[Résolu] [Résolu] Processus ? Les supprimer? UC 100%

Bonjour !

[img]http://img233.imageshack.us/i/sanstitref.png/]

Voila tout est dit dans le titre, mon UC est à 100 % L'ordi n'en peut plus, et j'ai pleins de processus qui me bouffe de la mémoire.

Lesquels faut-il supprimer?

Comment les supprimer ou les bloquer définitivement?

Désolé, j'ai du mal avec le serveur pour images là.

On peut quand même cliquer sur la 2eme.

Ce sujet a été déplacé de la catégorie Hardware vers la catégorie Sécurité - Virus par Scofr

info.txt logfile of random's system information tool 1.06 2009-07-10 00:53:19

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUninst.exe -f\"C:\Program Files\Final Fantasy VII\Uninst.isu"
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.42-->"C:\Program Files\7-Zip\Uninstall.exe"
Acer eConsole-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC028E6B-F3F1-4192-B63E-A7C97302ED5A}\setup.exe" -l0x40c
Acer eMode Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65CDEC30-4BF4-48FB-8059-9FC480E4E94F}\setup.exe" -l0x40c
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.4-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Agere Systems PCI Soft Modem-->agrsmdel
Altiris Philips SmartManage Agent-->MsiExec.exe /I{F84B9669-7102-42B4-A3A2-9A68741CD253}
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATITool Overclocking Utility-->"C:\Program Files\ATITool\Uninstall.exe"
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
BitComet 1.10-->C:\Program Files\BitComet\uninst.exe
Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Brother MFL-Pro Suite-->"C:\Program Files\InstallShield Installation Information\{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}\Setup.exe" -runfromtemp -l0x040c Brunin03.dll -removeonly
Camfrog Video Chat 5.1 (remove only)-->"C:\Program Files\Camfrog\Camfrog Video Chat\uninstall.exe"
CamfrogWEB Advanced ActiveX Plugin (remove only)-->"C:\Program Files\CFWebAdvancedU\Uninstall.exe"
Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
Chronometre-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Chronometre\ST6UNST.LOG"
ColorNick v2 plugin for Messenger Plus!-->"C:\Program Files\MessengerPlus! 3\Plugins\ColorNick\CNuninst.exe"
CometBird (3.0.10)-->C:\Program Files\CometBird\uninstall\helper.exe
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
CPUID HWMonitor 1.14-->"C:\Program Files\CPUID\HWMonitor\unins000.exe"
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Driver Genius Professional Edition 2007-->"C:\Program Files\Driver-Soft\DriverGenius\unins000.exe"
DriverAgent by eSupport.com-->RunDll32.exe advpack.dll,LaunchINFSection driveragent_exe.inf,TVICHW32Remove
EA Download Manager-->C:\Program Files\Electronic Arts\EADM\Uninstall.exe
EAX(tm) Unified (SHELL)-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative Labs\EAX(tm) Unified (SHELL)\Uninst.isu"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
EVEREST Ultimate Edition v5.02-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Favorit-->"c:\documents and settings\bite\local settings\application data\uigme.exe" -uninstall
Final Fantasy VII - Ultima Edition-->"C:\Program Files\Final Fantasy VII\unins000.exe"
Final Fantasy VII XP Patch-->C:\Program Files\Square Soft, Inc\Final Fantasy VII\Patch\Uninstall XP Patch.EXE /u:"Final Fantasy VII XP Patch"
FINAL FANTASY VIII-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Eidos Interactive\Square Soft, Inc\FINAL FANTASY VIII\Uninst.isu"
FPAdjust-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Flat Panel Adjust\Uninst.isu"
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
GameShadow-->MsiExec.exe /I{D98C9637-93DA-44DB-B73A-B11A1192AB26}
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
GTK+ 2.10.13 runtime environment-->"C:\Program Files\Fichiers communs\GTK\2.0\setup\unins000.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Bite\Bureau\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
ID3 Lyrics Editor-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\MP3\ID3EDIT\Uninst.isu"
Ink-->MsiExec.exe /I{9FCB2876-554D-491D-A2CD-58F8252D6C64}
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
Jackpot City Online Casino-->C:\MicroGaming\Casino\JackpotCity\install.exe -uninstall
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
JVTorrent 1.1-->C:\Documents and Settings\LoOzeR\Mes documents\stix19\JVTorrent\uninst.exe
Last of the patriots-->C:\Program Files\Last of the patriots\uninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Sims™ 3-->"C:\Program Files\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\Sims3Setup.exe" -runfromtemp -l0x040c -removeonly
Live-Player-->C:\Program Files\Live-Player\uninst.exe
Look 'n' Stop 2.06p3-->"C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -uninst
Ma-Config.com-->MsiExec.exe /X{E780E536-16CE-4CD1-8FE0-2D5E52FAA65B}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Web Components-->MsiExec.exe /I{002C9999-0000-0000-C000-000000000112}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Professional with FrontPage-->MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft WinUsb 1.0-->"C:\WINDOWS\$NtUninstallwinusb0100$\spuninst\spuninst.exe"
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
mIRC-->"C:\WINDOWS\system32\WindowsUp.exe" -uninstall
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Morgane-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F2F6DF8-B551-11D4-B6A3-0050BAC17DE7}\Setup.exe" -l0x40c IkoMIS
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 3.5.02-->MsiExec.exe /I{0DE7211B-A7CB-4112-8D62-142A0EBDFAD9}
MP3 Player Utilities 3.68-->MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
MP3 Player Utilities-->MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
MpcStar 3.7-->C:\Program Files\MpcStar\uninst.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A}
Nokia Connectivity Cable Driver-->MsiExec.exe /X{11964613-805F-432D-A12B-169554B793E7}
Nokia PC Suite-->MsiExec.exe /I{02091327-B124-4216-9D71-58C0E24F5392}
Nokia Software Updater-->MsiExec.exe /X{5D19E730-D3C6-47F4-AE4B-DCB26EC2D905}
Norton Security Scan (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\NSSSetup\{1E86581C-2858-4094-AB8B-D005EF96D4AC}_2_0_0\NSSSetup.exe" /X
Norton Security Scan-->MsiExec.exe /X{1E86581C-2858-4094-AB8B-D005EF96D4AC}
NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
NTI HomeVideo-Maker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8A6F713-D72D-47AD-A92D-B5C0E13F98C1}\setup.exe" -l0x40c
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
OpenOffice.org 2.2-->MsiExec.exe /I{419805D6-75A0-4981-BC8F-9FF97EC6B03A}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Panda ActiveScan-->C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Pando Toolbar-->rundll32 C:\PROGRA~1\PandoBar\bar\1.bin\PandoBar.dll,O
Panneau de configuration MobileMe-->MsiExec.exe /I{6DA9102E-199F-43A0-A36B-6EF48081A658}
PaperPort Image Printer-->MsiExec.exe /X{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}
PC Connectivity Solution-->MsiExec.exe /I{04F3BF74-9E34-4D3E-93C3-D3D1F24199C8}
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PS3Eye Camera v2.0b81231-->C:\Program Files\AlexP\uninst.exe
QTSender v2.21-->"C:\Program Files\MessengerPlus! 3\Plugins\unins000.exe"
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
RivaTuner v2.23-->"C:\Program Files\RivaTuner v2.23\uninstall.exe"
ScanSoft PaperPort 11-->MsiExec.exe /I{B6C89654-A6A2-477C-873B-724EC1C56407}
ScreenSaverIAM_2 Screen Saver-->C:\WINDOWS\azssuninst.exe ScreenSaverIAM_2
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SM-->C:\Program Files\SM\uninstaller.exe
Sony Media Manager 2.2-->MsiExec.exe /X{2B5A75F0-FD85-4094-AB00-94902398D192}
SpywareBlaster 4.2-->"C:\Program Files\SpywareBlaster\unins000.exe"
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
USB Disk Win98 Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF5EE349-90CD-4422-A43B-661778180173}\Setup.exe"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VD Codec Pack 1.6-->C:\Program Files\VDCodecPack1.6\uninst.exe
VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Desktop Search 3.01-->"C:\WINDOWS\$NtUninstallKB917013$\spuninst\spuninst.exe"
Windows Driver Package - Nokia (WUDFRd) WPD (11/03/2006 6.82.26.2)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_6B630EE2E66584353C6CD8683D447072872F34D8\pccswpddriver.inf
Windows Driver Package - Nokia Modem (11/03/2006 6.82.0.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_4EFFAAE27A08EDFDE145390033D8EF099DA65567\nokbtmdm.inf
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

