download Manager
2009-05-21 21:53:03 ----D---- C:\Program Files\NCH Software
2009-05-21 21:52:00 ----D---- C:\Program Files\NCH Swift Sound
2009-05-21 21:41:47 ----D---- C:\Documents and Settings\alis\Application Data\Search Settings
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\WMAFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\inetfr.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\AudDesign.dll
2009-05-21 21:41:14 ----D---- C:\Program Files\Free Audio Pack
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-05-21 17:32:46 ----D---- C:\Program Files\SFR
2009-05-20 23:17:05 ----D---- C:\Documents and Settings\alis\Application Data\Apple Computer
2009-05-20 23:16:48 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-05-20 23:16:20 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-20 23:16:02 ----D---- C:\Program Files\Bonjour
2009-05-20 23:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-05-20 23:14:09 ----D---- C:\Program Files\Apple Software Update
2009-05-20 23:13:55 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-05-20 23:13:31 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-05-18 21:56:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-05-18 21:56:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-05-18 21:56:20 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-05-18 21:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-05-18 21:56:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-05-18 21:55:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-05-18 21:55:40 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-05-18 21:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-05-18 21:55:18 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-05-18 21:55:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-05-18 21:55:03 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-05-18 21:54:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-05-18 21:54:30 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-05-18 21:54:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-05-18 21:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-05-18 21:53:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-05-18 21:53:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-05-18 21:53:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-05-18 21:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-05-18 21:53:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-05-18 21:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-05-18 21:52:47 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-05-18 21:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-05-18 21:52:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-05-18 21:52:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-05-18 21:52:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-05-18 21:50:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-05-18 21:50:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-05-18 21:49:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-05-18 21:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-05-18 21:49:40 ----D---- C:\Program Files\MSXML 4.0
2009-05-18 21:49:19 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-05-18 21:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-05-18 21:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-05-18 16:52:27 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-05-17 21:17:06 ----D---- C:\WINDOWS\system32\PreInstall
2009-05-17 21:17:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\muweb.dll
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-05-17 12:04:49 ----D---- C:\Program Files\Fichiers communs\logishrd
2009-05-17 12:04:41 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-05-17 11:45:12 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-05-17 11:44:28 ----D---- C:\Documents and Settings\alis\Application Data\CyberLink
2009-05-17 11:04:14 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-05-17 06:25:28 ----SHD---- C:\system volume information

======List of files/folders modified in the last 1 months======

2009-07-10 22:12:59 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-16 18:25:13 ----AD---- C:\WINDOWS\system32\drivers
2009-06-16 18:24:51 ----D---- C:\WINDOWS\temp
2009-06-16 18:22:45 ----D---- C:\Program Files\Mozilla Firefox
2009-06-16 18:21:35 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-16 18:21:26 ----AD---- C:\WINDOWS
2009-06-16 17:43:49 ----AD---- C:\WINDOWS\system32
2009-06-16 17:38:46 ----HD---- C:\WINDOWS\inf
2009-06-16 17:38:24 ----RD---- C:\Program Files
2009-06-16 17:36:30 ----SHD---- C:\WINDOWS\Installer
2009-06-16 17:36:16 ----D---- C:\WINDOWS\WinSxS
2009-06-16 17:31:40 ----D---- C:\WINDOWS\Prefetch
2009-06-16 17:24:11 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-16 15:59:05 ----D---- C:\Program Files\Fichiers communs
2009-06-14 13:47:29 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-06-11 21:53:41 ----A---- C:\WINDOWS\imsins.BAK
2009-06-11 21:53:37 ----D---- C:\Program Files\Internet Explorer
2009-06-11 21:53:20 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-02 21:15:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-02 21:13:22 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-02 21:13:22 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-06-02 20:49:29 ----D---- C:\WINDOWS\twain_32
2009-05-31 15:54:34 ----RSD---- C:\WINDOWS\assembly
2009-05-31 15:53:01 ----RSD---- C:\WINDOWS\Fonts
2009-05-31 14:39:30 ----D---- C:\Program Files\Java
2009-05-27 20:26:24 ----D---- C:\WINDOWS\Microsoft.NET
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\alis\Application Data\Microsoft
2009-05-27 20:06:12 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-27 20:05:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-27 20:01:57 ----D---- C:\WINDOWS\system32\DirectX
2009-05-24 21:13:30 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-24 17:08:28 ----D---- C:\WINDOWS\AppPatch
2009-05-24 16:08:33 ----A---- C:\WINDOWS\win.ini
2009-05-24 16:08:19 ----D---- C:\Program Files\Windows Media Player
2009-05-24 16:08:17 ----D---- C:\WINDOWS\Help
2009-05-20 23:14:20 ----SD---- C:\WINDOWS\Tasks
2009-05-20 18:11:44 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-05-20 18:11:43 ----D---- C:\Program Files\Norton AntiVirus
2009-05-20 18:11:43 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-05-20 14:18:31 ----D---- C:\Program Files\Symantec
2009-05-19 16:49:15 ----D---- C:\WINDOWS\system32\wbem
2009-05-18 21:56:41 ----AD---- C:\i386
2009-05-18 21:56:12 ----D---- C:\Program Files\Messenger
2009-05-18 21:51:58 ----D---- C:\WINDOWS\Registration
2009-05-18 19:12:26 ----D---- C:\Documents and Settings\alis\Application Data\Adobe
2009-05-18 16:52:27 ----D---- C:\WINDOWS\Debug
2009-05-17 11:43:08 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-05-17 11:02:49 ----D---- C:\WINDOWS\system32\config
2009-05-17 06:26:32 ----D---- C:\Acer
2009-05-17 06:26:32 ----A---- C:\WINDOWS\CLEANUP.CMD
2009-05-17 06:25:31 ----D---- C:\drv
2009-05-17 06:25:22 ----RD---- C:\WINDOWS\Web
2009-05-17 06:23:38 ----D---- C:\WINDOWS\system32\usmt
2009-05-17 06:23:37 ----D---- C:\WINDOWS\system32\URTTemp
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\spool
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\Setup
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\Restore
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ras
2009-05-17 06:23:35 ----AD---- C:\WINDOWS\system32\oobe
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\npp
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\mui
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\MsDtc
2009-05-17 06:23:31 ----D---- C:\WINDOWS\system32\Macromed
2009-05-17 06:23:25 ----D---- C:\WINDOWS\system32\IME
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\icsxml
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\ias
2009-05-17 06:21:13 ----D---- C:\WINDOWS\system32\Com
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1036
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1033
2009-05-17 06:21:11 ----AD---- C:\WINDOWS\system
2009-05-17 06:21:10 ----D---- C:\WINDOWS\srchasst
2009-05-17 06:21:05 ----D---- C:\WINDOWS\Resources
2009-05-17 06:21:05 ----D---- C:\WINDOWS\repair
2009-05-17 06:21:02 ----D---- C:\WINDOWS\Provisioning
2009-05-17 06:21:00 ----D---- C:\WINDOWS\PeerNet
2009-05-17 06:20:50 ----RD---- C:\WINDOWS\Offline Web Pages
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msapps
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msagent
2009-05-17 06:20:39 ----D---- C:\WINDOWS\Media
2009-05-17 06:20:38 ----D---- C:\WINDOWS\java
2009-05-17 06:20:15 ----D---- C:\WINDOWS\ime
2009-05-17 06:18:49 ----D---- C:\WINDOWS\Cursors
2009-05-17 06:18:39 ----D---- C:\WINDOWS\addins
2009-05-17 06:18:39 ----D---- C:\WINDOWS\AcerDRV
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$UninstallOCA-X86Fre-ENU$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB913446$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB906569$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-05-17 06:18:25 ----HD---- C:\WINDOWS\$NtUninstallKB903235$
2009-05-17 06:18:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901190$
2009-05-17 06:18:23 ----HD---- C:\WINDOWS\$NtUninstallKB901214$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-05-17 06:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB899589$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899591$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899588$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899587$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB898458$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB896727$
2009-05-17 06:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-05-17 06:18:13 ----HD---- C:\WINDOWS\$NtUninstallKB896428$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896423$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896422$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896358$
2009-05-17 06:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2009-05-17 06:18:10 ----HD---- C:\WINDOWS\$NtUninstallKB894391$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893756$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893357$
2009-05-17 06:18:06 ----HD---- C:\WINDOWS\$NtUninstallKB893086$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB890923$
2009-05-17 06:18:03 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2009-05-17 06:18:01 ----HD---- C:\WINDOWS\$NtUninstallKB890175$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890047$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB888302$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885836$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885835$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB883939$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873339$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2009-05-17 06:17:51 ----HD---- C:\WINDOWS\$NtUninstallKB867282$
2009-05-17 06:17:04 ----AD---- C:\VALUEADD
2009-05-17 06:17:01 ----D---- C:\Program Files\xerox
2009-05-17 06:17:01 ----D---- C:\Program Files\Windows NT
2009-05-17 06:17:01 ----AD---- C:\Sysinfo
2009-05-17 06:16:57 ----D---- C:\Program Files\sisagp
2009-05-17 06:16:57 ----D---- C:\Program Files\Services en ligne
2009-05-17 06:16:57 ----D---- C:\Program Files\Realtek AC97
2009-05-17 06:16:49 ----D---- C:\Program Files\Outlook Express
2009-05-17 06:16:48 ----D---- C:\Program Files\Online Services
2009-05-17 06:16:48 ----D---- C:\Program Files\Oca History Tool
2009-05-17 06:15:46 ----D---- C:\Program Files\NetMeeting
2009-05-17 06:15:37 ----D---- C:\Program Files\MSN
2009-05-17 06:15:36 ----D---- C:\Program Files\Movie Maker
2009-05-17 06:15:34 ----D---- C:\Program Files\microsoft frontpage
2009-05-17 06:15:29 ----D---- C:\Program Files\Fichiers communs\System
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\Services
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-05-17 06:15:13 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-05-17 06:15:08 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-05-17 06:14:29 ----D---- C:\Program Files\Adobe
2009-05-17 06:14:29 ----D---- C:\Program Files\Acer WLAN 11g USB Dongle
2009-05-17 06:11:04 ----AD---- C:\Guide
2009-05-17 06:10:21 ----AD---- C:\dotnetfx
2009-05-17 06:10:05 ----D---- C:\Documents and Settings\alis\Application Data\Identities
2009-05-17 06:10:03 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-07-13 11904]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-18 13952]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-18 3644800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-11-03 6144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-07-13 257024]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2005-03-17 32256]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-05 26496]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-05 14848]
S2 acpi32;acpi32; \??\C:\WINDOWS\system32\drivers\acpi32.sys []
S2 amd64si;amd64si; \??\C:\WINDOWS\system32\drivers\amd64si.sys []
S2 i386si;i386si; \??\C:\WINDOWS\system32\drivers\i386si.sys []
S2 ksi32sk;ksi32sk; \??\C:\WINDOWS\system32\drivers\ksi32sk.sys []
S2 port135sik;port135sik; \??\C:\WINDOWS\system32\drivers\port135sik.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-05-09 41888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-05-09 1276832]
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-05 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-05 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-05 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S3 ZD1211U(ZyDAS);ZyDAS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211u.sys [2005-10-04 280064]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\Acer\Acer eConsole\MediaServerService.exe [2006-05-04 438272]
R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672]
R2 antivirschedulerservice;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 antivirservice;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe [2006-03-29 266338]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe [2006-03-29 114784]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe [2006-03-29 1073152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-31 152984]
R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-08-03 100032]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-05 268800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-08-03 2119360]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]

