[Résolu]BigDadSearch : Moteur de recherche non voulu hyper chiant

Yoog_Fix 2.08 de Batch_Man
Debut a 20:22 le 26/06/2009
OS : Microsoft Windows XP
Service Pack : Service Pack 3
Internet Explorer : 8.0.6001.18702
Mozilla Firefox : 3.0.11 (fr)
Index : Administrateur
Proco : Intel(R) Pentium(R) 4 CPU 3.00GHz
Ram : 1022,6 Mo
Mode de démarrage : Normal
Lancé de "C:\Documents and Settings\Index\Mes documents\Yoog_Fix.bat"


Option [1] 2 Recherche

-------------[ Recherche ]-------------

TROUVE - C:\Program Files\Mozilla Firefox\components\83fc5c18-d962-ca34-294f-bc0d9509bf83.dll
TROUVE - C:\Program Files\Mozilla Firefox\components\djcymugjjqqbcz.dll
TROUVE - C:\WINDOWS\System32\eb201676-8282-319b-897f-bce3f7bbfc17.exe
TROUVE - C:\WINDOWS\System32\eb201676-8282-319b-897f-bce3f7bbfc17.exe
TROUVE - C:\WINDOWS\system32\djcymugjjqqbcz.dll-uninst.exe

TROUVE - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eb201676-8282-319b-897f-bce3f7bbfc17
TROUVE - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eb201676-8282-319b-897f-bce3f7bbfc17


-------------[ Suspects ]


-------------[ Autres infections ]


[HKLM\SOFTWARE\Mozilla\Firefox\extensions]
{ABDE892B-13A8-4d1b-88E6-365A6E755758}=C:\Program Files\Real\RealPlayer\browserrecord
C:\Program Files\Real\RealPlayer\browserrecord\chrome
C:\Program Files\Real\RealPlayer\browserrecord\chrome.manifest
C:\Program Files\Real\RealPlayer\browserrecord\components
C:\Program Files\Real\RealPlayer\browserrecord\install.rdf

[HKLM\SOFTWARE\Mozilla\Mozilla Firefox 3.0.11\extensions]
+---> Goored possible <---+
C:\WINDOWS\iun6002.exe
+---> toolbar(s) possible(s) <---+


--------------[ Analyse complementaire : [Firefox] ]--------------

Mozilla Firefox 3.0.11 (fr)
Firefox non installé : C:\Program Files\Mozilla Firefox
Path Configuration: C:\Documents and Settings\Index\Application Data\Mozilla\Firefox\Profiles\g734bz1l.default


[C:\Documents and Settings\Index\..\prefs.js] browser.startup.homepage: http://www.pokemontrash.com
[C:\Documents and Settings\Index\..\prefs.js] browser.search.selectedEngine: Search
[C:\Documents and Settings\Index\..\prefs.js] browser.search.defaultenginename: Search

--------[ Extensions Firefox ]

[Index] {07b2a769-ed19-4483-87ce-c643914c81bb} = Vista-aero
[Index] {07b2a769-ed19-4483-87ce-c643914c81bb} = Vista-aero
[Index] {07b2a769-ed19-4483-87ce-c643914c81bb} = Vista-aero
[Index] {1bb9ca60-cdad-11dd-ad8b-0800200c9a66} = avant.garde.10011
[Index] {2c088200-b973-11db-8314-0800200c9a66} = Harley Davidson
[Index] {635abd67-4fe9-1b23-4f01-e679fa7484c1} = Yahoo! Toolbar
[Index] {99de5f32-88bf-43c9-b47e-a894a4b72e71} = CrystalFox Modern
[Index] {a81bafeb-b6ed-4501-aa17-15a2b3857e56} = iFox
[Index] {a81bafeb-b6ed-4501-aa17-15a2b3857e56} = iFox
[Index] {b9db16a4-6edc-47ec-a1f4-b86292ed211d} = DownloadHelper
[Index] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} = Adblock Plus
[Index] {E9A1DEE0-C623-4439-8932-001E7D17607D} = Ask Toolbar for Firefox

{ABDE892B-13A8-4d1b-88E6-365A6E755758} = C:\Program Files\Real\RealPlayer\browserrecord
jqs@sun.com = C:\Program Files\Java\jre6\lib\deploy\jqs\ff

--------[ Mozilla Plugins ]

Path = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
XPTPath = C:\WINDOWS\system32\Macromed\Flash\flashplayer.xpt
ProductName = Adobe® Flash® Player Plugin
Vendor = Adobe Systems Incorporated
Version = 10.0.22.87

ProductName = DNA
Version = 1.0.0.1

Vendor = BitTorrent, Inc.
Path = C:\Program Files\DNA\plugins\npbtdna.dll
Path = C:\Program Files\DivX\DivX Web Player\npdivx32.dll
XPTPath = C:\Program Files\DivX\DivX Web Player\npdivx32.xpt
GeckoVersion = 1.00
Version = 1.0.0

Vendor = DivX,Inc.
ProductName = DivX® Web Player
Path = C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
XPTPath = C:\Program Files\DivX\DivX Content Uploader\npUpload.xpt
GeckoVersion = 1.00
Version = 1.0.0

Vendor = DivX,Inc.
ProductName = DivX® Content Upload Plugin
Path = C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
XPTPath = C:\Program Files\DivX\DivX Player\nsIDivxPlayerPlugin.xpt
GeckoVersion = 1.00
Version = 1.0.0

Vendor = DivX,Inc.
ProductName = DivX® Player Plugin
GeckoVersion = 1.7.5
Path = c:\Program Files\Microsoft Silverlight\2.0.40115.0\npctrl.dll
ProductName = Ag Player
Vendor = Microsoft
Version = 2.0

Path = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
Version = 6.0.12.69

Vendor = RealNetworks
XPTPath = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.xpt
Path = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
Version = 1.0.3.69

Vendor = RealNetworks
Path = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
Version = 6.0.12.69

Vendor = RealNetworks
XPTPath = C:\Program Files\Real\RealPlayer\Netscape6\nsJSRealPlayerPlugin.xpt
Path = C:\Program Files\Google\Update\1.2.145.5\npGoogleOneClick8.dll
ProductName = Google Update
Vendor = Google
Version = 8


--------[ Plugins de recherche ]