=====HijackThis Backups=====

R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL [2009-07-10]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 [2009-07-10]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/ [2009-07-10]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 [2009-07-10]
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens [2009-07-10]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local [2009-07-10]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 [2009-07-10]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 [2009-07-10]
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 [2009-07-10]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 [2009-07-10]
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) [2009-07-10]
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL [2009-07-10]
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL [2009-07-10]
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll [2009-07-10]
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL [2009-07-10]
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [2009-07-10]
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-07-10]
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll [2009-07-10]
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [2009-07-10]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot [2009-07-10]
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini [2009-07-10]
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install [2009-07-10]
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot [2009-07-10]
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup [2009-07-10]
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-07-10]
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [2009-07-10]
O4 - HKLM\..\Run: [QuickTime Task] "C:\Documents and Settings\QTTask.exe" -atboottime [2009-07-10]
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" [2009-07-10]
O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm [2009-07-10]
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 [2009-07-10]
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 [2009-07-10]
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?746403f2bc304cdcba566f6d6c2bbf21 [2009-07-10]
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx [2009-07-10]
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?746403f2bc304cdcba566f6d6c2bbf21 [2009-07-10]
O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm [2009-07-10]
O8 - Extra context menu item: &Search - ?p=ZNxmk570YYFR [2009-07-10]
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm [2009-07-10]
O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm [2009-07-10]
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [2009-07-10]
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing) [2009-07-10]
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing) [2009-07-10]
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing) [2009-07-10]
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2009-07-10]
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2009-07-10]
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [2009-07-10]
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 [2009-07-10]
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB [2009-07-10]
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab [2009-07-10]
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/adva [...] module.exe [2009-07-10]
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b56986.cab [2009-07-10]
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab [2009-07-10]
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab [2009-07-10]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab [2009-07-10]
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activ [...] asinst.cab [2009-07-10]
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab [2009-07-10]
O16 - DPF: {E85362EF-40D4-4E5D-BE07-D6B036CCA277} (GoPets Control) - https://secure.gopetslive.com/dev/gopets.cab [2009-07-10]
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Reg [...] lashax.cab [2009-07-10]
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b56986.cab [2009-07-10]
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab [2009-07-10]
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL [2009-07-10]
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\Bite\LOCALS~1\Temp\winlogon.exe, [2009-07-10]
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe [2009-07-10]
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') [2009-07-10]
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') [2009-07-10]
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') [2009-07-10]

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090709-0]
FW: Look 'n' Stop 2.06p3 (Soft4Ever)

======System event log======

Computer Name: ACER-A38B4A0260
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de l’iPod.

Record Number: 85190
Source Name: Service Control Manager
Time Written: 20090525154210.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACER-A38B4A0260
Event Code: 7036
Message: Le service Google Software Updater est entré dans l'état : arrêté.