-----------------EOF-----------------

ComboFix 09-06-15.07 - alis 16/06/2009 18:48.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.447.129 [GMT 2:00]
Lancé depuis: c:\documents and settings\alis\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\c904f154.sys
c:\documents and settings\alis\alis.exe
c:\documents and settings\alis\Application Data\wiaserva.log
c:\documents and settings\alis\oashdihasidhasuidhiasdhiashdiuasdhasd

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_podmenadrv
-------\Service_c904f154acpi32
-------\Service_i386si
-------\Service_ksi32sk
-------\Service_port135sik
-------\Service_c904f154


((((((((((((((((((((((((((((( Fichiers créés du 2009-05-16 au 2009-06-16 ))))))))))))))))))))))))))))))))))))
.

2009-06-16 15:45 . 2009-06-16 15:52 -------- d-----w- C:\Lop SD
2009-06-16 15:38 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-06-16 15:38 . 2009-03-24 14:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-06-16 15:38 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-06-16 15:38 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-06-16 15:38 . 2009-06-16 15:38 -------- d-----w- c:\program files\Avira
2009-06-16 15:38 . 2009-06-16 15:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-06-16 15:10 . 2009-06-16 15:10 -------- d-----w- C:\_OTM
2009-06-16 13:04 . 2009-06-16 16:25 -------- d-----w- c:\program files\trend micro
2009-06-16 13:04 . 2009-06-16 13:04 -------- d-----w- C:\rsit
2009-06-16 12:53 . 2009-06-16 12:53 1 ---h--w- c:\windows\bf23567.dat
2009-06-16 12:53 . 2009-06-16 12:53 2 ---h--w- c:\windows\zaponce52597.dat
2009-06-16 12:53 . 2009-06-16 12:53 2 ---h--w- c:\windows\zaponce52689.dat
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\documents and settings\alis\Application Data\Malwarebytes
2009-06-16 12:40 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-16 12:40 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-16 09:30 . 2009-06-16 09:30 2 ---h--w- c:\windows\zaponce54043.dat
2009-06-07 11:39 . 2009-06-07 11:39 -------- d-----w- c:\documents and settings\alis\Application Data\ArcSoft
2009-06-07 08:48 . 2007-01-11 04:02 113664 ----a-w- c:\documents and settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
2009-06-07 08:47 . 2009-06-07 08:48 -------- d-----w- c:\documents and settings\All Users\Application Data\EPSON
2009-06-07 08:47 . 2004-09-10 20:12 49152 ----a-w- c:\windows\system32\E_DCINST.DLL
2009-06-07 08:47 . 2006-12-08 02:04 76800 ----a-w- c:\windows\system32\E_FLBCDE.DLL
2009-06-07 08:47 . 2006-04-19 02:00 62976 ----a-w- c:\windows\system32\E_FD4BCDE.DLL
2009-06-07 08:36 . 2009-06-07 08:36 -------- d-----w- c:\documents and settings\alis\Application Data\EPSON
2009-06-02 19:10 . 2009-06-02 19:10 -------- d-----w- c:\documents and settings\All Users\Application Data\UDL
2009-06-02 18:58 . 2004-08-03 20:58 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-06-02 18:58 . 2004-08-03 20:58 15104 ----a-w- c:\windows\system32\dllcache\usbscan.sys
2009-06-02 18:49 . 2009-06-02 19:09 -------- d-----w- c:\program files\epson
2009-06-02 18:49 . 2007-03-26 22:00 67072 ----a-w- c:\windows\system32\escwiad.dll
2009-06-02 18:45 . 2004-08-03 21:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-02 18:45 . 2004-08-03 21:01 25856 ----a-w- c:\windows\system32\dllcache\usbprint.sys
2009-05-31 13:52 . 2009-05-31 13:52 -------- d-----w- c:\program files\JRE
2009-05-31 12:45 . 2009-06-13 20:48 1 ----a-w- c:\documents and settings\alis\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-05-31 12:45 . 2009-05-31 12:45 -------- d-----w- c:\documents and settings\alis\Application Data\OpenOffice.org
2009-05-31 12:40 . 2009-05-31 13:52 -------- d-----w- c:\program files\OpenOffice.org 3
2009-05-31 12:39 . 2009-05-31 12:39 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-05-31 08:18 . 2009-05-31 08:18 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Identities
2009-05-30 13:00 . 2009-05-30 13:00 -------- d-----w- c:\documents and settings\All Users\Application Data\eConsole
2009-05-27 18:07 . 2009-05-27 18:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2009-05-27 18:06 . 2009-05-27 18:06 10134 ----a-r- c:\documents and settings\alis\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-05-27 18:06 . 2008-09-05 00:22 447752 ----a-w- c:\windows\system32\vp6vfw.dll
2009-05-27 18:06 . 2009-05-27 18:06 -------- d-----w- c:\program files\Microsoft WSE
2009-05-27 18:01 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-05-27 18:01 . 2009-05-27 18:01 -------- d-----w- c:\windows\Logs
2009-05-26 14:22 . 2009-05-26 14:22 -------- d-----w- c:\documents and settings\alis\Application Data\AdobeUM
2009-05-25 17:13 . 2004-08-05 12:00 25600 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2009-05-24 14:08 . 2009-05-24 14:08 -------- d-----w- c:\program files\Windows Media Connect 2
2009-05-24 14:05 . 2009-06-15 08:42 -------- d-----w- C:\Downloads
2009-05-24 14:04 . 2009-05-24 14:06 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-05-24 14:04 . 2009-05-24 14:04 -------- d-----w- c:\windows\system32\LogFiles
2009-05-24 14:04 . 2009-06-16 16:51 -------- d-----w- c:\documents and settings\alis\Application Data\Free Download Manager
2009-05-24 14:03 . 2009-05-24 14:03 -------- d-----w- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-24 14:03 . 2009-05-24 14:04 -------- d-----w- c:\program files\Free Download Manager
2009-05-22 20:22 . 2009-05-22 20:22 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2009-05-21 19:53 . 2009-05-21 19:53 -------- d-----w- c:\program files\NCH Software
2009-05-21 19:52 . 2009-05-21 19:54 -------- d-----w- c:\program files\NCH Swift Sound
2009-05-21 19:16 . 2009-05-21 19:16 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\WMTools Downloaded Files
2009-05-21 15:33 . 2009-05-21 15:33 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Neuf
2009-05-21 15:32 . 2009-05-21 15:32 -------- d-----w- c:\program files\SFR
2009-05-20 21:17 . 2009-05-21 13:41 -------- d-----w- c:\documents and settings\alis\Application Data\Apple Computer
2009-05-20 21:16 . 2009-03-19 14:32 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-05-20 21:16 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-05-20 21:16 . 2009-05-20 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-20 21:16 . 2009-05-20 21:16 -------- d-----w- c:\program files\Bonjour
2009-05-20 21:14 . 2009-05-21 19:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-05-20 21:14 . 2009-05-20 21:14 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Apple
2009-05-20 21:14 . 2009-05-20 21:14 -------- d-----w- c:\program files\Apple Software Update
2009-05-20 21:13 . 2009-06-16 13:59 -------- dc----w- c:\windows\system32\DRVSTORE
2009-05-20 21:13 . 2009-05-20 21:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-05-20 21:12 . 2009-05-20 21:17 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Apple Computer
2009-05-18 19:55 . 2009-05-18 19:55 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-05-18 19:49 . 2009-05-18 19:49 -------- d-----w- c:\program files\MSXML 4.0
2009-05-18 17:12 . 2009-05-18 17:12 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Adobe
2009-05-18 14:52 . 2009-05-18 15:27 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-05-18 14:49 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\drivers\bthport.sys
2009-05-18 14:49 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\dllcache\bthport.sys
2009-05-18 14:47 . 2008-10-24 11:10 453632 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2009-05-18 14:41 . 2009-02-09 11:42 2065024 ------w- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-05-18 14:41 . 2009-02-09 11:42 2022912 ------w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-05-18 14:41 . 2009-02-09 11:43 2188160 ------w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-05-18 14:41 . 2009-02-09 11:42 2144768 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-10 20:12 . 2009-05-16 20:09 -------- d-----w- c:\program files\Messenger Plus! Live
2009-06-02 19:15 . 2005-11-02 23:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-02 19:13 . 2005-11-02 23:00 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2009-06-02 19:02 . 2009-06-02 19:02 -------- d-----w- c:\documents and settings\alis\Application Data\InstallShield
2009-05-31 18:56 . 2009-05-16 19:41 38992 ----a-w- c:\documents and settings\alis\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-31 12:39 . 2009-05-16 19:35 -------- d-----w- c:\program files\Java
2009-05-27 18:05 . 2006-05-14 06:19 76136 ----a-w- c:\windows\system32\perfc00C.dat
2009-05-27 18:05 . 2006-05-14 06:19 469622 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-21 19:49 . 2009-05-21 19:41 -------- d-----w- c:\program files\Free Audio Pack
2009-05-21 19:41 . 2009-05-21 19:41 -------- d-----w- c:\documents and settings\alis\Application Data\Search Settings
2009-05-20 21:49 . 2009-05-17 10:04 -------- d-----w- c:\program files\Fichiers communs\logishrd
2009-05-20 16:11 . 2006-05-14 06:21 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-05-20 16:11 . 2006-05-14 14:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-05-20 16:11 . 2005-11-02 23:10 -------- d-----w- c:\program files\Norton AntiVirus
2009-05-20 12:18 . 2005-11-02 23:09 -------- d-----w- c:\program files\Symantec
2009-05-18 17:47 . 2005-11-02 22:53 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-05-17 09:44 . 2009-05-17 09:44 -------- d-----w- c:\documents and settings\alis\Application Data\CyberLink
2009-05-17 09:43 . 2009-05-16 19:40 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink
2009-05-17 09:04 . 2009-05-17 09:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-05-17 04:26 . 2004-09-21 22:29 611 ----a-w- c:\windows\CLEANUP.CMD
2009-05-17 04:16 . 2006-05-14 14:13 -------- d-----w- c:\program files\sisagp
2009-05-17 04:16 . 2006-05-14 14:13 -------- d-----w- c:\program files\Services en ligne
2009-05-17 04:16 . 2005-11-02 23:02 -------- d-----w- c:\program files\Realtek AC97
2009-05-17 04:16 . 2006-05-14 06:20 -------- d-----w- c:\program files\Oca History Tool
2009-05-17 04:15 . 2006-05-14 14:13 -------- d-----w- c:\program files\microsoft frontpage
2009-05-17 04:15 . 2006-05-14 14:13 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-05-17 04:14 . 2006-05-14 06:23 -------- d-----w- c:\program files\Acer WLAN 11g USB Dongle
2009-05-16 21:18 . 2009-05-16 21:16 -------- d-----w- c:\program files\PhotoFiltre
2009-05-16 20:30 . 2009-05-16 20:30 0 ----a-w- c:\windows\nsreg.dat
2009-05-16 20:03 . 2009-05-16 20:02 -------- d-----w- c:\program files\Windows Live
2009-05-16 20:03 . 2009-05-16 20:03 -------- d-----w- c:\program files\Microsoft
2009-05-16 20:03 . 2009-05-16 20:03 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-05-16 19:49 . 2009-05-16 19:49 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-05-16 19:46 . 2009-05-16 19:46 -------- d-----w- c:\program files\Alwil Software
2009-05-16 19:42 . 2009-05-16 19:42 -------- d-----w- c:\program files\Fichiers communs\ArcSoft
2009-05-16 19:41 . 2005-11-02 23:07 -------- d-----w- c:\program files\NewTech Infosystems
2009-05-16 19:40 . 2009-05-16 19:39 -------- d-----w- c:\program files\Acer TV-FM
2009-05-16 19:39 . 2005-11-02 23:07 -------- d-----w- c:\program files\CyberLink
2009-05-16 19:39 . 2009-05-16 19:39 -------- d-----w- c:\program files\Acer
2009-05-16 19:36 . 2009-05-16 19:36 127 ----a-w- c:\documents and settings\alis\Local Settings\Application Data\fusioncache.dat
2009-05-16 19:34 . 2009-05-16 19:34 -------- d-----w- c:\program files\Fichiers communs\Java
2009-05-16 19:29 . 2009-05-16 19:28 -------- d-----w- c:\program files\SiSLan
2009-05-07 15:43 . 2004-08-05 12:00 347136 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:31 . 2006-01-09 18:02 672256 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:31 . 2004-08-05 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 20:09 . 2005-10-06 03:08 1846784 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 15:17 . 2004-08-05 12:00 584192 ----a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-12 45056]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-03 32768]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-31 148888]
"Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-04-18 49152]
"AspireService"="c:\program files\Acer\Acer eMode Management\AspireService.exe" [2006-06-09 110592]
"MediaSync"="c:\program files\Acer\Acer eConsole\MediaSync.exe" [2006-05-04 425984]
"PCMService"="c:\program files\Acer TV-FM\PCMService.exe" [2006-03-29 143360]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 413696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SiSPower"="SiSPower.dll" - c:\windows\system32\SiSPower.dll [2005-07-13 49152]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-08-16 90112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2009-5-16 45056]
Acer WLAN 11g USB Dongle.lnk - c:\program files\Acer WLAN 11g USB Dongle\ZDWlan.exe [2005-11-16 745472]
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Acer TV-FM\\PowerCinema.exe"=
"c:\\Program Files\\Acer TV-FM\\PCMService.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\program files\SFR\Media Center\httpd\httpd.exe"= c:\program files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"53:TCP"= 53:TCP:websrvx
"8085:TCP"= 8085:TCPodmena