[Program Files] amazon-france.xml = http://www.amazon.fr/
[Program Files] eBay-france.xml = http://search.ebay.fr/
[Program Files] google.xml = http://www.google.com/firefox
[Program Files] keenfinder128.xml = moz:SearchForm
[Program Files] keenfinder132.xml = moz:SearchForm
[Program Files] keenfinder136.xml = moz:SearchForm
[Program Files] MediaDICO-fr.xml = http://www.dictionnaire-mediadico. [...] naires.asp
[Program Files] wikipedia-fr.xml = http://fr.wikipedia.org/wiki/Special:Recherche
[Program Files] yahoo-france.xml = http://fr.search.yahoo.com/

--------[ Listing de dossiers ]

[25/06/2009 02:56 | --a------ | 1245184 bytes] C:\Program Files\Mozilla Firefox\Components\83fc5c18-d962-ca34-294f-bc0d9509bf83.dll
[13/06/2009 13:59 | --a------ | 23032 bytes] C:\Program Files\Mozilla Firefox\Components\browserdirprovider.dll
[13/06/2009 13:59 | --a------ | 134648 bytes] C:\Program Files\Mozilla Firefox\Components\brwsrcmp.dll
[27/05/2009 19:06 | --a------ | 432128 bytes] C:\Program Files\Mozilla Firefox\Components\djcymugjjqqbcz.dll
[11/11/2008 09:38 | --a------ | 663552 bytes] C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[09/03/2009 05:19 | --a------ | 410984 bytes] C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
[28/09/2007 19:53 | --a------ | 717312 bytes] C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll
[28/09/2007 19:54 | --a------ | 98304 bytes] C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
[13/06/2009 13:59 | --a------ | 65528 bytes] C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[22/03/2007 20:23 | --a------ | 17248 bytes] C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
[15/06/2009 19:28 | --a------ | 239432 bytes] C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[13/02/2009 14:24 | --a------ | 131072 bytes] C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll

--------------[ Analyse du Registre ]

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL: http://go.microsoft.com/fwlink/?LinkId=69157
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL: http://go.microsoft.com/fwlink/?LinkId=54896
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL: http://go.microsoft.com/fwlink/?LinkId=69157
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL: http://www.microsoft.com/isapi/red [...] r=iesearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL: http://go.microsoft.com/fwlink/?LinkId=54896

[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet =
NavigationFailure = res://ieframe.dll/navcancl.htm
DesktopItemNavigationFailure = res://ieframe.dll/navcancl.htm
NavigationCanceled = res://ieframe.dll/navcancl.htm
OfflineInformation = res://ieframe.dll/offcancl.htm
Home = 0x10e
blank = res://mshtml.dll/blank.htm
PostNotCached = res://ieframe.dll/repost.htm
Tabs = res://ieframe.dll/tabswelcome.htm
InPrivate = res://ieframe.dll/inprivate.htm
NoAdd-ons = res://ieframe.dll/noaddon.htm
NoAdd-onsInfo = res://ieframe.dll/noaddoninfo.htm
SecurityRisk = res://ieframe.dll/securityatrisk.htm

--------[ Browser Helper Object ]

BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3},@SANS NOM=3.0
BHO: {3049C3E9-B461-4BC5-8870-4C09146192CA},@SANS NOM=3.0
BHO: {3c1b318b-0c93-9cf1-22de-05487e7694bf},@SANS NOM=3.0
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB},@SANS NOM=3.0
BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6},@SANS NOM=3.0
BHO: {C7921576-C9A6-47E8-5164-898A7E4A2AEA},@SANS NOM=3.0
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9},@SANS NOM=3.0
BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C},@SANS NOM=3.0
BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C},@SANS NOM=JQSIEStartDetectorImpl
BHO: {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A},@SANS NOM=3.0
BHO: {FF6C3CF0-4B15-11D1-ABED-709549C10000},@SANS NOM=3.0
BHO: {FF6C3CF0-4B15-11D1-ABED-709549C10000},@SANS NOM=DAPIELoader Class

--------[ SearchScopes ]

[HKEY_USERS\S-1-5-21-1957994488-2052111302-682003330-1007\..\SearchScopes],@DefaultScope={E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}
[HKEY_USERS\.DEFAULT\..\SearchScopes\{A78E7AFC-F236-45C0-AA2F-3A5636BB6AC5}],@DisplayName=Keenfinder
[HKEY_USERS\S-1-5-21-1957994488-2052111302-682003330-1007\..\SearchScopes\{A78E7AFC-F236-45C0-AA2F-3A5636BB6AC5}],@DisplayName=Keenfinder
[HKEY_USERS\S-1-5-21-1957994488-2052111302-682003330-1007\..\SearchScopes\{E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}],@DisplayName=Search
[HKEY_USERS\S-1-5-21-1957994488-2052111302-682003330-1007\..\SearchScopes\{E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}}],@DisplayName=Live Search
[HKEY_USERS\S-1-5-18\..\SearchScopes\{A78E7AFC-F236-45C0-AA2F-3A5636BB6AC5}],@DisplayName=Keenfinder
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes],@DefaultScope={E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes],@DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}],@DisplayName=@ieframe.dll,-12512
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A78E7AFC-F236-45C0-AA2F-3A5636BB6AC5}],@DisplayName=Keenfinder
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A78E7AFC-F236-45C0-AA2F-3A5636BB6AC5}],@DisplayName=Keenfinder
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}],@DisplayName=Search
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E8E4BA83-E6A0-4C00-9645-17D7E7DEE347}}],@DisplayName=Live Search

--------[ Extensions ]

@xpsp3res.dll,-20001 : %windir%\Network Diagnostic\xpnetdiag.exe - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16}
Windows Messenger: C:\Program Files\Messenger\msmsgs.exe - {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}

--------[ Clé Run ]



--------[ Tâches planifiées ]

C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
C:\WINDOWS\Tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\Tasks\Symantec Drmc.job
C:\WINDOWS\Tasks\Symantec NetDetect.job

+--------------[ Autres rapports ]

[26/06/2009 20:20] C:\Yoog_Fix\Yoog_Fix_Rapport_n1.txt - Choix 1 : Recherche
[26/06/2009 20:24] C:\Yoog_Fix\Yoog_Fix_Rapport_n2.txt - Choix 1 : Recherche