Record Number: 85189
Source Name: Service Control Manager
Time Written: 20090525154151.000000+120
Event Type: Informations
User:

Computer Name: ACER-A38B4A0260
Event Code: 7036
Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution.

Record Number: 85188
Source Name: Service Control Manager
Time Written: 20090525154131.000000+120
Event Type: Informations
User:

Computer Name: ACER-A38B4A0260
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.

Record Number: 85187
Source Name: Service Control Manager
Time Written: 20090525154126.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACER-A38B4A0260
Event Code: 7036
Message: Le service Téléphonie est entré dans l'état : en cours d'exécution.

Record Number: 85186
Source Name: Service Control Manager
Time Written: 20090525154126.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACER-A38B4A0260
Event Code: 489
Message: wuauclt (3584) Une tentative d'ouverture du fichier "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log" pour accès en lecture seule a échoué en indiquant l'erreur système 1392 (0x00000570) : "Le fichier ou le répertoire est endommagé et illisible. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1022 (0xfffffc02).

Record Number: 26247
Source Name: ESENT
Time Written: 20090312014634.000000+060
Event Type: erreur
User:

Computer Name: ACER-A38B4A0260
Event Code: 490
Message: wuauclt (3584) Une tentative d'ouverture du fichier "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk" pour accès en lecture/écriture a échoué en indiquant l'erreur système 1392 (0x00000570) : "Le fichier ou le répertoire est endommagé et illisible. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1022 (0xfffffc02).

Record Number: 26246
Source Name: ESENT
Time Written: 20090312014634.000000+060
Event Type: erreur
User:

Computer Name: ACER-A38B4A0260
Event Code: 485
Message: wuauclt (3544) Une tentative de suppression du dossier "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edbtmp.log" a échoué en indiquant l'erreur système 1392 (0x00000570) : "Le fichier ou le répertoire est endommagé et illisible. ". L'opération de suppression de dossier échouera en indiquant l'erreur -1022 (0xfffffc02).

Record Number: 26245
Source Name: ESENT
Time Written: 20090312014634.000000+060
Event Type: erreur
User:

Computer Name: ACER-A38B4A0260
Event Code: 455
Message: wuaueng.dll (3544) SUS20ClientDataStore: L'erreur -1022 (0xfffffc02) s'est produite lors de l'ouverture du fichier journal C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log.

Record Number: 26244
Source Name: ESENT
Time Written: 20090312014634.000000+060
Event Type: erreur
User:

Computer Name: ACER-A38B4A0260
Event Code: 489
Message: wuauclt (3544) Une tentative d'ouverture du fichier "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log" pour accès en lecture seule a échoué en indiquant l'erreur système 1392 (0x00000570) : "Le fichier ou le répertoire est endommagé et illisible. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1022 (0xfffffc02).

Record Number: 26243
Source Name: ESENT
Time Written: 20090312014634.000000+060
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\GTK\2.0\bin;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\Documents and Settings\QTSystem\;C:\Program Files\Fichiers communs\DivX Shared\;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"LANG"=fr
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Default System BIOS
USER : Bite ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090709-0] 4.8.1335 (Activated)
Firewall : Look 'n' Stop 2.06p3 (Soft4Ever) 2.06p3 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:91 Go (Free:24 Go)
D:\ (Local Disk) - FAT32 - Total:92 Go (Free:65 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (CD or DVD)
I:\ (USB)
J:\ (USB)
K:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 10/07/2009|14:24 )