R2 antivirschedulerservice;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/06/2009 17:38 108289]
S2 acpi32;acpi32;\??\c:\windows\system32\drivers\acpi32.sys --> c:\windows\system32\drivers\acpi32.sys [?]
S2 amd64si;amd64si;\??\c:\windows\system32\drivers\amd64si.sys --> c:\windows\system32\drivers\amd64si.sys [?]
.
Contenu du dossier 'Tâches planifiées'

2009-06-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = *.local
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-16 18:54
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3988)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\CF22509.exe
c:\program files\Acer\Acer eConsole\MediaServerService.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
c:\program files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Acer TV-FM\Kernel\TV\CLSched.exe
.
**************************************************************************
.
Heure de fin: 2009-06-16 18:56 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-06-16 16:56

Avant-CF: 105 936 842 752 octets libres
Après-CF: 105 885 970 432 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

264 --- E O F --- 2009-06-11 19:53

ComboFix 09-06-15.07 - alis 16/06/2009 19:06.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.447.178 [GMT 2:00]
Lancé depuis: c:\documents and settings\alis\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\alis\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\windows\bf23567.dat"
"c:\windows\zaponce52597.dat"
"c:\windows\zaponce52689.dat"
"c:\windows\zaponce54043.dat"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\_OTM
c:\documents and settings\alis\Application Data\Search Settings
c:\_otm\MovedFiles\06162009_172254.log
c:\_otm\MovedFiles\06162009_172254.res
c:\_otm\MovedFiles\06162009_172254\Documents and Settings\alis\Application Data\Search Settings\kb128\temp\ws-14408.log
c:\_otm\MovedFiles\06162009_172254\Documents and Settings\alis\Application Data\Search Settings\kb128\temp\ws-14409.log
c:\_otm\MovedFiles\06162009_172254\Documents and Settings\alis\Application Data\Search Settings\kb128\temp\ws-14410.log
c:\_otm\MovedFiles\06162009_172254\Documents and Settings\alis\Menu Démarrer\Programmes\Démarrage\rncsys32.exe
c:\_otm\MovedFiles\06162009_172254\Program Files\podmena\podmena.dll
c:\_otm\MovedFiles\06162009_172254\Program Files\podmena\podmena.sys
c:\_otm\MovedFiles\06162009_172254\Program Files\Search Settings\kb128\SearchSettings.dll
c:\_otm\MovedFiles\06162009_172254\Program Files\Search Settings\kb128\SearchSettingsRes409.dll
c:\_otm\MovedFiles\06162009_172254\Program Files\Search Settings\SearchSettings.exe
c:\_otm\MovedFiles\06162009_172254\WINDOWS\freddy46.exe
c:\_otm\MovedFiles\06162009_172254\WINDOWS\ld09.exe
c:\documents and settings\alis\Application Data\Search Settings\kb128\temp\ws-14411.log
c:\documents and settings\alis\Application Data\Search Settings\kb128\temp\ws-14436.log
c:\windows\bf23567.dat
c:\windows\zaponce52597.dat
c:\windows\zaponce52689.dat
c:\windows\zaponce54043.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_acpi32
-------\Service_amd64si


((((((((((((((((((((((((((((( Fichiers créés du 2009-05-16 au 2009-06-16 ))))))))))))))))))))))))))))))))))))
.