+--------------[ Fin à 20h 24min ]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Index at 2009-06-28 04:22:08
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 161 GB (67%) free of 238 GB
Total RAM: 1023 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:22:14, on 28/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Athan\Athan.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Index\Mes documents\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Index.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/as [...] t=&gc=1&q=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\VistaMagicPack\Styler\TB\StylerTB.dll (file missing)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P36 "EPSON Stylus DX4800 Series (Copie 1)" /O5 "LPT1:" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [TrueTransparency] "C:\Program Files\VistaMagicPack\TrueTransparency\TrueTransparency\TrueTransparency.exe"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: TrayMin200.exe.lnk = C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
O4 - Global Startup: TrayMin210.exe.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe
O23 - Service: Service Google Update (gupdate1c9af1e5e360cd0) (gupdate1c9af1e5e360cd0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - http://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe

--
End of file - 10269 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Symantec Drmc.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx [2001-03-02 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-03-27 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
DAPIELoader Class - C:\PROGRA~1\DAP\DAPIEL~1.DLL [2009-04-09 140880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - StylerToolBar - C:\Program Files\VistaMagicPack\Styler\TB\StylerTB.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-08-06 860160]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2008-06-09 949376]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"GhostStartTrayApp"=C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe [2003-06-10 94208]
"EPSON Stylus DX4800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [2005-02-02 98304]
"BigDogPath"=C:\WINDOWS\VM_STI.EXE [2004-06-09 40960]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-11-07 54576]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-03-27 198160]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"EPSON Stylus DX4800 Series (Copie 1)"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [2005-02-02 98304]
"Athan"=C:\Program Files\Athan\Athan.exe [2009-05-01 1105920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-09-23 21755688]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-01-01 342848]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-11-07 95536]
"TrueTransparency"=C:\Program Files\VistaMagicPack\TrueTransparency\TrueTransparency\TrueTransparency.exe [2007-10-18 134144]
"Shareaza"=C:\Program Files\Shareaza\Shareaza.exe [2008-10-01 5723136]
"DownloadAccelerator"=C:\Program Files\DAP\DAP.EXE [2009-04-09 2811392]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
TrayMin200.exe.lnk - C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
TrayMin210.exe.lnk - C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-09-28 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\SyllabiK\mirc.exe"="C:\Program Files\SyllabiK\mirc.exe:*:Enabled:mIRC"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\Documents and Settings\Index\Local Settings\Temp\SavReceiver01b.exe"="C:\Documents and Settings\Index\Local Settings\Temp\SavReceiver01b.exe:*:Enabled:SavReceiver01b"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:EnabledNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Metin2_France\metin2.bin"="C:\Program Files\Metin2_France\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\WinDS PRO\DeSmuME\desmume.exe"="C:\Program Files\WinDS PRO\DeSmuME\desmume.exe:*:Enabledesmume"
"C:\Program Files\KeyHoleTV\KeyHoleTV.exe"="C:\Program Files\KeyHoleTV\KeyHoleTV.exe:*:Enabled:KeyHole TV Main Application"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabledando Media Booster"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-28 04:22:08 ----D---- C:\rsit
2009-06-27 01:06:54 ----D---- C:\Program Files\Evolution Tools
2009-06-26 20:20:36 ----D---- C:\Yoog_Fix
2009-06-26 20:17:00 ----D---- C:\Program Files\CCleaner
2009-06-26 20:13:57 ----D---- C:\GenProc
2009-06-26 20:01:46 ----D---- C:\Program Files\Trend Micro
2009-06-25 16:16:48 ----SHD---- C:\found.001
2009-06-24 23:46:26 ----D---- C:\Program Files\SystemRequirementsLab
2009-06-24 23:46:22 ----D---- C:\Documents and Settings\Index\Application Data\SystemRequirementsLab
2009-06-24 12:05:13 ----HT---- C:\WINDOWS\system32\d68ca1a.dll
2009-06-24 12:05:13 ----HT---- C:\WINDOWS\system32\43f065f.dll
2009-06-20 13:19:56 ----D---- C:\WINDOWS\ie8updates
2009-06-20 13:19:02 ----D---- C:\WINDOWS\WBEM
2009-06-20 13:15:56 ----HDC---- C:\WINDOWS\ie8
2009-06-19 23:08:05 ----D---- C:\Program Files\Windows Live Safety Center
2009-06-15 23:21:15 ----D---- C:\Netts
2009-06-15 19:28:53 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files
2009-06-15 19:28:36 ----D---- C:\Program Files\Pando Networks
2009-06-13 01:23:33 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-13 01:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-13 01:23:17 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-13 01:21:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-13 01:20:32 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-08 13:12:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-06-07 18:06:39 ----D---- C:\Documents and Settings\Index\Application Data\EPSON
2009-06-06 19:05:31 ----D---- C:\Sounds
2009-06-01 15:53:01 ----A---- C:\WINDOWS\system32\NMSDVDXU.dll
2009-06-01 15:52:50 ----D---- C:\Program Files\LG PC Suite II
2009-06-01 01:00:19 ----A---- C:\WINDOWS\system32\w2dzip32.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lttwn12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltkrn12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltimg12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltfil12n.DLL
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltefx12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lfgif12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\LFCMP12n.DLL
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lfbmp12n.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\wndtls32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\txtls32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\txobj32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\Tx32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_word.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_rtf32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_htm32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\LTDIS12n.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\ic32.ini
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\ic32.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\PopX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MSCMCDE.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MSCC2DE.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MimeX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MabryObj.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\FtpX.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\EncodeX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\CMDLGDE.DLL
2009-06-01 00:59:13 ----D---- C:\Program Files\MICRO APPLICATION
2009-06-01 00:58:26 ----A---- C:\WINDOWS\IsUn040c.exe
2009-05-31 05:16:03 ----D---- C:\WINDOWS\Prefetch
2009-05-31 05:07:07 ----N---- C:\WINDOWS\system32\smtpapi.dll
2009-05-31 05:07:07 ----N---- C:\WINDOWS\system32\rwnh.dll
2009-05-31 05:05:50 ----A---- C:\WINDOWS\000001_.tmp
2009-05-31 04:38:16 ----D---- C:\WINDOWS\RegisteredPackages