--------------------\\ Listing des dossiers dans APPLIC~1

[12/03/2009|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[08/05/2009|05:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[25/11/2008|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[20/02/2007|15:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[08/07/2009|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
[23/12/2008|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother
[25/06/2005|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[19/01/2009|23:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[16/11/2007|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[04/11/2005|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
[17/01/2009|20:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
[12/07/2007|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Emjysoft
[11/03/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/07/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/06/2008|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[29/08/2008|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/05/2009|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[04/10/2008|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[20/10/2008|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[14/05/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[02/11/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[02/11/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microgaming
[14/01/2009|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/11/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[10/07/2009|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[16/11/2007|20:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[09/11/2005|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[08/01/2009|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[23/02/2008|03:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[09/04/2009|20:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[11/01/2006|21:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[10/07/2009|00:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[04/10/2008|14:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\thisamenlessmeow
[05/11/2005|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[17/11/2007|00:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[25/07/2008|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[25/07/2008|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[30/04/2008|22:35] C:\DOCUME~1\Bite\APPLIC~1\Adobe
[02/09/2008|23:10] C:\DOCUME~1\Bite\APPLIC~1\AdobeUM
[03/02/2007|18:35] C:\DOCUME~1\Bite\APPLIC~1\Ahead
[12/12/2008|18:00] C:\DOCUME~1\Bite\APPLIC~1\Apple Computer
[08/07/2009|18:38] C:\DOCUME~1\Bite\APPLIC~1\ATI
[16/02/2009|21:25] C:\DOCUME~1\Bite\APPLIC~1\Brother
[04/10/2008|14:55] C:\DOCUME~1\Bite\APPLIC~1\Buildmemoload
[11/07/2008|02:31] C:\DOCUME~1\Bite\APPLIC~1\Camfrog
[18/02/2009|00:34] C:\DOCUME~1\Bite\APPLIC~1\CamfrogWEB
[09/05/2009|22:32] C:\DOCUME~1\Bite\APPLIC~1\CometNetwork
[22/02/2007|22:00] C:\DOCUME~1\Bite\APPLIC~1\CyberLink
[20/01/2009|14:30] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools
[09/05/2009|14:24] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools Lite
[05/04/2009|13:47] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools Pro
[03/06/2009|15:51] C:\DOCUME~1\Bite\APPLIC~1\DivX
[18/08/2008|03:15] C:\DOCUME~1\Bite\APPLIC~1\EoRezo
[08/01/2008|21:48] C:\DOCUME~1\Bite\APPLIC~1\GetRightToGo
[21/04/2007|20:32] C:\DOCUME~1\Bite\APPLIC~1\Google
[18/03/2007|18:10] C:\DOCUME~1\Bite\APPLIC~1\gtk-2.0
[14/06/2007|19:34] C:\DOCUME~1\Bite\APPLIC~1\Hamachi
[21/01/2007|19:18] C:\DOCUME~1\Bite\APPLIC~1\Help
[21/11/2008|00:12] C:\DOCUME~1\Bite\APPLIC~1\HiYo
[23/07/2007|18:51] C:\DOCUME~1\Bite\APPLIC~1\Identities
[06/01/2009|16:46] C:\DOCUME~1\Bite\APPLIC~1\InstallShield
[09/06/2009|04:52] C:\DOCUME~1\Bite\APPLIC~1\live-player
[11/02/2007|18:14] C:\DOCUME~1\Bite\APPLIC~1\Macromedia
[20/10/2008|17:38] C:\DOCUME~1\Bite\APPLIC~1\Malwarebytes
[27/09/2008|13:04] C:\DOCUME~1\Bite\APPLIC~1\Microsoft
[12/05/2008|17:10] C:\DOCUME~1\Bite\APPLIC~1\Microsoft Web Folders
[06/09/2008|14:45] C:\DOCUME~1\Bite\APPLIC~1\Mozilla
[16/01/2007|19:04] C:\DOCUME~1\Bite\APPLIC~1\MSNInstaller
[23/02/2008|03:26] C:\DOCUME~1\Bite\APPLIC~1\NetMedia Providers
[05/12/2007|00:38] C:\DOCUME~1\Bite\APPLIC~1\Nokia
[09/05/2009|00:19] C:\DOCUME~1\Bite\APPLIC~1\Nokia Multimedia Player
[14/10/2008|18:17] C:\DOCUME~1\Bite\APPLIC~1\OpenOffice.org2
[16/11/2007|20:33] C:\DOCUME~1\Bite\APPLIC~1\PC Suite
[08/01/2008|22:15] C:\DOCUME~1\Bite\APPLIC~1\Propellerhead Software
[23/02/2008|03:26] C:\DOCUME~1\Bite\APPLIC~1\Publish Providers
[07/12/2007|19:07] C:\DOCUME~1\Bite\APPLIC~1\Real
[25/06/2009|14:31] C:\DOCUME~1\Bite\APPLIC~1\ScanSoft
[24/05/2007|05:02] C:\DOCUME~1\Bite\APPLIC~1\Screenshot Sender
[15/01/2008|19:28] C:\DOCUME~1\Bite\APPLIC~1\SecuROM
[14/01/2009|21:41] C:\DOCUME~1\Bite\APPLIC~1\Sony
[09/01/2007|23:28] C:\DOCUME~1\Bite\APPLIC~1\Sun
[25/06/2005|07:51] C:\DOCUME~1\Bite\APPLIC~1\Symantec
[07/05/2009|18:41] C:\DOCUME~1\Bite\APPLIC~1\SystemRequirementsLab
[23/01/2007|22:11] C:\DOCUME~1\Bite\APPLIC~1\Template
[09/05/2009|22:32] C:\DOCUME~1\Bite\APPLIC~1\TigerPlayer
[06/11/2007|20:05] C:\DOCUME~1\Bite\APPLIC~1\vlc
[03/11/2007|12:45] C:\DOCUME~1\Bite\APPLIC~1\Windows Desktop Search

[25/06/2005|07:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/11/2008|02:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/07/2007|10:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[25/06/2005|07:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[28/01/2007|00:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[03/11/2007|04:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[28/06/2009|17:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\DivX
[03/11/2007|04:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[27/06/2006|12:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[03/11/2007|04:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[02/11/2005|17:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec








--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[10/07/2009 14:13][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[10/07/2009 01:00][--ah-----] C:\WINDOWS\tasks\A47CB81991872B01.job
[10/07/2009 14:12][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( A47CB81991872B01.job )=( c:\docume~1\bite\applic~1\buildm~1\BirdStopRef.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[09/12/2006|19:51] C:\Program Files\7-Zip
[25/06/2005|19:15] C:\Program Files\acer
[25/11/2008|22:18] C:\Program Files\Adobe
[20/10/2008|17:48] C:\Program Files\Adverts
[09/06/2009|04:23] C:\Program Files\AlexP
[18/01/2006|22:36] C:\Program Files\Allocam Multi Visio
[12/11/2005|12:09] C:\Program Files\Altiris
[07/01/2006|12:57] C:\Program Files\Alwil Software
[06/08/2008|19:23] C:\Program Files\Apple Software Update
[10/05/2006|17:17] C:\Program Files\ArcSoft
[08/07/2009|19:27] C:\Program Files\ATI Technologies
[18/06/2009|15:37] C:\Program Files\ATITool
[18/08/2008|03:14] C:\Program Files\AtomixMP3
[21/10/2008|15:58] C:\Program Files\Azureus
[05/06/2006|16:33] C:\Program Files\Bethesda Softworks
[12/06/2009|18:09] C:\Program Files\BitComet
[17/12/2008|17:03] C:\Program Files\Bonjour
[06/01/2009|16:47] C:\Program Files\Brother
[13/06/2007|22:54] C:\Program Files\Buildmemoload
[18/08/2008|03:14] C:\Program Files\Camfrog
[09/06/2009|04:16] C:\Program Files\CamStudio
[10/05/2006|17:34] C:\Program Files\Canon
[10/05/2006|21:28] C:\Program Files\carasexe
[10/07/2009|00:45] C:\Program Files\CFWebAdvancedU
[05/06/2007|06:46] C:\Program Files\Chronometre
[09/04/2009|20:50] C:\Program Files\CodeStuff
[09/05/2009|22:32] C:\Program Files\CometBird
[25/06/2005|07:36] C:\Program Files\ComPlus Applications
[17/06/2009|18:03] C:\Program Files\CPUID
[04/04/2009|16:29] C:\Program Files\Creative Labs
[25/06/2005|07:50] C:\Program Files\CyberLink
[09/05/2009|13:24] C:\Program Files\DAEMON Tools Lite
[09/05/2009|13:24] C:\Program Files\DAEMON Tools Toolbar
[14/06/2007|20:58] C:\Program Files\Dial-Messenger
[16/11/2007|20:32] C:\Program Files\DIFX
[24/06/2009|17:04] C:\Program Files\DivX
[27/01/2006|16:34] C:\Program Files\Doom 3
[13/11/2005|19:07] C:\Program Files\Doom 3 Demo
[08/07/2009|18:44] C:\Program Files\Driver-Soft
[04/04/2009|16:58] C:\Program Files\Eidos Interactive
[04/04/2009|16:59] C:\Program Files\EidosNet
[18/06/2009|01:36] C:\Program Files\Electronic Arts
[12/07/2007|22:21] C:\Program Files\Emjysoft
[06/04/2009|04:23] C:\Program Files\eMule
[18/08/2008|03:15] C:\Program Files\eoRezo
[18/08/2008|03:12] C:\Program Files\Eroca
[18/06/2009|01:34] C:\Program Files\Everest Poker
[09/06/2009|04:15] C:\Program Files\Fichiers communs
[09/01/2007|22:58] C:\Program Files\FileZilla
[04/04/2009|13:58] C:\Program Files\Final Fantasy VII
[12/11/2005|12:08] C:\Program Files\Flat Panel Adjust
[13/02/2008|19:22] C:\Program Files\GameShadow
[18/03/2006|12:29] C:\Program Files\GameSpy Arcade
[18/06/2009|02:51] C:\Program Files\GIMP-2.0
[30/01/2009|01:15] C:\Program Files\Google
[15/01/2008|19:24] C:\Program Files\Hair Pro 2008 Light
[07/08/2007|16:54] C:\Program Files\ICRAplus
[08/07/2009|18:27] C:\Program Files\InstallShield Installation Information
[06/07/2009|22:52] C:\Program Files\Internet Explorer
[08/05/2009|05:05] C:\Program Files\iPod
[08/05/2009|05:05] C:\Program Files\iTunes
[31/03/2009|19:17] C:\Program Files\Java
[10/09/2007|20:17] C:\Program Files\Kongsoft
[07/12/2007|00:17] C:\Program Files\Last of the patriots
[23/04/2007|22:45] C:\Program Files\Lavalys
[21/10/2008|16:04] C:\Program Files\LimeWire
[09/06/2009|04:52] C:\Program Files\Live-Player
[01/05/2009|20:52] C:\Program Files\ma-config.com
[20/10/2008|17:39] C:\Program Files\Malwarebytes' Anti-Malware
[21/10/2008|01:10] C:\Program Files\MapEDC
[18/06/2009|01:35] C:\Program Files\Maxis
[20/09/2008|15:28] C:\Program Files\Messenger
[04/09/2008|15:15] C:\Program Files\Messenger Plus! Live
[11/05/2006|18:08] C:\Program Files\MessengerPlus! 3
[12/05/2008|18:34] C:\Program Files\Microsoft ActiveSync
[04/07/2007|23:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[12/05/2008|17:10] C:\Program Files\microsoft frontpage
[13/05/2008|23:31] C:\Program Files\Microsoft Office
[23/02/2008|03:22] C:\Program Files\Microsoft SQL Server
[03/11/2007|04:18] C:\Program Files\Microsoft SQL Server Compact Edition
[24/06/2005|04:43] C:\Program Files\Microsoft Works
[18/06/2009|01:47] C:\Program Files\Microsoft WSE
[20/09/2008|15:23] C:\Program Files\Movie Maker
[10/07/2009|14:21] C:\Program Files\Mozilla Firefox
[10/09/2007|21:35] C:\Program Files\MP3
[24/06/2006|22:53] C:\Program Files\MP3 Player Utilities
[20/10/2008|21:55] C:\Program Files\MP3 Player Utilities 3.5.02
[20/10/2008|21:55] C:\Program Files\MP3 Player Utilities 3.68
[09/05/2009|22:26] C:\Program Files\MpcStar
[13/05/2008|23:30] C:\Program Files\MSECache
[20/09/2008|15:23] C:\Program Files\msn
[25/06/2005|07:35] C:\Program Files\MSN Gaming Zone
[19/11/2006|11:25] C:\Program Files\MSXML 4.0
[08/01/2008|21:41] C:\Program Files\MyXOFT
[18/01/2007|21:29] C:\Program Files\Nero
[20/09/2008|15:19] C:\Program Files\NetMeeting