2009-06-16 15:45 . 2009-06-16 15:52 -------- d-----w- C:\Lop SD
2009-06-16 15:38 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-06-16 15:38 . 2009-03-24 14:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-06-16 15:38 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-06-16 15:38 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-06-16 15:38 . 2009-06-16 15:38 -------- d-----w- c:\program files\Avira
2009-06-16 15:38 . 2009-06-16 15:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-06-16 13:04 . 2009-06-16 16:25 -------- d-----w- c:\program files\trend micro
2009-06-16 13:04 . 2009-06-16 13:04 -------- d-----w- C:\rsit
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\documents and settings\alis\Application Data\Malwarebytes
2009-06-16 12:40 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-16 12:40 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-16 12:40 . 2009-06-16 12:40 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-07 11:39 . 2009-06-07 11:39 -------- d-----w- c:\documents and settings\alis\Application Data\ArcSoft
2009-06-07 08:48 . 2007-01-11 04:02 113664 ----a-w- c:\documents and settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
2009-06-07 08:47 . 2009-06-07 08:48 -------- d-----w- c:\documents and settings\All Users\Application Data\EPSON
2009-06-07 08:47 . 2004-09-10 20:12 49152 ----a-w- c:\windows\system32\E_DCINST.DLL
2009-06-07 08:47 . 2006-12-08 02:04 76800 ----a-w- c:\windows\system32\E_FLBCDE.DLL
2009-06-07 08:47 . 2006-04-19 02:00 62976 ----a-w- c:\windows\system32\E_FD4BCDE.DLL
2009-06-07 08:36 . 2009-06-07 08:36 -------- d-----w- c:\documents and settings\alis\Application Data\EPSON
2009-06-02 19:10 . 2009-06-02 19:10 -------- d-----w- c:\documents and settings\All Users\Application Data\UDL
2009-06-02 18:58 . 2004-08-03 20:58 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-06-02 18:58 . 2004-08-03 20:58 15104 ----a-w- c:\windows\system32\dllcache\usbscan.sys
2009-06-02 18:49 . 2009-06-02 19:09 -------- d-----w- c:\program files\epson
2009-06-02 18:49 . 2007-03-26 22:00 67072 ----a-w- c:\windows\system32\escwiad.dll
2009-06-02 18:45 . 2004-08-03 21:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-02 18:45 . 2004-08-03 21:01 25856 ----a-w- c:\windows\system32\dllcache\usbprint.sys
2009-05-31 13:52 . 2009-05-31 13:52 -------- d-----w- c:\program files\JRE
2009-05-31 12:45 . 2009-06-13 20:48 1 ----a-w- c:\documents and settings\alis\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-05-31 12:45 . 2009-05-31 12:45 -------- d-----w- c:\documents and settings\alis\Application Data\OpenOffice.org
2009-05-31 12:40 . 2009-05-31 13:52 -------- d-----w- c:\program files\OpenOffice.org 3
2009-05-31 12:39 . 2009-05-31 12:39 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-05-31 08:18 . 2009-05-31 08:18 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Identities
2009-05-30 13:00 . 2009-05-30 13:00 -------- d-----w- c:\documents and settings\All Users\Application Data\eConsole
2009-05-27 18:07 . 2009-05-27 18:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2009-05-27 18:06 . 2009-05-27 18:06 10134 ----a-r- c:\documents and settings\alis\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-05-27 18:06 . 2008-09-05 00:22 447752 ----a-w- c:\windows\system32\vp6vfw.dll
2009-05-27 18:06 . 2009-05-27 18:06 -------- d-----w- c:\program files\Microsoft WSE
2009-05-27 18:01 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-05-27 18:01 . 2009-05-27 18:01 -------- d-----w- c:\windows\Logs
2009-05-26 14:22 . 2009-05-26 14:22 -------- d-----w- c:\documents and settings\alis\Application Data\AdobeUM
2009-05-25 17:13 . 2004-08-05 12:00 25600 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2009-05-24 14:08 . 2009-05-24 14:08 -------- d-----w- c:\program files\Windows Media Connect 2
2009-05-24 14:05 . 2009-06-15 08:42 -------- d-----w- C:\Downloads
2009-05-24 14:04 . 2009-05-24 14:06 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-05-24 14:04 . 2009-05-24 14:04 -------- d-----w- c:\windows\system32\LogFiles
2009-05-24 14:04 . 2009-06-16 16:51 -------- d-----w- c:\documents and settings\alis\Application Data\Free Download Manager
2009-05-24 14:03 . 2009-05-24 14:03 -------- d-----w- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-24 14:03 . 2009-05-24 14:04 -------- d-----w- c:\program files\Free Download Manager
2009-05-22 20:22 . 2009-05-22 20:22 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2009-05-21 19:53 . 2009-05-21 19:53 -------- d-----w- c:\program files\NCH Software
2009-05-21 19:52 . 2009-05-21 19:54 -------- d-----w- c:\program files\NCH Swift Sound
2009-05-21 19:16 . 2009-05-21 19:16 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\WMTools Downloaded Files
2009-05-21 15:33 . 2009-05-21 15:33 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Neuf
2009-05-21 15:32 . 2009-05-21 15:32 -------- d-----w- c:\program files\SFR
2009-05-20 21:17 . 2009-05-21 13:41 -------- d-----w- c:\documents and settings\alis\Application Data\Apple Computer
2009-05-20 21:16 . 2009-03-19 14:32 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-05-20 21:16 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-05-20 21:16 . 2009-05-20 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-20 21:16 . 2009-05-20 21:16 -------- d-----w- c:\program files\Bonjour
2009-05-20 21:14 . 2009-05-21 19:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-05-20 21:14 . 2009-05-20 21:14 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Apple
2009-05-20 21:14 . 2009-05-20 21:14 -------- d-----w- c:\program files\Apple Software Update
2009-05-20 21:13 . 2009-06-16 13:59 -------- dc----w- c:\windows\system32\DRVSTORE
2009-05-20 21:13 . 2009-05-20 21:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-05-20 21:12 . 2009-05-20 21:17 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Apple Computer
2009-05-18 19:55 . 2009-05-18 19:55 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-05-18 19:49 . 2009-05-18 19:49 -------- d-----w- c:\program files\MSXML 4.0
2009-05-18 17:12 . 2009-05-18 17:12 -------- d-----w- c:\documents and settings\alis\Local Settings\Application Data\Adobe
2009-05-18 14:52 . 2009-05-18 15:27 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-05-18 14:49 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\drivers\bthport.sys
2009-05-18 14:49 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\dllcache\bthport.sys
2009-05-18 14:47 . 2008-10-24 11:10 453632 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2009-05-18 14:41 . 2009-02-09 11:42 2065024 ------w- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-05-18 14:41 . 2009-02-09 11:42 2022912 ------w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-05-18 14:41 . 2009-02-09 11:43 2188160 ------w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-05-18 14:41 . 2009-02-09 11:42 2144768 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-10 20:12 . 2009-05-16 20:09 -------- d-----w- c:\program files\Messenger Plus! Live
2009-06-02 19:15 . 2005-11-02 23:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-02 19:13 . 2005-11-02 23:00 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2009-06-02 19:02 . 2009-06-02 19:02 -------- d-----w- c:\documents and settings\alis\Application Data\InstallShield
2009-05-31 18:56 . 2009-05-16 19:41 38992 ----a-w- c:\documents and settings\alis\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-31 12:39 . 2009-05-16 19:35 -------- d-----w- c:\program files\Java
2009-05-27 18:05 . 2006-05-14 06:19 76136 ----a-w- c:\windows\system32\perfc00C.dat
2009-05-27 18:05 . 2006-05-14 06:19 469622 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-21 19:49 . 2009-05-21 19:41 -------- d-----w- c:\program files\Free Audio Pack
2009-05-20 21:49 . 2009-05-17 10:04 -------- d-----w- c:\program files\Fichiers communs\logishrd
2009-05-20 16:11 . 2006-05-14 06:21 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-05-20 16:11 . 2006-05-14 14:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-05-20 16:11 . 2005-11-02 23:10 -------- d-----w- c:\program files\Norton AntiVirus
2009-05-20 12:18 . 2005-11-02 23:09 -------- d-----w- c:\program files\Symantec
2009-05-18 17:47 . 2005-11-02 22:53 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-05-17 09:44 . 2009-05-17 09:44 -------- d-----w- c:\documents and settings\alis\Application Data\CyberLink
2009-05-17 09:43 . 2009-05-16 19:40 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink
2009-05-17 09:04 . 2009-05-17 09:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-05-17 04:26 . 2004-09-21 22:29 611 ----a-w- c:\windows\CLEANUP.CMD
2009-05-17 04:16 . 2006-05-14 14:13 -------- d-----w- c:\program files\sisagp
2009-05-17 04:16 . 2006-05-14 14:13 -------- d-----w- c:\program files\Services en ligne
2009-05-17 04:16 . 2005-11-02 23:02 -------- d-----w- c:\program files\Realtek AC97
2009-05-17 04:16 . 2006-05-14 06:20 -------- d-----w- c:\program files\Oca History Tool
2009-05-17 04:15 . 2006-05-14 14:13 -------- d-----w- c:\program files\microsoft frontpage
2009-05-17 04:15 . 2006-05-14 14:13 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-05-17 04:14 . 2006-05-14 06:23 -------- d-----w- c:\program files\Acer WLAN 11g USB Dongle
2009-05-16 21:18 . 2009-05-16 21:16 -------- d-----w- c:\program files\PhotoFiltre
2009-05-16 20:30 . 2009-05-16 20:30 0 ----a-w- c:\windows\nsreg.dat
2009-05-16 20:03 . 2009-05-16 20:02 -------- d-----w- c:\program files\Windows Live
2009-05-16 20:03 . 2009-05-16 20:03 -------- d-----w- c:\program files\Microsoft
2009-05-16 20:03 . 2009-05-16 20:03 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-05-16 19:49 . 2009-05-16 19:49 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-05-16 19:46 . 2009-05-16 19:46 -------- d-----w- c:\program files\Alwil Software
2009-05-16 19:42 . 2009-05-16 19:42 -------- d-----w- c:\program files\Fichiers communs\ArcSoft
2009-05-16 19:41 . 2005-11-02 23:07 -------- d-----w- c:\program files\NewTech Infosystems
2009-05-16 19:40 . 2009-05-16 19:39 -------- d-----w- c:\program files\Acer TV-FM
2009-05-16 19:39 . 2005-11-02 23:07 -------- d-----w- c:\program files\CyberLink
2009-05-16 19:39 . 2009-05-16 19:39 -------- d-----w- c:\program files\Acer
2009-05-16 19:36 . 2009-05-16 19:36 127 ----a-w- c:\documents and settings\alis\Local Settings\Application Data\fusioncache.dat
2009-05-16 19:34 . 2009-05-16 19:34 -------- d-----w- c:\program files\Fichiers communs\Java
2009-05-16 19:29 . 2009-05-16 19:28 -------- d-----w- c:\program files\SiSLan
2009-05-07 15:43 . 2004-08-05 12:00 347136 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:31 . 2006-01-09 18:02 672256 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:31 . 2004-08-05 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 20:09 . 2005-10-06 03:08 1846784 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 15:17 . 2004-08-05 12:00 584192 ----a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-06-16_16.54.29 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-16 17:10 . 2009-06-16 17:10 16384 c:\windows\temp\Perflib_Perfdata_7d8.dat
+ 2009-06-16 17:10 . 2009-06-16 17:10 16384 c:\windows\temp\Perflib_Perfdata_688.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-12 45056]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-03 32768]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-31 148888]
"Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-04-18 49152]
"AspireService"="c:\program files\Acer\Acer eMode Management\AspireService.exe" [2006-06-09 110592]
"MediaSync"="c:\program files\Acer\Acer eConsole\MediaSync.exe" [2006-05-04 425984]
"PCMService"="c:\program files\Acer TV-FM\PCMService.exe" [2006-03-29 143360]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 413696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SiSPower"="SiSPower.dll" - c:\windows\system32\SiSPower.dll [2005-07-13 49152]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-08-16 90112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2009-5-16 45056]
Acer WLAN 11g USB Dongle.lnk - c:\program files\Acer WLAN 11g USB Dongle\ZDWlan.exe [2005-11-16 745472]
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Acer TV-FM\\PowerCinema.exe"=
"c:\\Program Files\\Acer TV-FM\\PCMService.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\program files\SFR\Media Center\httpd\httpd.exe"= c:\program files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"53:TCP"= 53:TCP:websrvx
"8085:TCP"= 8085:TCPodmena

R2 antivirschedulerservice;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/06/2009 17:38 108289]
.
Contenu du dossier 'Tâches planifiées'

2009-06-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyOverride = *.local
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-16 19:11
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3052)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Acer\Acer eConsole\MediaServerService.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
c:\program files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Acer TV-FM\Kernel\TV\CLSched.exe
.
**************************************************************************
.
Heure de fin: 2009-06-16 19:14 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-06-16 17:14
ComboFix2.txt 2009-06-16 16:56