======List of files/folders modified in the last 1 months======

2009-06-28 04:13:34 ----D---- C:\Documents and Settings\Index\Application Data\DNA
2009-06-28 03:54:48 ----D---- C:\WINDOWS\Temp
2009-06-28 03:49:04 ----D---- C:\Program Files\Mozilla Firefox
2009-06-28 03:45:21 ----D---- C:\WINDOWS
2009-06-28 03:44:52 ----D---- C:\Documents and Settings\Index\Application Data\skypePM
2009-06-28 03:44:46 ----D---- C:\Documents and Settings\Index\Application Data\Skype
2009-06-28 03:43:54 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-28 03:43:26 ----D---- C:\Program Files\DNA
2009-06-27 18:31:51 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-27 17:41:46 ----D---- C:\WINDOWS\system32
2009-06-27 01:06:54 ----RD---- C:\Program Files
2009-06-27 00:40:03 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-25 22:37:03 ----D---- C:\Documents and Settings\Index\Application Data\LimeWire
2009-06-24 22:31:47 ----HD---- C:\WINDOWS\inf
2009-06-24 12:05:13 ----D---- C:\WINDOWS\system32\drivers
2009-06-23 16:31:11 ----D---- C:\WINDOWS\Minidump
2009-06-23 12:57:28 ----D---- C:\Documents and Settings\Index\Application Data\Adobe
2009-06-23 01:01:24 ----D---- C:\4efe91e2b4b5970c0e612904d15676
2009-06-22 12:45:45 ----D---- C:\Documents and Settings\Index\Application Data\dvdcss
2009-06-20 13:55:56 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-20 13:55:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-20 13:55:55 ----D---- C:\WINDOWS\Help
2009-06-20 13:55:55 ----D---- C:\Program Files\Internet Explorer
2009-06-20 13:20:21 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-20 13:20:01 ----A---- C:\WINDOWS\imsins.BAK
2009-06-20 13:19:08 ----D---- C:\WINDOWS\system32\config
2009-06-20 13:18:17 ----D---- C:\WINDOWS\Media
2009-06-19 23:13:16 ----D---- C:\Program Files\Adobe Photoshop CS4 FR Portable - Majax31
2009-06-19 22:48:40 ----D---- C:\Program Files\Athan
2009-06-19 22:06:49 ----D---- C:\WINDOWS\system32\athan
2009-06-19 22:06:04 ----A---- C:\WINDOWS\iun6002.exe
2009-06-15 23:27:11 ----SHD---- C:\WINDOWS\Installer
2009-06-15 23:21:11 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-10 22:28:15 ----D---- C:\Documents and Settings\Index\Application Data\FileZilla
2009-06-08 00:44:04 ----D---- C:\Program Files\MSN Messenger
2009-06-08 00:43:12 ----D---- C:\WINDOWS\WinSxS
2009-06-08 00:42:56 ----D---- C:\Program Files\Windows Live
2009-06-08 00:26:27 ----D---- C:\Program Files\LimeWire
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-01 15:56:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-01 15:52:52 ----D---- C:\Documents and Settings\Index\Application Data\LG Electronics
2009-06-01 01:01:38 ----RSD---- C:\WINDOWS\Fonts
2009-06-01 00:04:54 ----D---- C:\Program Files\Messenger
2009-05-31 06:17:11 ----D---- C:\Program Files\XVideoConverter
2009-05-31 06:17:07 ----D---- C:\WINDOWS\system32\Samsung PC Studio Codecs
2009-05-31 06:06:43 ----A---- C:\WINDOWS\NeroDigital.ini
2009-05-31 05:16:35 ----A---- C:\WINDOWS\setuplog.txt
2009-05-31 05:14:53 ----D---- C:\WINDOWS\security
2009-05-31 05:07:07 ----D---- C:\WINDOWS\system32\inetsrv
2009-05-31 05:07:03 ----D---- C:\Program Files\Movie Maker
2009-05-31 05:07:02 ----D---- C:\WINDOWS\system32\oobe
2009-05-31 05:05:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-31 05:05:30 ----D---- C:\WINDOWS\ehome
2009-05-31 04:49:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 GhPciScan;GhostPciScanner; \??\C:\Program Files\Norton SystemWorks\Norton Ghost\ghpciscan.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2008-06-09 15424]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2008-06-09 512096]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2003-05-28 17005]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-06-24 129408]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-09-28 1675776]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1; C:\WINDOWS\system32\drivers\libusb0.sys [2005-03-09 33792]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2005-06-24 381056]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:\WINDOWS\system32\DRIVERS\SiSGbeXP.sys [2005-06-24 124672]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-02-01 260288]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\Index\LOCALS~1\Temp\mbr.sys []
S3 MidiSyn;MidiSyn; C:\WINDOWS\system32\drivers\MidiSyn.sys [2005-06-24 88960]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nocashio;nocashio; C:\WINDOWS\system32\drivers\nocashio.sys [2009-05-31 4096]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssm_bus;Samsung Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-03-29 52416]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys []
S3 USBIO;USBIO Driver (usbio.sys); C:\WINDOWS\System32\Drivers\usbio.sys [2001-05-07 19805]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZSMC301b;Philips SPC210NC Webcam; C:\WINDOWS\System32\Drivers\usbVM31b.sys [2005-02-26 91527]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-09-28 401408]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 GhostStartService;GhostStartService; C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe [2003-05-28 200704]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1; C:\WINDOWS\system32\libusbd-nt.exe [2005-03-09 18944]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2008-06-09 552064]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S2 gupdate1c9af1e5e360cd0;Service Google Update (gupdate1c9af1e5e360cd0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-18 655624]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe [2009-03-16 6562432]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-06-28 04:22:17