[23/03/2006|19:22] C:\Program Files\NewTech Infosystems
[04/10/2008|14:51] C:\Program Files\NoDNS
[03/06/2008|16:20] C:\Program Files\Nokia
[11/04/2009|19:26] C:\Program Files\Norton Security Scan
[10/07/2009|14:15] C:\Program Files\NOS
[23/12/2008|20:47] C:\Program Files\Nuance
[04/10/2008|14:51] C:\Program Files\nvcoi
[25/06/2005|07:35] C:\Program Files\Online Services
[02/11/2007|19:14] C:\Program Files\OpenOffice.org 2.2
[20/09/2008|15:19] C:\Program Files\Outlook Express
[02/11/2007|20:06] C:\Program Files\PandoBar
[16/11/2007|20:32] C:\Program Files\PC Connectivity Solution
[05/11/2005|17:04] C:\Program Files\Real
[13/01/2006|16:53] C:\Program Files\Reality Pump
[25/06/2005|07:44] C:\Program Files\Realtek
[13/09/2006|17:41] C:\Program Files\REAPER
[26/05/2006|22:00] C:\Program Files\ReflexiveArcade
[09/05/2009|13:51] C:\Program Files\RivaTuner v2.23
[25/02/2006|17:37] C:\Program Files\Rockstar Games
[23/12/2008|20:43] C:\Program Files\ScanSoft
[24/07/2007|13:47] C:\Program Files\Securitoo
[25/06/2005|07:36] C:\Program Files\Services en ligne
[01/03/2008|02:22] C:\Program Files\SM
[09/04/2009|22:24] C:\Program Files\Soft4Ever
[14/01/2009|21:41] C:\Program Files\Sony
[23/02/2008|03:19] C:\Program Files\Sony Setup
[26/05/2006|22:33] C:\Program Files\Space Taxi 2
[09/04/2009|20:43] C:\Program Files\Spybot - Search & Destroy
[10/07/2009|00:41] C:\Program Files\SpywareBlaster
[06/04/2009|17:30] C:\Program Files\Square Soft, Inc
[07/05/2009|18:41] C:\Program Files\SystemRequirementsLab
[15/01/2008|19:26] C:\Program Files\Telltale Games
[26/05/2006|22:48] C:\Program Files\Think Tanks
[23/02/2008|03:22] C:\Program Files\Uninstall Information
[07/02/2009|21:33] C:\Program Files\USB Disk Win98 Driver
[05/12/2005|18:39] C:\Program Files\VDCodecPack1.6
[02/11/2007|19:00] C:\Program Files\VideoLAN
[27/07/2007|19:16] C:\Program Files\Vstep
[02/11/2007|18:08] C:\Program Files\Wanadoo
[25/07/2008|23:53] C:\Program Files\WarRock
[02/09/2006|19:17] C:\Program Files\Winamp
[03/11/2007|04:17] C:\Program Files\Windows Desktop Search
[25/07/2008|23:57] C:\Program Files\Windows Live
[17/11/2007|00:52] C:\Program Files\Windows Live Favorites
[20/04/2009|14:38] C:\Program Files\Windows Live Safety Center
[10/07/2009|00:16] C:\Program Files\Windows Live Toolbar
[28/11/2006|21:27] C:\Program Files\Windows Media Connect 2
[25/01/2009|21:36] C:\Program Files\Windows Media Player
[20/09/2008|15:19] C:\Program Files\Windows NT
[25/06/2005|07:36] C:\Program Files\WindowsUpdate
[08/12/2006|20:58] C:\Program Files\WinRAR
[25/06/2005|07:37] C:\Program Files\xerox
[14/01/2009|23:16] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[25/11/2008|22:19] C:\Program Files\Fichiers communs\Adobe
[17/02/2007|18:03] C:\Program Files\Fichiers communs\Ahead
[08/05/2009|05:05] C:\Program Files\Fichiers communs\Apple
[23/06/2005|05:07] C:\Program Files\Fichiers communs\ArcSoft
[10/05/2006|17:36] C:\Program Files\Fichiers communs\Caere
[12/05/2008|18:33] C:\Program Files\Fichiers communs\designer
[24/06/2009|17:03] C:\Program Files\Fichiers communs\DivX Shared
[18/03/2007|17:54] C:\Program Files\Fichiers communs\GTK
[29/08/2008|00:56] C:\Program Files\Fichiers communs\InstallShield
[02/12/2006|21:43] C:\Program Files\Fichiers communs\Java
[06/03/2009|03:16] C:\Program Files\Fichiers communs\Microsoft Shared
[25/06/2005|07:36] C:\Program Files\Fichiers communs\MSSoap
[25/06/2005|07:48] C:\Program Files\Fichiers communs\muvee Technologies
[25/06/2005|07:48] C:\Program Files\Fichiers communs\NewTech Infosystems
[03/06/2008|16:20] C:\Program Files\Fichiers communs\Nokia
[25/06/2005|07:34] C:\Program Files\Fichiers communs\ODBC
[16/11/2007|20:32] C:\Program Files\Fichiers communs\PCSuite
[06/11/2008|19:37] C:\Program Files\Fichiers communs\Real
[23/12/2008|20:44] C:\Program Files\Fichiers communs\ScanSoft Shared
[25/06/2005|07:36] C:\Program Files\Fichiers communs\Services
[25/06/2005|07:34] C:\Program Files\Fichiers communs\SpeechEngines
[11/04/2009|19:26] C:\Program Files\Fichiers communs\Symantec Shared
[20/09/2008|15:19] C:\Program Files\Fichiers communs\System
[14/11/2007|20:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[06/11/2008|19:37] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 39 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Bite\APPLIC~1\buildm~1
C:\Program Files\buildm~1
C:\Program Files\Adverts
C:\DOCUME~1\Bite\Cookies\bite@advertstream[2].txt
C:\DOCUME~1\Bite\Cookies\bite@d2.advertserve[1].txt
C:\DOCUME~1\Bite\Cookies\bite@banner.cotedazurpalace[2].txt
C:\DOCUME~1\Bite\Cookies\bite@cotedazurpalace[1].txt
C:\DOCUME~1\Bite\Cookies\bite@partypoker[2].txt
C:\DOCUME~1\Bite\Cookies\bite@32vegas[2].txt
C:\DOCUME~1\Bite\Cookies\bite@serve.32vegas[2].txt
C:\DOCUME~1\Bite\Cookies\bite@www.32vegas[1].txt
C:\WINDOWS\Tasks\A47CB81991872B01.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"64live"="C:\\DOCUME~1\\Bite\\APPLIC~1\\BUILDM~1\\pop mpeg.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-10 14:28:10
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1722