Avant-CF: 105 880 768 512 octets libres
Après-CF: 105 872 023 552 octets libres

273 --- E O F --- 2009-06-11 19:53

Logfile of random's system information tool 1.06 (written by random/random)
Run by alis at 2009-06-16 20:57:36
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 103 GB (89%) free of 116 GB
Total RAM: 447 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:57:40, on 16/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\alis\Bureau\RSIT.exe
C:\Program Files\trend micro\alis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

--
End of file - 7844 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-16 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"ntiMUI"=C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-12 45056]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-03 32768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-08-16 90112]
"Acer Empowering Technology Monitor"=C:\WINDOWS\system32\SysMonitor.exe [2006-04-18 49152]
"AspireService"=C:\Program Files\Acer\Acer eMode Management\AspireService.exe [2006-06-09 110592]
"MediaSync"=C:\Program Files\Acer\Acer eConsole\MediaSync.exe [2006-05-04 425984]
"PCMService"=C:\Program Files\Acer TV-FM\PCMService.exe [2006-03-29 143360]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-16 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NoIE4StubProcessing"=C:\WINDOWS\system32\reg.exe [2004-08-05 53248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Acer WLAN 11g USB Dongle.lnk - C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Acer\Acer eConsole\MediaSync.exe"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer"
"C:\Program Files\Acer\Acer eConsole\eConsole.exe"="C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole"
"C:\Program Files\Acer\Acer eConsole\MediaServerService.exe"="C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server"
"C:\Program Files\Acer TV-FM\PowerCinema.exe"="C:\Program Files\Acer TV-FM\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\Program Files\Acer TV-FM\PCMService.exe"="C:\Program Files\Acer TV-FM\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\SFR\Media Center\httpd\httpd.exe"="C:\Program Files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:ENABLE"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:ENABLE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-16 20:56:41 ----SD---- C:\ComboFix
2009-06-16 20:36:21 ----D---- C:\WINDOWS\ie8updates
2009-06-16 20:35:26 ----D---- C:\WINDOWS\WBEM
2009-06-16 20:34:15 ----HDC---- C:\WINDOWS\ie8
2009-06-16 20:34:15 ----D---- C:\WINDOWS\system32\fr-FR
2009-06-16 20:34:07 ----D---- C:\WINDOWS\LastGood
2009-06-16 20:31:49 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-16 20:31:41 ----N---- C:\WINDOWS\system32\SET176.tmp
2009-06-16 20:31:38 ----N---- C:\WINDOWS\system32\SET17B.tmp
2009-06-16 20:31:37 ----N---- C:\WINDOWS\system32\SET178.tmp
2009-06-16 20:31:37 ----N---- C:\WINDOWS\system32\SET177.tmp
2009-06-16 20:31:35 ----N---- C:\WINDOWS\system32\SET17C.tmp
2009-06-16 20:31:30 ----SHD---- C:\RECYCLER
2009-06-16 20:29:08 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-16 20:28:53 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\java.exe
2009-06-16 20:24:00 ----D---- C:\Program Files\Java
2009-06-16 19:14:52 ----D---- C:\Documents and Settings\alis\Application Data\Search Settings
2009-06-16 19:14:19 ----A---- C:\ComboFix.txt
2009-06-16 19:09:02 ----D---- C:\WINDOWS\temp
2009-06-16 18:46:58 ----A---- C:\Boot.bak
2009-06-16 18:46:54 ----RASHD---- C:\cmdcons
2009-06-16 18:45:16 ----D---- C:\WINDOWS\ERDNT
2009-06-16 18:41:15 ----D---- C:\WINDOWS\Minidump
2009-06-16 17:46:25 ----A---- C:\lopR.txt
2009-06-16 17:45:53 ----D---- C:\Lop SD
2009-06-16 17:38:24 ----D---- C:\Program Files\Avira
2009-06-16 17:38:24 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-06-16 15:04:14 ----D---- C:\Program Files\trend micro
2009-06-16 15:04:13 ----D---- C:\rsit
2009-06-16 14:40:20 ----D---- C:\Documents and Settings\alis\Application Data\Malwarebytes
2009-06-16 14:40:12 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-16 14:40:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-11 21:53:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 21:53:30 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-11 21:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 21:53:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 21:53:04 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-07 13:39:11 ----D---- C:\Documents and Settings\alis\Application Data\ArcSoft
2009-06-07 10:47:51 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-06-07 10:47:42 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FLBCDE.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FD4BCDE.DLL
2009-06-07 10:36:54 ----D---- C:\Documents and Settings\alis\Application Data\EPSON
2009-06-02 21:10:34 ----D---- C:\Documents and Settings\All Users\Application Data\UDL
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.ini
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICEntry.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2009-06-02 21:02:54 ----D---- C:\Documents and Settings\alis\Application Data\InstallShield
2009-06-02 20:49:31 ----D---- C:\Program Files\epson
2009-06-02 20:49:29 ----A---- C:\WINDOWS\system32\escwiad.dll
2009-06-02 20:49:02 ----A---- C:\WINDOWS\CDE DX7400DEFGIPS.ini
2009-05-31 15:52:41 ----D---- C:\Program Files\JRE
2009-05-31 14:45:10 ----D---- C:\Documents and Settings\alis\Application Data\OpenOffice.org
2009-05-31 14:40:08 ----D---- C:\Program Files\OpenOffice.org 3
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-30 15:00:21 ----D---- C:\Documents and Settings\All Users\Application Data\eConsole
2009-05-27 20:07:30 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2009-05-27 20:06:16 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2009-05-27 20:06:15 ----D---- C:\Program Files\Microsoft WSE
2009-05-27 20:01:54 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-05-27 20:01:49 ----D---- C:\WINDOWS\Logs
2009-05-26 16:22:18 ----D---- C:\Documents and Settings\alis\Application Data\AdobeUM
2009-05-25 19:12:51 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-05-24 21:13:10 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-05-24 21:12:49 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-05-24 21:12:29 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-05-24 21:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-05-24 21:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-05-24 21:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-05-24 16:09:15 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-05-24 16:08:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-05-24 16:08:48 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-05-24 16:08:20 ----D---- C:\Program Files\Windows Media Connect 2
2009-05-24 16:08:09 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-05-24 16:05:59 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-05-24 16:05:53 ----D---- C:\Downloads
2009-05-24 16:04:53 ----D---- C:\WINDOWS\system32\LogFiles
2009-05-24 16:04:44 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-05-24 16:04:10 ----D---- C:\Documents and Settings\alis\Application Data\Free Download Manager
2009-05-24 16:03:58 ----D---- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-24 16:03:56 ----D---- C:\Program Files\Free Download Manager
2009-05-21 21:53:03 ----D---- C:\Program Files\NCH Software
2009-05-21 21:52:00 ----D---- C:\Program Files\NCH Swift Sound
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\WMAFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\inetfr.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\AudDesign.dll
2009-05-21 21:41:14 ----D---- C:\Program Files\Free Audio Pack
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-05-21 17:32:46 ----D---- C:\Program Files\SFR
2009-05-20 23:17:05 ----D---- C:\Documents and Settings\alis\Application Data\Apple Computer
2009-05-20 23:16:48 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-05-20 23:16:20 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-20 23:16:02 ----D---- C:\Program Files\Bonjour
2009-05-20 23:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-05-20 23:14:09 ----D---- C:\Program Files\Apple Software Update
2009-05-20 23:13:55 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-05-20 23:13:31 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-05-18 21:56:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-05-18 21:56:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-05-18 21:56:20 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-05-18 21:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-05-18 21:56:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-05-18 21:55:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-05-18 21:55:40 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-05-18 21:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-05-18 21:55:18 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-05-18 21:55:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-05-18 21:55:03 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-05-18 21:54:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-05-18 21:54:30 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-05-18 21:54:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-05-18 21:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-05-18 21:53:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-05-18 21:53:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-05-18 21:53:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-05-18 21:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-05-18 21:53:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-05-18 21:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-05-18 21:52:47 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-05-18 21:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-05-18 21:52:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-05-18 21:52:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-05-18 21:52:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-05-18 21:50:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-05-18 21:50:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-05-18 21:49:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-05-18 21:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-05-18 21:49:40 ----D---- C:\Program Files\MSXML 4.0
2009-05-18 21:49:19 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-05-18 21:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-05-18 21:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-05-18 16:52:27 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-05-17 21:17:06 ----D---- C:\WINDOWS\system32\PreInstall
2009-05-17 21:17:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\muweb.dll
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-05-17 12:04:49 ----D---- C:\Program Files\Fichiers communs\logishrd
2009-05-17 12:04:41 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-05-17 11:45:12 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-05-17 11:44:28 ----D---- C:\Documents and Settings\alis\Application Data\CyberLink
2009-05-17 11:04:14 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-05-17 06:25:28 ----SHD---- C:\system volume information