======Uninstall list======

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
183011-->MsiExec.exe /X{AB433108-7E00-46FB-B2F1-8355E81C36A3}
7-Zip 4.60 beta-->"C:\Program Files\7-Zip\Uninstall.exe"
Action Replay Code Manager-->"C:\Program Files\Datel\Action Replay Code Manager\unins000.exe"
Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe After Effects CS4 Presets-->MsiExec.exe /I{44E240EC-2224-4078-A88B-2CEE0D3016EF}
Adobe After Effects CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\3dcb365ab9e01871fb8c6f27b0ea079\Setup.exe --uninstall=1
Adobe After Effects CS4-->MsiExec.exe /I{45EC816C-0771-4C14-AE6D-72D1B578F4C8}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Color Video Profiles AE CS4-->MsiExec.exe /I{B15381DD-FF97-4FCD-A881-ED4DB0975500}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe Dynamiclink Support-->MsiExec.exe /I{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe MotionPicture Color Files CS4-->MsiExec.exe /I{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS3 extended-->"C:\Program Files\unins000.exe"
Adobe Photoshop CS3-->C:\Program Files\Fichiers communs\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
Adobe Setup-->MsiExec.exe /I{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}
Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
Advanced X Video Converter-->"C:\Program Files\XVideoConverter\UI.exe"
Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Athan Basic 3.6-->C:\WINDOWS\iun6002.exe "C:\Program Files\Athan\irunin.ini"
ATI Catalyst Control Center-->MsiExec.exe /I{27B6A08F-4C54-4659-B0CF-47B640B8CA00}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
AtomixMP3 v2.3 Trial-->C:\PROGRA~1\ATOMIX~1\UNWISE.EXE C:\PROGRA~1\ATOMIX~1\INSTALL.LOG
Blender (remove only)-->"C:\Program Files\Blender Foundation\Blender\uninstall.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DCI Reporter V3 1.0.16-->MsiExec.exe /I{74B0B653-EF02-4B5F-BBA0-6686BAD3A1E8}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter Mobile-->C:\Program Files\DivX\DivXConverterMeUninstall.exe /CONVERTERME
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dofus 1.25.0-->C:\Documents and Settings\Index\Mes documents\Dofus\uninstall.exe
Download Accelerator Plus (DAP)-->C:\PROGRA~1\DAP\DAPREMOVE.EXE
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
EPSON Image Clip Palette-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{314F6D08-A8B7-11D8-8446-0050BA1D384D}\Setup.exe" -l0x40c -u
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX4800_4200 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX4800_4200\USE_G\DOCUNINS.EXE
FastStone Image Viewer 3.2-->C:\Program Files\FastStone Image Viewer\uninst.exe
FileZilla Client 3.2.4.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe
Florensia-->C:\Program Files\InstallShield Installation Information\{0C053AE9-9DB6-42EE-B991-B6C57BB5F63F}\setup.exe -runfromtemp -l0x0009 -removeonly
FormatFactory-->MsiExec.exe /X{9A5BF34B-2ECB-4F4B-A9CB-46B5AA469503}
Free Video to Mp3 Converter version 2.7-->"C:\Program Files\DVDVIDEOSOFT\Free Video to Mp3 Converter\unins000.exe"
FXhome EffectsLab Pro (remove only)-->"C:\Program Files\FXhome EffectsLab Pro\FXhome EffectsLab Pro Uninstall.exe"
Gif Movie Gear 4-->"C:\Program Files\Visicom Media\GMG 4\uninst-gmg.exe"
Gimp 2.6.1-->"C:\Program Files\Gimp-2.0\setup\unins000.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.33\Installer\setup.exe" --uninstall --system-level
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Documents and Settings\Index\Mes documents\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HyperCam 2-->"C:\Program Files\HyCam2\UnHyCam2.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
KeyHoleTV-->"C:\Program Files\KeyHoleTV\uninstall.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LG PC Suite II-->C:\Program Files\InstallShield Installation Information\{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}\setup.exe -runfromtemp -l0x040c -removeonly
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
LibUSB-Win32-0.1.10.1-->"C:\Program Files\LibUSB-Win32-0.1.10.1\unins000.exe"
LimeWire 5.1.3-->"C:\Program Files\LimeWire\uninstall.exe"
LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
LiveUpdate 1.90 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
MICRO APPLICATION - Web to Date-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\MICRO APPLICATION\Web to date\Uninst.isu"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Code Named Acrylic-->MsiExec.exe /I{04FF6116-8B56-4A82-A184-88DE177F1832}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
mIRC-->"C:\Program Files\SyllabiK\mirc.exe" -uninstall
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB971180)-->"C:\WINDOWS\ie8updates\KB971180-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSRedist-->MsiExec.exe /I{FC37ABD0-2108-4beb-B010-1254E0662B5A}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
NOD32 Antivirus System-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
NOD32 FiX v2.1-->"C:\Program Files\Eset\unins000.exe"
Norton Ghost-->MsiExec.exe /I{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}
Norton SystemWorks 2004 Professional (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{B9807C3D-B3DD-41b7-8321-53DDB3A3A888}.exe /X
Norton SystemWorks 2004 Professional-->MsiExec.exe /I{B9807C3D-B3DD-41b7-8321-53DDB3A3A888}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
OLYMPUS Master 2-->MsiExec.exe /X{0815D55A-5EFF-4E1B-8C04-7035E914D90D}
OLYMPUS muvee theaterPack-->MsiExec.exe /X{EC047FA6-E83D-4326-9195-E7D306C5B9A2}
Opera 9.64-->MsiExec.exe /X{E1BBBAC5-2857-4155-82A6-54492CE88620}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
Philips SPC210NC Webcam -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{38D95956-E92C-4473-904B-CD877EA04410}\Setup.exe" -l0x40c
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PIF DESIGNER-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x40c anything
Pokemon Netbattle Supremacy 1.0.41-->C:\Program Files\NetBattle Supremacy\Uninstall.exe
QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Red Giant Psunami-->C:\WINDOWS\unvise32.exe C:\Program Files\Adobe\Common\Plug-ins\CS4\MediaCore\RGPsunamiAE.log
RGSS de RMXP version 1.0.1-->"C:\Program Files\Bodom-Child - RaBBi\RGSS\unins000.exe"
RMXP version 1.0.0.1-->"C:\Program Files\Bodom-Child - RaBBi\RMXP\unins000.exe"
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
Samsung Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly
Search Assistant Bignetdaddy-->C:\WINDOWS\system32\djcymugjjqqbcz.dll-uninst.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shareaza 2.4.0.0-->"C:\Program Files\Shareaza\Uninstall\unins000.exe"
Shoddy Battle-->C:\WINDOWS\system32\javaws.exe -uninstall "http://shoddybattle.com/client/shoddybattle.jnlp"
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x40c -removeonly
SPC 200NC PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A2646FB-7BAC-451B-BF90-4889C4429C5E}\Setup.exe" -l0x40c
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
The Logo Creator v5-->C:\WINDOWS\unvise32.exe C:\Program Files\The Logo Creator v5\uninstal.log
TrackMania Nations ESWC 0.1.7.5-->"C:\Program Files\TrackMania Nations ESWC\unins000.exe"
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vuze-->C:\Program Files\Vuze\uninstall.exe
WampServer 2.0-->"c:\wamp\unins000.exe"
Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinDS PRO DSi 2.2.0-->"C:\Program Files\WinDS PRO\unins000.exe"
WinRAR Archiveur-->C:\Program Files\WinRAR\uninstall.exe
WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
Xilisoft Video Convertisseur-->C:\Program Files\Xilisoft\Video Convertisseur\Uninstall.exe
YouTUBE (TM) movie downloader-->MsiExec.exe /X{2F8BE445-D14C-40E2-AF62-E43539FD1500}