--------------------\\ Recherche d'autres infections

C:\Program Files\Live-Player
C:\Program Files\Live-Player\data
C:\Program Files\Live-Player\img
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\live-player.log
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\skins
C:\Program Files\Live-Player\sqlite3.dll
C:\Program Files\Live-Player\uninst.exe
C:\DOCUME~1\Bite\APPLIC~1\live-player
C:\DOCUME~1\Bite\APPLIC~1\live-player\liveplayer.s3db
C:\DOCUME~1\Bite\APPLIC~1\live-player\flv.swf
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Conditions g‚n‚rales.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Confidentialit‚.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\D‚sinstaller.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Live-Player.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Website.url
C:\WINDOWS\Pack.epk

C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu.exe
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu_nav.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu_navps.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme.exe
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme_nav.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme_navps.dat
C:\WINDOWS\System32\kpligtx_navtmp.dat
C:\WINDOWS\System32\rcmfyrb.dat
C:\WINDOWS\System32\rcmfyrb_nav.dat
C:\WINDOWS\System32\rcmfyrb_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Bite\Mes documents\Ma musique\iTunes\iTunes Music\Limp Bizkit\limpbizkit.fan.pl\01 Crack Addict (CD Version).mp3
C:\DOCUME~1\Bite\Mes documents\Ma musique\Juelz Santana\What the Game's Been Missing!\18 I Am Crack.wma
C:\DOCUME~1\Bite\Mes documents\Ma musique\Mistah F.A.B\Da Baydestrian Disc 1\06 Cracky Baby Anthem.wma
C:\DOCUME~1\Bite\Mes documents\Mes fichiers re‡us\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\DOCUME~1\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar


[F:505][D:87]-> C:\DOCUME~1\Bite\LOCALS~1\Temp
[F:268][D:0]-> C:\DOCUME~1\Bite\Cookies
[F:10435][D:21]-> C:\DOCUME~1\Bite\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - 10/07/2009|14:33 - Option : [1]

--------------------\\ Fin du rapport a 14:33:43

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
BIOS : Default System BIOS
USER : Bite ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090710-0] 4.8.1335 (Activated)
Firewall : Look 'n' Stop 2.06p3 (Soft4Ever) 2.06p3 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:91 Go (Free:24 Go)
D:\ (Local Disk) - FAT32 - Total:92 Go (Free:65 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (CD or DVD)
I:\ (USB)
K:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 10/07/2009|23:27 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Bite\Cookies\bite@advertstream[2].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@d2.advertserve[1].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@partypoker[2].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@32vegas[2].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@serve.32vegas[2].txt
Supprime! - C:\DOCUME~1\Bite\Cookies\bite@www.32vegas[1].txt
Supprime! - C:\WINDOWS\Tasks\A47CB81991872B01.job
Supprime! - C:\DOCUME~1\Bite\APPLIC~1\buildm~1
Supprime! - C:\Program Files\buildm~1
Supprime! - C:\Program Files\Adverts