======List of files/folders modified in the last 1 months======

2009-07-10 22:12:59 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-16 20:57:21 ----AD---- C:\WINDOWS
2009-06-16 20:57:15 ----AD---- C:\WINDOWS\system32
2009-06-16 20:36:43 ----HD---- C:\WINDOWS\inf
2009-06-16 20:36:41 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-06-16 20:36:37 ----D---- C:\Program Files\Internet Explorer
2009-06-16 20:36:28 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-16 20:36:25 ----A---- C:\WINDOWS\imsins.BAK
2009-06-16 20:35:34 ----D---- C:\WINDOWS\system32\config
2009-06-16 20:35:21 ----D---- C:\WINDOWS\Media
2009-06-16 20:35:19 ----D---- C:\WINDOWS\Help
2009-06-16 20:34:08 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-16 20:31:50 ----D---- C:\WINDOWS\Debug
2009-06-16 20:29:45 ----SHD---- C:\WINDOWS\Installer
2009-06-16 20:28:53 ----D---- C:\Program Files\Fichiers communs
2009-06-16 20:28:53 ----D---- C:\Program Files\Adobe
2009-06-16 20:24:00 ----RD---- C:\Program Files
2009-06-16 20:19:18 ----D---- C:\Program Files\Mozilla Firefox
2009-06-16 19:31:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-16 19:14:22 ----AD---- C:\WINDOWS\system32\drivers
2009-06-16 19:11:45 ----A---- C:\WINDOWS\system.ini
2009-06-16 19:09:32 ----D---- C:\WINDOWS\security
2009-06-16 19:08:20 ----D---- C:\WINDOWS\AppPatch
2009-06-16 18:46:58 ----RASH---- C:\boot.ini
2009-06-16 17:36:16 ----D---- C:\WINDOWS\WinSxS
2009-06-16 17:31:40 ----D---- C:\WINDOWS\Prefetch
2009-06-02 21:15:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-02 21:13:22 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-02 21:13:22 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-06-02 20:49:29 ----D---- C:\WINDOWS\twain_32
2009-05-31 15:54:34 ----RSD---- C:\WINDOWS\assembly
2009-05-31 15:53:01 ----RSD---- C:\WINDOWS\Fonts
2009-05-27 20:26:24 ----D---- C:\WINDOWS\Microsoft.NET
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\alis\Application Data\Microsoft
2009-05-27 20:06:12 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-27 20:05:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-27 20:01:57 ----D---- C:\WINDOWS\system32\DirectX
2009-05-24 21:13:30 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-24 16:08:33 ----A---- C:\WINDOWS\win.ini
2009-05-24 16:08:19 ----D---- C:\Program Files\Windows Media Player
2009-05-20 23:14:20 ----SD---- C:\WINDOWS\Tasks
2009-05-20 18:11:44 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-05-20 18:11:43 ----D---- C:\Program Files\Norton AntiVirus
2009-05-20 18:11:43 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-05-20 14:18:31 ----D---- C:\Program Files\Symantec
2009-05-19 16:49:15 ----D---- C:\WINDOWS\system32\wbem
2009-05-18 21:56:41 ----AD---- C:\i386
2009-05-18 21:56:12 ----D---- C:\Program Files\Messenger
2009-05-18 21:51:58 ----D---- C:\WINDOWS\Registration
2009-05-18 19:12:26 ----D---- C:\Documents and Settings\alis\Application Data\Adobe
2009-05-17 11:43:08 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-05-17 06:26:32 ----D---- C:\Acer
2009-05-17 06:26:32 ----A---- C:\WINDOWS\CLEANUP.CMD
2009-05-17 06:25:31 ----D---- C:\drv
2009-05-17 06:25:22 ----RD---- C:\WINDOWS\Web
2009-05-17 06:23:38 ----D---- C:\WINDOWS\system32\usmt
2009-05-17 06:23:37 ----D---- C:\WINDOWS\system32\URTTemp
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\spool
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\Setup
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\Restore
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ras
2009-05-17 06:23:35 ----AD---- C:\WINDOWS\system32\oobe
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\npp
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\mui
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\MsDtc
2009-05-17 06:23:31 ----D---- C:\WINDOWS\system32\Macromed
2009-05-17 06:23:25 ----D---- C:\WINDOWS\system32\IME
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\icsxml
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\ias
2009-05-17 06:21:13 ----D---- C:\WINDOWS\system32\Com
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1036
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1033
2009-05-17 06:21:11 ----AD---- C:\WINDOWS\system
2009-05-17 06:21:10 ----D---- C:\WINDOWS\srchasst
2009-05-17 06:21:05 ----D---- C:\WINDOWS\Resources
2009-05-17 06:21:05 ----D---- C:\WINDOWS\repair
2009-05-17 06:21:02 ----D---- C:\WINDOWS\Provisioning
2009-05-17 06:21:00 ----D---- C:\WINDOWS\PeerNet
2009-05-17 06:20:50 ----RD---- C:\WINDOWS\Offline Web Pages
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msapps
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msagent
2009-05-17 06:20:38 ----D---- C:\WINDOWS\java
2009-05-17 06:20:15 ----D---- C:\WINDOWS\ime
2009-05-17 06:18:49 ----D---- C:\WINDOWS\Cursors
2009-05-17 06:18:39 ----D---- C:\WINDOWS\addins
2009-05-17 06:18:39 ----D---- C:\WINDOWS\AcerDRV
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$UninstallOCA-X86Fre-ENU$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB913446$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB906569$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-05-17 06:18:25 ----HD---- C:\WINDOWS\$NtUninstallKB903235$
2009-05-17 06:18:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901190$
2009-05-17 06:18:23 ----HD---- C:\WINDOWS\$NtUninstallKB901214$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-05-17 06:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB899589$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899591$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899588$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899587$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB898458$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB896727$
2009-05-17 06:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-05-17 06:18:13 ----HD---- C:\WINDOWS\$NtUninstallKB896428$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896423$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896422$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896358$
2009-05-17 06:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2009-05-17 06:18:10 ----HD---- C:\WINDOWS\$NtUninstallKB894391$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893756$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893357$
2009-05-17 06:18:06 ----HD---- C:\WINDOWS\$NtUninstallKB893086$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB890923$
2009-05-17 06:18:03 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2009-05-17 06:18:01 ----HD---- C:\WINDOWS\$NtUninstallKB890175$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890047$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB888302$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885836$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885835$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB883939$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873339$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2009-05-17 06:17:51 ----HD---- C:\WINDOWS\$NtUninstallKB867282$
2009-05-17 06:17:04 ----AD---- C:\VALUEADD
2009-05-17 06:17:01 ----D---- C:\Program Files\xerox
2009-05-17 06:17:01 ----D---- C:\Program Files\Windows NT
2009-05-17 06:17:01 ----AD---- C:\Sysinfo
2009-05-17 06:16:57 ----D---- C:\Program Files\sisagp
2009-05-17 06:16:57 ----D---- C:\Program Files\Services en ligne
2009-05-17 06:16:57 ----D---- C:\Program Files\Realtek AC97
2009-05-17 06:16:49 ----D---- C:\Program Files\Outlook Express
2009-05-17 06:16:48 ----D---- C:\Program Files\Online Services
2009-05-17 06:16:48 ----D---- C:\Program Files\Oca History Tool
2009-05-17 06:15:46 ----D---- C:\Program Files\NetMeeting
2009-05-17 06:15:37 ----D---- C:\Program Files\MSN
2009-05-17 06:15:36 ----D---- C:\Program Files\Movie Maker
2009-05-17 06:15:34 ----D---- C:\Program Files\microsoft frontpage
2009-05-17 06:15:29 ----D---- C:\Program Files\Fichiers communs\System
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\Services
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-05-17 06:15:13 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-05-17 06:14:29 ----D---- C:\Program Files\Acer WLAN 11g USB Dongle
2009-05-17 06:11:04 ----AD---- C:\Guide
2009-05-17 06:10:21 ----AD---- C:\dotnetfx
2009-05-17 06:10:05 ----D---- C:\Documents and Settings\alis\Application Data\Identities

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-07-13 11904]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-18 13952]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-18 3644800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-11-03 6144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-07-13 257024]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2005-03-17 32256]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-05 26496]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-05 14848]
S3 catchme;catchme; \??\C:\DOCUME~1\alis\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-05-09 41888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-05-09 1276832]
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-05 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-05 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-05 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S3 ZD1211U(ZyDAS);ZyDAS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211u.sys [2005-10-04 280064]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\Acer\Acer eConsole\MediaServerService.exe [2006-05-04 438272]
R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672]
R2 antivirschedulerservice;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 antivirservice;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe [2006-03-29 266338]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe [2006-03-29 114784]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe [2006-03-29 1073152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-16 152984]
R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-08-03 100032]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-05 268800]
S2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2009-01-07 26144]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-08-03 2119360]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]

-----------------EOF-----------------

en fait c'est parce que j'avais pas redemarrer c'est pour ça pour internet explorer8

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========

Service\Driver Planificateur LiveUpdate automatique deleted successfully.
Service\Driver LiveUpdate not found.
Service\Driver LiveUpdate not found.
========== FILES ==========
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings\kb128\temp scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings\kb128 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\alis\Application Data\Search Settings scheduled to be moved on reboot.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\etilqs_aOFz5EAkx9yjvVUmNhL5 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\JETB536.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\alis\LOCALS~1\Temp\~DFD81.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\alis\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\CLML_AGENT_LOG1.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\JETA7A9.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_588.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6d8.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_eLidMISzutykzVS scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\alis\Local Settings\Application Data\Mozilla\Firefox\Profiles\jl73ehws.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.