=====HijackThis Backups=====

O2 - BHO: bignetdaddy search enhancer - {C7921576-C9A6-47E8-5164-898A7E4A2AEA} - C:\WINDOWS\system32\djcymugjjqqbcz.dll (file missing) [2009-06-27]
O2 - BHO: bignetdaddy - {3c1b318b-0c93-9cf1-22de-05487e7694bf} - C:\WINDOWS\system32\nso7CF.dll (file missing) [2009-06-27]

======Security center information======

AV: ESET NOD32 antivirus system 2.70

======System event log======

Computer Name: PC-AMAR
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 14535
Source Name: Service Control Manager
Time Written: 20090605195104.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : arrêté.

Record Number: 14534
Source Name: Service Control Manager
Time Written: 20090605195103.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

Record Number: 14533
Source Name: Service Control Manager
Time Written: 20090605195103.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 14532
Source Name: Service Control Manager
Time Written: 20090605195102.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: PC-AMAR
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 14531
Source Name: Service Control Manager
Time Written: 20090605195102.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: PC-AMAR
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 6
Source Name: SecurityCenter
Time Written: 20090620191914.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 0
Message:
Record Number: 5
Source Name: gupdate1c9af1e5e360cd0
Time Written: 20090620191912.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 0
Message:
Record Number: 4
Source Name: gupdate1c9af1e5e360cd0
Time Written: 20090620191840.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 1
Message:
Record Number: 3
Source Name: Bonjour Service
Time Written: 20090620191840.000000+120
Event Type: Informations
User:

Computer Name: PC-AMAR
Event Code: 0
Message:
Record Number: 2
Source Name: GhostStartService
Time Written: 20090620191839.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;"C:\Program Files\Norton SystemWorks\Norton Ghost\";C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_REVISION"=0403
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 16:35:08, 28/06/2009 | Mode Normal | Option: SCAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: PC-AMAR | Utilisateur actuel: Index
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
N'est pas administrateur: HelpAssistant *Desactive*
Administrateur: HsUser_uzX9Np0vGTG
Administrateur: Index
N'est pas administrateur: Invité *Desactive*
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
HKCU\Software\AppDataLow\HavingFunOnline
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5162B7FF-905A-FF82-D32C-9E9B0C427FF3}
HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
.
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\FileSubmit
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
C:\Program Files\AskSearch
C:\Program Files\FileSubmit
C:\Program Files\RelevantKnowledge
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\searchplugins\ask.xml
C:\WINDOWS\icons\digsby.ico
C:\WINDOWS\icons\fireplace.ico
C:\WINDOWS\icons\pimped.ico
C:\WINDOWS\Installer\412f83.msi
C:\DOCUME~1\Index\Cookies\index@pacificpoker[1].txt
.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: g734bz1l.default (Index)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Search" );
(Prefs.js) user_pref("browser.search.selectedEngine", "Search" );
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.bigdadsearch.com/search.php?q=" );
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.pokemontrash.com" );
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11" );
(User.js) user_pref("browser.search.defaultenginename", "Search" );
(User.js) user_pref("browser.search.selectedEngine", "Search" );
(User.js) user_pref("browser.search.defaulturl", "hxxp://www.bigdadsearch.com/search.php?q=" );
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
3366 Octet(s) - C:\Ad-Report-SCAN.log
.
1628 Fichier(s) - C:\DOCUME~1\Index\LOCALS~1\Temp
332 Fichier(s) - C:\WINDOWS\Temp
.
0 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
0 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 16:54:08 | 28/06/2009
.
============== E.O.F ==============
.

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 18:24:15, 28/06/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: PC-AMAR | Utilisateur actuel: Index
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
N'est pas administrateur: HelpAssistant *Desactive*
Administrateur: HsUser_uzX9Np0vGTG
Administrateur: Index
N'est pas administrateur: Invité *Desactive*
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCU\Software\AppDataLow\HavingFunOnline
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5162B7FF-905A-FF82-D32C-9E9B0C427FF3}
HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
.
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\FileSubmit\FileSubmit Downloads.lnk
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\FileSubmit
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest.dev
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf.bak
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome\ajtoolbar.jar
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.gif
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.src
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat.bak
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\contents.rdf
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\snipit.js
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\manifest.mf
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.rsa
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.sf
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
C:\Program Files\AskSearch\bin
C:\Program Files\AskSearch\bin\DefaultSearch.dll
C:\Program Files\AskSearch
C:\Program Files\FileSubmit\183011
C:\Program Files\FileSubmit\183011\183011.zip
C:\Program Files\FileSubmit
C:\Program Files\RelevantKnowledge\rlservice.exe
C:\Program Files\RelevantKnowledge
C:\DOCUME~1\Index\APPLIC~1\Mozilla\Firefox\Profiles\g734bz1l.default\searchplugins\ask.xml
C:\WINDOWS\icons\digsby.ico
C:\WINDOWS\icons\fireplace.ico
C:\WINDOWS\icons\pimped.ico
C:\WINDOWS\Installer\412f83.msi
C:\DOCUME~1\Index\Cookies\index@pacificpoker[1].txt