OTM by OldTimer - Version 2.1.0.1 log created on 06162009_213400

euh bah ça ne fait plus comme avant ,& apparement on ne me signale plus de virus donc ça a l'air de s"arranger
Logfile of random's system information tool 1.06 (written by random/random)
Run by alis at 2009-06-16 21:45:12
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 104 GB (89%) free of 116 GB
Total RAM: 447 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:45:20, on 16/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\alis\Bureau\RSIT.exe
C:\Program Files\trend micro\alis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 7561 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-16 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"ntiMUI"=C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-12 45056]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-03 32768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-08-16 90112]
"Acer Empowering Technology Monitor"=C:\WINDOWS\system32\SysMonitor.exe [2006-04-18 49152]
"AspireService"=C:\Program Files\Acer\Acer eMode Management\AspireService.exe [2006-06-09 110592]
"MediaSync"=C:\Program Files\Acer\Acer eConsole\MediaSync.exe [2006-05-04 425984]
"PCMService"=C:\Program Files\Acer TV-FM\PCMService.exe [2006-03-29 143360]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-16 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Acer WLAN 11g USB Dongle.lnk - C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Acer\Acer eConsole\MediaSync.exe"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer"
"C:\Program Files\Acer\Acer eConsole\eConsole.exe"="C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole"
"C:\Program Files\Acer\Acer eConsole\MediaServerService.exe"="C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server"
"C:\Program Files\Acer TV-FM\PowerCinema.exe"="C:\Program Files\Acer TV-FM\PowerCinema.exe:*:Enabled:CyberLink PowerCinema"
"C:\Program Files\Acer TV-FM\PCMService.exe"="C:\Program Files\Acer TV-FM\PCMService.exe:*:Enabled:CyberLink PowerCinema Resident Program"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\SFR\Media Center\httpd\httpd.exe"="C:\Program Files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:ENABLE"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:ENABLE"
"C:\Documents and Settings\alis\Local Settings\temp\7zS1AE.tmp\SymNRT.exe"="C:\Documents and Settings\alis\Local Settings\temp\7zS1AE.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-16 21:33:28 ----D---- C:\_OTM
2009-06-16 21:27:19 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-06-16 20:56:41 ----SD---- C:\ComboFix
2009-06-16 20:36:21 ----D---- C:\WINDOWS\ie8updates
2009-06-16 20:35:26 ----D---- C:\WINDOWS\WBEM
2009-06-16 20:34:15 ----HDC---- C:\WINDOWS\ie8
2009-06-16 20:34:15 ----D---- C:\WINDOWS\system32\fr-FR
2009-06-16 20:31:49 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-16 20:31:30 ----SHD---- C:\RECYCLER
2009-06-16 20:29:08 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-16 20:28:53 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-16 20:24:19 ----A---- C:\WINDOWS\system32\java.exe
2009-06-16 20:24:00 ----D---- C:\Program Files\Java
2009-06-16 19:14:52 ----D---- C:\Documents and Settings\alis\Application Data\Search Settings
2009-06-16 19:14:19 ----A---- C:\ComboFix.txt
2009-06-16 19:09:02 ----D---- C:\WINDOWS\temp
2009-06-16 18:46:58 ----A---- C:\Boot.bak
2009-06-16 18:46:54 ----RASHD---- C:\cmdcons
2009-06-16 18:45:16 ----D---- C:\WINDOWS\ERDNT
2009-06-16 18:41:15 ----D---- C:\WINDOWS\Minidump
2009-06-16 17:46:25 ----A---- C:\lopR.txt
2009-06-16 17:45:53 ----D---- C:\Lop SD
2009-06-16 17:38:24 ----D---- C:\Program Files\Avira
2009-06-16 17:38:24 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-06-16 15:04:14 ----D---- C:\Program Files\trend micro
2009-06-16 15:04:13 ----D---- C:\rsit
2009-06-16 14:40:20 ----D---- C:\Documents and Settings\alis\Application Data\Malwarebytes
2009-06-16 14:40:12 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-16 14:40:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-11 21:53:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 21:53:30 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-11 21:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 21:53:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 21:53:04 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-07 13:39:11 ----D---- C:\Documents and Settings\alis\Application Data\ArcSoft
2009-06-07 10:47:51 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-06-07 10:47:42 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FLBCDE.DLL
2009-06-07 10:47:41 ----A---- C:\WINDOWS\system32\E_FD4BCDE.DLL
2009-06-07 10:36:54 ----D---- C:\Documents and Settings\alis\Application Data\EPSON
2009-06-02 21:10:34 ----D---- C:\Documents and Settings\All Users\Application Data\UDL
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.ini
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICSDK.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\PICEntry.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2009-06-02 21:02:57 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2009-06-02 21:02:54 ----D---- C:\Documents and Settings\alis\Application Data\InstallShield
2009-06-02 20:49:31 ----D---- C:\Program Files\epson
2009-06-02 20:49:29 ----A---- C:\WINDOWS\system32\escwiad.dll
2009-06-02 20:49:02 ----A---- C:\WINDOWS\CDE DX7400DEFGIPS.ini
2009-05-31 15:52:41 ----D---- C:\Program Files\JRE
2009-05-31 14:45:10 ----D---- C:\Documents and Settings\alis\Application Data\OpenOffice.org
2009-05-31 14:40:08 ----D---- C:\Program Files\OpenOffice.org 3
2009-05-31 14:39:46 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-30 15:00:21 ----D---- C:\Documents and Settings\All Users\Application Data\eConsole
2009-05-27 20:07:30 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2009-05-27 20:06:16 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2009-05-27 20:06:15 ----D---- C:\Program Files\Microsoft WSE
2009-05-27 20:01:54 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-05-27 20:01:49 ----D---- C:\WINDOWS\Logs
2009-05-26 16:22:18 ----D---- C:\Documents and Settings\alis\Application Data\AdobeUM
2009-05-25 19:12:51 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-05-24 21:13:10 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-05-24 21:12:49 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-05-24 21:12:29 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-05-24 21:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-05-24 21:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-05-24 21:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-05-24 16:09:15 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-05-24 16:08:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-05-24 16:08:48 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-05-24 16:08:20 ----D---- C:\Program Files\Windows Media Connect 2
2009-05-24 16:08:09 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-05-24 16:05:59 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-05-24 16:05:53 ----D---- C:\Downloads
2009-05-24 16:04:53 ----D---- C:\WINDOWS\system32\LogFiles
2009-05-24 16:04:44 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-05-24 16:04:10 ----D---- C:\Documents and Settings\alis\Application Data\Free Download Manager
2009-05-24 16:03:58 ----D---- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-24 16:03:56 ----D---- C:\Program Files\Free Download Manager
2009-05-21 21:53:03 ----D---- C:\Program Files\NCH Software
2009-05-21 21:52:00 ----D---- C:\Program Files\NCH Swift Sound
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\WMAFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudFile.dll
2009-05-21 21:41:16 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\inetfr.DLL
2009-05-21 21:41:15 ----A---- C:\WINDOWS\system32\AudDesign.dll
2009-05-21 21:41:14 ----D---- C:\Program Files\Free Audio Pack
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2009-05-21 21:41:14 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-05-21 17:32:46 ----D---- C:\Program Files\SFR
2009-05-20 23:17:05 ----D---- C:\Documents and Settings\alis\Application Data\Apple Computer
2009-05-20 23:16:48 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-05-20 23:16:20 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-20 23:16:02 ----D---- C:\Program Files\Bonjour
2009-05-20 23:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-05-20 23:14:09 ----D---- C:\Program Files\Apple Software Update
2009-05-20 23:13:55 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-05-20 23:13:31 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-05-18 21:56:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-05-18 21:56:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-05-18 21:56:20 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-05-18 21:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-05-18 21:56:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-05-18 21:55:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-05-18 21:55:40 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-05-18 21:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-05-18 21:55:18 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-05-18 21:55:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-05-18 21:55:03 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-05-18 21:54:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-05-18 21:54:30 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-05-18 21:54:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-05-18 21:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-05-18 21:53:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-05-18 21:53:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-05-18 21:53:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-05-18 21:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-05-18 21:53:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-05-18 21:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-05-18 21:52:47 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-05-18 21:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-05-18 21:52:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-05-18 21:52:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-05-18 21:52:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-05-18 21:50:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-05-18 21:50:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-05-18 21:49:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-05-18 21:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-05-18 21:49:40 ----D---- C:\Program Files\MSXML 4.0
2009-05-18 21:49:19 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-05-18 21:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-05-18 21:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-05-18 16:52:27 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-05-17 21:17:06 ----D---- C:\WINDOWS\system32\PreInstall
2009-05-17 21:17:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\muweb.dll
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-05-17 17:56:49 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-05-17 12:04:49 ----D---- C:\Program Files\Fichiers communs\logishrd
2009-05-17 12:04:41 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-05-17 11:45:12 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-05-17 11:44:28 ----D---- C:\Documents and Settings\alis\Application Data\CyberLink
2009-05-17 11:04:14 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-05-17 06:25:28 ----SHD---- C:\system volume information

======List of files/folders modified in the last 1 months======

2009-07-10 22:12:59 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-16 21:44:11 ----D---- C:\Program Files\Mozilla Firefox
2009-06-16 21:36:33 ----AD---- C:\WINDOWS
2009-06-16 21:36:03 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-16 21:34:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-16 21:31:23 ----AD---- C:\WINDOWS\system32
2009-06-16 21:30:20 ----RD---- C:\Program Files
2009-06-16 21:30:19 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-06-16 21:30:19 ----D---- C:\WINDOWS\Help
2009-06-16 21:30:19 ----D---- C:\Program Files\Internet Explorer
2009-06-16 21:28:33 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-06-16 21:27:35 ----SHD---- C:\WINDOWS\Installer
2009-06-16 20:57:05 ----D---- C:\WINDOWS\system32\Restore
2009-06-16 20:36:43 ----HD---- C:\WINDOWS\inf
2009-06-16 20:36:28 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-16 20:36:25 ----A---- C:\WINDOWS\imsins.BAK
2009-06-16 20:35:34 ----D---- C:\WINDOWS\system32\config
2009-06-16 20:35:21 ----D---- C:\WINDOWS\Media
2009-06-16 20:31:50 ----D---- C:\WINDOWS\Debug
2009-06-16 20:28:53 ----D---- C:\Program Files\Fichiers communs
2009-06-16 20:28:53 ----D---- C:\Program Files\Adobe
2009-06-16 19:14:22 ----AD---- C:\WINDOWS\system32\drivers
2009-06-16 19:11:45 ----A---- C:\WINDOWS\system.ini
2009-06-16 19:09:32 ----D---- C:\WINDOWS\security
2009-06-16 19:08:20 ----D---- C:\WINDOWS\AppPatch
2009-06-16 18:46:58 ----RASH---- C:\boot.ini
2009-06-16 17:36:16 ----D---- C:\WINDOWS\WinSxS
2009-06-16 17:31:40 ----D---- C:\WINDOWS\Prefetch
2009-06-02 21:15:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-02 21:13:22 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-02 21:13:22 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-06-02 20:49:29 ----D---- C:\WINDOWS\twain_32
2009-05-31 15:54:34 ----RSD---- C:\WINDOWS\assembly
2009-05-31 15:53:01 ----RSD---- C:\WINDOWS\Fonts
2009-05-27 20:26:24 ----D---- C:\WINDOWS\Microsoft.NET
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-05-27 20:06:16 ----SD---- C:\Documents and Settings\alis\Application Data\Microsoft
2009-05-27 20:06:12 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-27 20:05:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-27 20:01:57 ----D---- C:\WINDOWS\system32\DirectX
2009-05-24 21:13:30 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-24 16:08:33 ----A---- C:\WINDOWS\win.ini
2009-05-24 16:08:19 ----D---- C:\Program Files\Windows Media Player
2009-05-20 23:14:20 ----SD---- C:\WINDOWS\Tasks
2009-05-20 18:11:43 ----D---- C:\Program Files\Norton AntiVirus
2009-05-19 16:49:15 ----D---- C:\WINDOWS\system32\wbem
2009-05-18 21:56:41 ----AD---- C:\i386
2009-05-18 21:56:12 ----D---- C:\Program Files\Messenger
2009-05-18 21:51:58 ----D---- C:\WINDOWS\Registration
2009-05-18 19:12:26 ----D---- C:\Documents and Settings\alis\Application Data\Adobe
2009-05-17 11:43:08 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-05-17 06:26:32 ----D---- C:\Acer
2009-05-17 06:26:32 ----A---- C:\WINDOWS\CLEANUP.CMD
2009-05-17 06:25:31 ----D---- C:\drv
2009-05-17 06:25:22 ----RD---- C:\WINDOWS\Web
2009-05-17 06:23:38 ----D---- C:\WINDOWS\system32\usmt
2009-05-17 06:23:37 ----D---- C:\WINDOWS\system32\URTTemp
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\spool
2009-05-17 06:23:36 ----D---- C:\WINDOWS\system32\Setup
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-17 06:23:35 ----D---- C:\WINDOWS\system32\ras
2009-05-17 06:23:35 ----AD---- C:\WINDOWS\system32\oobe
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\npp
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\mui
2009-05-17 06:23:32 ----D---- C:\WINDOWS\system32\MsDtc
2009-05-17 06:23:31 ----D---- C:\WINDOWS\system32\Macromed
2009-05-17 06:23:25 ----D---- C:\WINDOWS\system32\IME
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\icsxml
2009-05-17 06:23:24 ----D---- C:\WINDOWS\system32\ias
2009-05-17 06:21:13 ----D---- C:\WINDOWS\system32\Com
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1036
2009-05-17 06:21:11 ----D---- C:\WINDOWS\system32\1033
2009-05-17 06:21:11 ----AD---- C:\WINDOWS\system
2009-05-17 06:21:10 ----D---- C:\WINDOWS\srchasst
2009-05-17 06:21:05 ----D---- C:\WINDOWS\Resources
2009-05-17 06:21:05 ----D---- C:\WINDOWS\repair
2009-05-17 06:21:02 ----D---- C:\WINDOWS\Provisioning
2009-05-17 06:21:00 ----D---- C:\WINDOWS\PeerNet
2009-05-17 06:20:50 ----RD---- C:\WINDOWS\Offline Web Pages
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msapps
2009-05-17 06:20:50 ----D---- C:\WINDOWS\msagent
2009-05-17 06:20:38 ----D---- C:\WINDOWS\java
2009-05-17 06:20:15 ----D---- C:\WINDOWS\ime
2009-05-17 06:18:49 ----D---- C:\WINDOWS\Cursors
2009-05-17 06:18:39 ----D---- C:\WINDOWS\addins
2009-05-17 06:18:39 ----D---- C:\WINDOWS\AcerDRV
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$UninstallOCA-X86Fre-ENU$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB913446$
2009-05-17 06:18:38 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-05-17 06:18:32 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2009-05-17 06:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB906569$
2009-05-17 06:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-05-17 06:18:26 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-05-17 06:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-05-17 06:18:25 ----HD---- C:\WINDOWS\$NtUninstallKB903235$
2009-05-17 06:18:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901190$
2009-05-17 06:18:23 ----HD---- C:\WINDOWS\$NtUninstallKB901214$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-05-17 06:18:22 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-05-17 06:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB899589$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899591$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899588$
2009-05-17 06:18:19 ----HD---- C:\WINDOWS\$NtUninstallKB899587$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB898458$
2009-05-17 06:18:18 ----HD---- C:\WINDOWS\$NtUninstallKB896727$
2009-05-17 06:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-05-17 06:18:13 ----HD---- C:\WINDOWS\$NtUninstallKB896428$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896423$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896422$
2009-05-17 06:18:12 ----HD---- C:\WINDOWS\$NtUninstallKB896358$
2009-05-17 06:18:11 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2009-05-17 06:18:10 ----HD---- C:\WINDOWS\$NtUninstallKB894391$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893756$
2009-05-17 06:18:09 ----HD---- C:\WINDOWS\$NtUninstallKB893357$
2009-05-17 06:18:06 ----HD---- C:\WINDOWS\$NtUninstallKB893086$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2009-05-17 06:18:04 ----HD---- C:\WINDOWS\$NtUninstallKB890923$
2009-05-17 06:18:03 ----HD---- C:\WINDOWS\$NtUninstallKB890859$
2009-05-17 06:18:01 ----HD---- C:\WINDOWS\$NtUninstallKB890175$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890047$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB890046$
2009-05-17 06:17:59 ----HD---- C:\WINDOWS\$NtUninstallKB888302$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885836$
2009-05-17 06:17:58 ----HD---- C:\WINDOWS\$NtUninstallKB885835$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2009-05-17 06:17:57 ----HD---- C:\WINDOWS\$NtUninstallKB883939$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873339$
2009-05-17 06:17:52 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2009-05-17 06:17:51 ----HD---- C:\WINDOWS\$NtUninstallKB867282$
2009-05-17 06:17:04 ----AD---- C:\VALUEADD
2009-05-17 06:17:01 ----D---- C:\Program Files\xerox
2009-05-17 06:17:01 ----D---- C:\Program Files\Windows NT
2009-05-17 06:17:01 ----AD---- C:\Sysinfo
2009-05-17 06:16:57 ----D---- C:\Program Files\sisagp
2009-05-17 06:16:57 ----D---- C:\Program Files\Services en ligne
2009-05-17 06:16:57 ----D---- C:\Program Files\Realtek AC97
2009-05-17 06:16:49 ----D---- C:\Program Files\Outlook Express
2009-05-17 06:16:48 ----D---- C:\Program Files\Online Services
2009-05-17 06:16:48 ----D---- C:\Program Files\Oca History Tool
2009-05-17 06:15:46 ----D---- C:\Program Files\NetMeeting
2009-05-17 06:15:37 ----D---- C:\Program Files\MSN
2009-05-17 06:15:36 ----D---- C:\Program Files\Movie Maker
2009-05-17 06:15:34 ----D---- C:\Program Files\microsoft frontpage
2009-05-17 06:15:29 ----D---- C:\Program Files\Fichiers communs\System
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\Services
2009-05-17 06:15:15 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-05-17 06:15:13 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-05-17 06:14:29 ----D---- C:\Program Files\Acer WLAN 11g USB Dongle
2009-05-17 06:11:04 ----AD---- C:\Guide
2009-05-17 06:10:21 ----AD---- C:\dotnetfx
2009-05-17 06:10:05 ----D---- C:\Documents and Settings\alis\Application Data\Identities

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-07-13 11904]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-18 13952]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-18 3644800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-11-03 6144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-07-13 257024]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2005-03-17 32256]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-05 26496]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-05 14848]
S3 catchme;catchme; \??\C:\DOCUME~1\alis\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-05-09 41888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-05-09 1276832]
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-05 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-05 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-05 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S3 ZD1211U(ZyDAS);ZyDAS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211u.sys [2005-10-04 280064]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\Acer\Acer eConsole\MediaServerService.exe [2006-05-04 438272]
R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672]
R2 antivirschedulerservice;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 antivirservice;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe [2006-03-29 266338]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe [2006-03-29 114784]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe [2006-03-29 1073152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-16 152984]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-05 268800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]

-----------------EOF-----------------

Avira AntiVir Personal
Date de création du fichier de rapport : mardi 16 juin 2009 21:55

La recherche porte sur 1467209 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série : 0000149996-ADJIE-0000001
Plateforme : Windows XP
Version de Windows : (Service Pack 2) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur : ACER-FE8B363750

Informations de version :
BUILD.DAT : 9.0.0.65 17959 Bytes 22/04/2009 12:06:00
AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 12:20:54
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 19:33:26
ANTIVIR2.VDF : 7.1.4.87 2982912 Bytes 12/06/2009 16:26:38
ANTIVIR3.VDF : 7.1.4.100 53760 Bytes 16/06/2009 16:26:38
Version du moteur : 8.2.0.187
AEVDF.DLL : 8.1.1.1 106868 Bytes 16/06/2009 16:26:45
AESCRIPT.DLL : 8.1.2.6 409978 Bytes 16/06/2009 16:26:44
AESCN.DLL : 8.1.2.3 127347 Bytes 16/06/2009 16:26:44
AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 17:24:41
AEPACK.DLL : 8.1.3.18 401783 Bytes 16/06/2009 16:26:44
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 19:01:56
AEHEUR.DLL : 8.1.0.131 1786232 Bytes 16/06/2009 16:26:43
AEHELP.DLL : 8.1.3.6 205174 Bytes 16/06/2009 16:26:40
AEGEN.DLL : 8.1.1.45 348532 Bytes 16/06/2009 16:26:40
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
AECORE.DLL : 8.1.6.12 180599 Bytes 16/06/2009 16:26:39
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 17/02/2009 12:49:32
RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:, D:,
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen

Début de la recherche : mardi 16 juin 2009 21:55

La recherche d'objets cachés commence.
'31130' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wlcomm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ZDWlan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Acer.Empowering.Framework.Launcher.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PCMService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MediaSync.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AspireService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SysMonitor.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SOUNDMAN.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'PDVDServ.exe' - '1' module(s) sont contrôlés
Processus de recherche 'eRAgent.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CLSched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CLMLServer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CLCapSvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MemCheck.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MediaServerService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'42' processus ont été contrôlés avec '42' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD1
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD2
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD3
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD4
[INFO] Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !
Secteur d'amorçage 'D:\'
[INFO] Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '64' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\' <ACER>
C:\hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
Recherche débutant dans 'D:\' <ACERDATA>


Fin de la recherche : mardi 16 juin 2009 22:23
Temps nécessaire: 28:20 Minute(s)

La recherche a été effectuée intégralement

4569 Les répertoires ont été contrôlés
256369 Des fichiers ont été contrôlés
0 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
0 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
256367 Fichiers non infectés
7584 Les archives ont été contrôlées
2 Avertissements
2 Consignes
31130 Des objets ont été contrôlés lors du Rootkitscan
0 Des objets cachés ont été trouvés

oui pour c'est bon je pense merci beaucoup mais j'ai deux questions :

1) Est-ce que je peux supprimer tous les logiciels installé recemment ?
2) Comment ça se fait qu'à chaque fois 'jai des virus , il n'y a pas longtemps ça a fait la même je pouvais meme pas aller sur internet donc j'ai du tout formater et je pensais que c'etait fini mais là j'en ai encore eu et je me rend compte quand même que avast c'est vraiment nul..?

[ Rapport ToolsCleaner version 2.3.6 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Combofix: trouvé !
C:\Lop SD: trouvé !
C:\_OTM: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\alis\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\alis\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\alis\Bureau\Rsit.exe: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\alis\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\alis\Bureau\OTM.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\alis\Bureau\Rsit.exe: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Combofix: supprimé !
C:\Lop SD: supprimé !
C:\_OTM: supprimé !
C:\Rsit: supprimé !

Oui j'essaierai de faire attention mais euh il reste des logiciels je peux les supprimer du genre ccleaner etc..?

ok encore merci