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: g734bz1l.default (Index)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Search" );
(Prefs.js) user_pref("browser.search.selectedEngine", "Search" );
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.bigdadsearch.com/search.php?q=" );
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.pokemontrash.com" );
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11" );
(User.js) user_pref("browser.search.defaultenginename", "Search" );
(User.js) user_pref("browser.search.selectedEngine", "Search" );
(User.js) user_pref("browser.search.defaulturl", "hxxp://www.bigdadsearch.com/search.php?q=" );
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
6375 Octet(s) - C:\Ad-Report-CLEAN.log
3681 Octet(s) - C:\Ad-Report-SCAN.log
.
1481 Fichier(s) - C:\DOCUME~1\Index\LOCALS~1\Temp
21 Fichier(s) - C:\WINDOWS\Temp
.
19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
18 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 18:43:43 | 28/06/2009
.
============== E.O.F ==============
.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Index at 2009-06-28 19:39:00
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 161 GB (67%) free of 238 GB
Total RAM: 1023 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:39:06, on 28/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\DNA\btdna.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Index\Mes documents\RSIT(2).exe
C:\Program Files\Trend Micro\HijackThis\Index.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/as [...] t=&gc=1&q=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\VistaMagicPack\Styler\TB\StylerTB.dll (file missing)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P36 "EPSON Stylus DX4800 Series (Copie 1)" /O5 "LPT1:" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [TrueTransparency] "C:\Program Files\VistaMagicPack\TrueTransparency\TrueTransparency\TrueTransparency.exe"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: TrayMin200.exe.lnk = C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
O4 - Global Startup: TrayMin210.exe.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe
O23 - Service: Service Google Update (gupdate1c9af1e5e360cd0) (gupdate1c9af1e5e360cd0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - http://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe

--
End of file - 9698 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Symantec Drmc.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx [2001-03-02 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-03-27 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
DAPIELoader Class - C:\PROGRA~1\DAP\DAPIEL~1.DLL [2009-04-09 140880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - StylerToolBar - C:\Program Files\VistaMagicPack\Styler\TB\StylerTB.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-08-06 860160]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2008-06-09 949376]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"GhostStartTrayApp"=C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe [2003-06-10 94208]
"EPSON Stylus DX4800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [2005-02-02 98304]
"BigDogPath"=C:\WINDOWS\VM_STI.EXE [2004-06-09 40960]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-11-07 54576]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-03-27 198160]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"EPSON Stylus DX4800 Series (Copie 1)"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [2005-02-02 98304]
"Athan"=C:\Program Files\Athan\Athan.exe [2009-05-01 1105920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-09-23 21755688]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-01-01 342848]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-11-07 95536]
"TrueTransparency"=C:\Program Files\VistaMagicPack\TrueTransparency\TrueTransparency\TrueTransparency.exe [2007-10-18 134144]
"Shareaza"=C:\Program Files\Shareaza\Shareaza.exe [2008-10-01 5723136]
"DownloadAccelerator"=C:\Program Files\DAP\DAP.EXE [2009-04-09 2811392]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
TrayMin200.exe.lnk - C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
TrayMin210.exe.lnk - C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-09-28 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\SyllabiK\mirc.exe"="C:\Program Files\SyllabiK\mirc.exe:*:Enabled:mIRC"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\Documents and Settings\Index\Local Settings\Temp\SavReceiver01b.exe"="C:\Documents and Settings\Index\Local Settings\Temp\SavReceiver01b.exe:*:Enabled:SavReceiver01b"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:EnabledNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Metin2_France\metin2.bin"="C:\Program Files\Metin2_France\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\WinDS PRO\DeSmuME\desmume.exe"="C:\Program Files\WinDS PRO\DeSmuME\desmume.exe:*:Enabledesmume"
"C:\Program Files\KeyHoleTV\KeyHoleTV.exe"="C:\Program Files\KeyHoleTV\KeyHoleTV.exe:*:Enabled:KeyHole TV Main Application"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabledando Media Booster"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-28 16:34:05 ----D---- C:\Program Files\Ad-remover
2009-06-28 04:22:08 ----D---- C:\rsit
2009-06-27 01:06:54 ----D---- C:\Program Files\Evolution Tools
2009-06-26 20:20:36 ----D---- C:\Yoog_Fix
2009-06-26 20:17:00 ----D---- C:\Program Files\CCleaner
2009-06-26 20:13:57 ----D---- C:\GenProc
2009-06-26 20:01:46 ----D---- C:\Program Files\Trend Micro
2009-06-25 16:16:48 ----SHD---- C:\found.001
2009-06-24 23:46:26 ----D---- C:\Program Files\SystemRequirementsLab
2009-06-24 23:46:22 ----D---- C:\Documents and Settings\Index\Application Data\SystemRequirementsLab
2009-06-24 12:05:13 ----HT---- C:\WINDOWS\system32\d68ca1a.dll
2009-06-24 12:05:13 ----HT---- C:\WINDOWS\system32\43f065f.dll
2009-06-20 13:19:56 ----D---- C:\WINDOWS\ie8updates
2009-06-20 13:19:02 ----D---- C:\WINDOWS\WBEM
2009-06-20 13:15:56 ----HDC---- C:\WINDOWS\ie8
2009-06-19 23:08:05 ----D---- C:\Program Files\Windows Live Safety Center
2009-06-15 23:21:15 ----D---- C:\Netts
2009-06-15 19:28:53 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files
2009-06-15 19:28:36 ----D---- C:\Program Files\Pando Networks
2009-06-13 01:23:33 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-13 01:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-13 01:23:17 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-13 01:21:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-13 01:20:32 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-08 13:12:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-06-07 18:06:39 ----D---- C:\Documents and Settings\Index\Application Data\EPSON
2009-06-06 19:05:31 ----D---- C:\Sounds
2009-06-01 15:53:01 ----A---- C:\WINDOWS\system32\NMSDVDXU.dll
2009-06-01 15:52:50 ----D---- C:\Program Files\LG PC Suite II
2009-06-01 01:00:19 ----A---- C:\WINDOWS\system32\w2dzip32.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lttwn12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltkrn12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltimg12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltfil12n.DLL
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\ltefx12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lfgif12n.dll
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\LFCMP12n.DLL
2009-06-01 00:59:30 ----A---- C:\WINDOWS\system32\lfbmp12n.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\wndtls32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\txtls32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\txobj32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\Tx32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_word.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_rtf32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\tx_htm32.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\LTDIS12n.dll
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\ic32.ini
2009-06-01 00:59:29 ----A---- C:\WINDOWS\system32\ic32.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\PopX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MSCMCDE.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MSCC2DE.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MimeX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\MabryObj.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\FtpX.DLL
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\EncodeX.dll
2009-06-01 00:59:28 ----A---- C:\WINDOWS\system32\CMDLGDE.DLL
2009-06-01 00:59:13 ----D---- C:\Program Files\MICRO APPLICATION
2009-06-01 00:58:26 ----A---- C:\WINDOWS\IsUn040c.exe
2009-05-31 05:16:03 ----D---- C:\WINDOWS\Prefetch
2009-05-31 05:07:07 ----N---- C:\WINDOWS\system32\smtpapi.dll
2009-05-31 05:07:07 ----N---- C:\WINDOWS\system32\rwnh.dll
2009-05-31 05:05:50 ----A---- C:\WINDOWS\000001_.tmp
2009-05-31 04:38:16 ----D---- C:\WINDOWS\RegisteredPackages

======List of files/folders modified in the last 1 months======

2009-06-28 19:31:24 ----D---- C:\Documents and Settings\Index\Application Data\DNA
2009-06-28 19:28:11 ----D---- C:\WINDOWS\Temp
2009-06-28 18:51:53 ----D---- C:\Program Files\Mozilla Firefox
2009-06-28 18:41:43 ----SHD---- C:\WINDOWS\Installer
2009-06-28 18:40:18 ----D---- C:\WINDOWS\Icons
2009-06-28 18:40:17 ----RD---- C:\Program Files
2009-06-28 16:33:59 ----D---- C:\Documents and Settings\Index\Application Data\Skype
2009-06-28 16:02:07 ----D---- C:\Documents and Settings\Index\Application Data\skypePM
2009-06-28 15:32:23 ----D---- C:\WINDOWS
2009-06-28 15:31:13 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-28 15:31:00 ----D---- C:\Program Files\DNA
2009-06-28 15:30:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-27 17:41:46 ----D---- C:\WINDOWS\system32
2009-06-27 14:54:26 ----D---- C:\WINDOWS\Minidump
2009-06-27 00:40:03 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-25 22:37:03 ----D---- C:\Documents and Settings\Index\Application Data\LimeWire
2009-06-24 22:31:47 ----HD---- C:\WINDOWS\inf
2009-06-24 12:05:13 ----D---- C:\WINDOWS\system32\drivers
2009-06-23 12:57:28 ----D---- C:\Documents and Settings\Index\Application Data\Adobe
2009-06-23 01:01:24 ----D---- C:\4efe91e2b4b5970c0e612904d15676
2009-06-22 12:45:45 ----D---- C:\Documents and Settings\Index\Application Data\dvdcss
2009-06-20 13:55:56 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-20 13:55:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-20 13:55:55 ----D---- C:\WINDOWS\Help
2009-06-20 13:55:55 ----D---- C:\Program Files\Internet Explorer
2009-06-20 13:20:21 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-20 13:20:01 ----A---- C:\WINDOWS\imsins.BAK
2009-06-20 13:19:08 ----D---- C:\WINDOWS\system32\config
2009-06-20 13:18:17 ----D---- C:\WINDOWS\Media
2009-06-19 23:13:16 ----D---- C:\Program Files\Adobe Photoshop CS4 FR Portable - Majax31
2009-06-19 22:48:40 ----D---- C:\Program Files\Athan
2009-06-19 22:06:49 ----D---- C:\WINDOWS\system32\athan
2009-06-19 22:06:04 ----A---- C:\WINDOWS\iun6002.exe
2009-06-15 23:21:11 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-10 22:28:15 ----D---- C:\Documents and Settings\Index\Application Data\FileZilla
2009-06-08 00:44:04 ----D---- C:\Program Files\MSN Messenger
2009-06-08 00:43:12 ----D---- C:\WINDOWS\WinSxS
2009-06-08 00:42:56 ----D---- C:\Program Files\Windows Live
2009-06-08 00:26:27 ----D---- C:\Program Files\LimeWire
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-01 15:56:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-01 15:52:52 ----D---- C:\Documents and Settings\Index\Application Data\LG Electronics
2009-06-01 01:01:38 ----RSD---- C:\WINDOWS\Fonts
2009-06-01 00:04:54 ----D---- C:\Program Files\Messenger
2009-05-31 06:17:11 ----D---- C:\Program Files\XVideoConverter
2009-05-31 06:17:07 ----D---- C:\WINDOWS\system32\Samsung PC Studio Codecs
2009-05-31 06:06:43 ----A---- C:\WINDOWS\NeroDigital.ini
2009-05-31 05:16:35 ----A---- C:\WINDOWS\setuplog.txt
2009-05-31 05:14:53 ----D---- C:\WINDOWS\security
2009-05-31 05:07:07 ----D---- C:\WINDOWS\system32\inetsrv
2009-05-31 05:07:03 ----D---- C:\Program Files\Movie Maker
2009-05-31 05:07:02 ----D---- C:\WINDOWS\system32\oobe
2009-05-31 05:05:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-31 05:05:30 ----D---- C:\WINDOWS\ehome
2009-05-31 04:49:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 GhPciScan;GhostPciScanner; \??\C:\Program Files\Norton SystemWorks\Norton Ghost\ghpciscan.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2008-06-09 15424]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2008-06-09 512096]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2003-05-28 17005]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-06-24 129408]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-09-28 1675776]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1; C:\WINDOWS\system32\drivers\libusb0.sys [2005-03-09 33792]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2005-06-24 381056]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:\WINDOWS\system32\DRIVERS\SiSGbeXP.sys [2005-06-24 124672]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-02-01 260288]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\Index\LOCALS~1\Temp\mbr.sys []
S3 MidiSyn;MidiSyn; C:\WINDOWS\system32\drivers\MidiSyn.sys [2005-06-24 88960]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nocashio;nocashio; C:\WINDOWS\system32\drivers\nocashio.sys [2009-05-31 4096]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssm_bus;Samsung Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-03-29 52416]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys []
S3 USBIO;USBIO Driver (usbio.sys); C:\WINDOWS\System32\Drivers\usbio.sys [2001-05-07 19805]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZSMC301b;Philips SPC210NC Webcam; C:\WINDOWS\System32\Drivers\usbVM31b.sys [2005-02-26 91527]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-09-28 401408]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 GhostStartService;GhostStartService; C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe [2003-05-28 200704]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1; C:\WINDOWS\system32\libusbd-nt.exe [2005-03-09 18944]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2008-06-09 552064]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S2 gupdate1c9af1e5e360cd0;Service Google Update (gupdate1c9af1e5e360cd0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-18 655624]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe [2009-03-16 6562432]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

-----------------EOF-----------------