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[12/03/2009|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[08/05/2009|05:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[25/11/2008|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[20/02/2007|15:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[08/07/2009|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
[23/12/2008|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother
[25/06/2005|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[19/01/2009|23:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[16/11/2007|20:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
[04/11/2005|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
[17/01/2009|20:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
[12/07/2007|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Emjysoft
[11/03/2007|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/07/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/06/2008|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[29/08/2008|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[01/05/2009|20:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[04/10/2008|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[20/10/2008|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[14/05/2007|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[02/11/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[02/11/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microgaming
[14/01/2009|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[16/11/2007|21:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[10/07/2009|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[16/11/2007|20:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[09/11/2005|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[08/01/2009|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[23/02/2008|03:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[09/04/2009|20:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[11/01/2006|21:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[10/07/2009|00:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[04/10/2008|14:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\thisamenlessmeow
[05/11/2005|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[17/11/2007|00:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[25/07/2008|23:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[25/07/2008|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[30/04/2008|22:35] C:\DOCUME~1\Bite\APPLIC~1\Adobe
[02/09/2008|23:10] C:\DOCUME~1\Bite\APPLIC~1\AdobeUM
[03/02/2007|18:35] C:\DOCUME~1\Bite\APPLIC~1\Ahead
[12/12/2008|18:00] C:\DOCUME~1\Bite\APPLIC~1\Apple Computer
[08/07/2009|18:38] C:\DOCUME~1\Bite\APPLIC~1\ATI
[16/02/2009|21:25] C:\DOCUME~1\Bite\APPLIC~1\Brother
[11/07/2008|02:31] C:\DOCUME~1\Bite\APPLIC~1\Camfrog
[18/02/2009|00:34] C:\DOCUME~1\Bite\APPLIC~1\CamfrogWEB
[09/05/2009|22:32] C:\DOCUME~1\Bite\APPLIC~1\CometNetwork
[22/02/2007|22:00] C:\DOCUME~1\Bite\APPLIC~1\CyberLink
[20/01/2009|14:30] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools
[09/05/2009|14:24] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools Lite
[05/04/2009|13:47] C:\DOCUME~1\Bite\APPLIC~1\DAEMON Tools Pro
[03/06/2009|15:51] C:\DOCUME~1\Bite\APPLIC~1\DivX
[18/08/2008|03:15] C:\DOCUME~1\Bite\APPLIC~1\EoRezo
[08/01/2008|21:48] C:\DOCUME~1\Bite\APPLIC~1\GetRightToGo
[21/04/2007|20:32] C:\DOCUME~1\Bite\APPLIC~1\Google
[18/03/2007|18:10] C:\DOCUME~1\Bite\APPLIC~1\gtk-2.0
[14/06/2007|19:34] C:\DOCUME~1\Bite\APPLIC~1\Hamachi
[21/01/2007|19:18] C:\DOCUME~1\Bite\APPLIC~1\Help
[21/11/2008|00:12] C:\DOCUME~1\Bite\APPLIC~1\HiYo
[23/07/2007|18:51] C:\DOCUME~1\Bite\APPLIC~1\Identities
[06/01/2009|16:46] C:\DOCUME~1\Bite\APPLIC~1\InstallShield
[09/06/2009|04:52] C:\DOCUME~1\Bite\APPLIC~1\live-player
[11/02/2007|18:14] C:\DOCUME~1\Bite\APPLIC~1\Macromedia
[20/10/2008|17:38] C:\DOCUME~1\Bite\APPLIC~1\Malwarebytes
[27/09/2008|13:04] C:\DOCUME~1\Bite\APPLIC~1\Microsoft
[12/05/2008|17:10] C:\DOCUME~1\Bite\APPLIC~1\Microsoft Web Folders
[06/09/2008|14:45] C:\DOCUME~1\Bite\APPLIC~1\Mozilla
[16/01/2007|19:04] C:\DOCUME~1\Bite\APPLIC~1\MSNInstaller
[23/02/2008|03:26] C:\DOCUME~1\Bite\APPLIC~1\NetMedia Providers
[05/12/2007|00:38] C:\DOCUME~1\Bite\APPLIC~1\Nokia
[09/05/2009|00:19] C:\DOCUME~1\Bite\APPLIC~1\Nokia Multimedia Player
[14/10/2008|18:17] C:\DOCUME~1\Bite\APPLIC~1\OpenOffice.org2
[16/11/2007|20:33] C:\DOCUME~1\Bite\APPLIC~1\PC Suite
[08/01/2008|22:15] C:\DOCUME~1\Bite\APPLIC~1\Propellerhead Software
[23/02/2008|03:26] C:\DOCUME~1\Bite\APPLIC~1\Publish Providers
[07/12/2007|19:07] C:\DOCUME~1\Bite\APPLIC~1\Real
[25/06/2009|14:31] C:\DOCUME~1\Bite\APPLIC~1\ScanSoft
[24/05/2007|05:02] C:\DOCUME~1\Bite\APPLIC~1\Screenshot Sender
[15/01/2008|19:28] C:\DOCUME~1\Bite\APPLIC~1\SecuROM
[14/01/2009|21:41] C:\DOCUME~1\Bite\APPLIC~1\Sony
[09/01/2007|23:28] C:\DOCUME~1\Bite\APPLIC~1\Sun
[25/06/2005|07:51] C:\DOCUME~1\Bite\APPLIC~1\Symantec
[07/05/2009|18:41] C:\DOCUME~1\Bite\APPLIC~1\SystemRequirementsLab
[23/01/2007|22:11] C:\DOCUME~1\Bite\APPLIC~1\Template
[09/05/2009|22:32] C:\DOCUME~1\Bite\APPLIC~1\TigerPlayer
[06/11/2007|20:05] C:\DOCUME~1\Bite\APPLIC~1\vlc
[03/11/2007|12:45] C:\DOCUME~1\Bite\APPLIC~1\Windows Desktop Search

[25/06/2005|07:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[04/11/2008|02:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/07/2007|10:12] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[25/06/2005|07:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[28/01/2007|00:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[03/11/2007|04:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[28/06/2009|17:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\DivX
[03/11/2007|04:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[27/06/2006|12:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
[03/11/2007|04:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[02/11/2005|17:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec








--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[10/07/2009 22:41][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[10/07/2009 22:41][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[09/12/2006|19:51] C:\Program Files\7-Zip
[25/06/2005|19:15] C:\Program Files\acer
[25/11/2008|22:18] C:\Program Files\Adobe
[09/06/2009|04:23] C:\Program Files\AlexP
[18/01/2006|22:36] C:\Program Files\Allocam Multi Visio
[12/11/2005|12:09] C:\Program Files\Altiris
[07/01/2006|12:57] C:\Program Files\Alwil Software
[06/08/2008|19:23] C:\Program Files\Apple Software Update
[10/05/2006|17:17] C:\Program Files\ArcSoft
[08/07/2009|19:27] C:\Program Files\ATI Technologies
[18/06/2009|15:37] C:\Program Files\ATITool
[18/08/2008|03:14] C:\Program Files\AtomixMP3
[21/10/2008|15:58] C:\Program Files\Azureus
[05/06/2006|16:33] C:\Program Files\Bethesda Softworks
[12/06/2009|18:09] C:\Program Files\BitComet
[17/12/2008|17:03] C:\Program Files\Bonjour
[06/01/2009|16:47] C:\Program Files\Brother
[18/08/2008|03:14] C:\Program Files\Camfrog
[09/06/2009|04:16] C:\Program Files\CamStudio
[10/05/2006|17:34] C:\Program Files\Canon
[10/05/2006|21:28] C:\Program Files\carasexe
[10/07/2009|00:45] C:\Program Files\CFWebAdvancedU
[05/06/2007|06:46] C:\Program Files\Chronometre
[09/04/2009|20:50] C:\Program Files\CodeStuff
[09/05/2009|22:32] C:\Program Files\CometBird
[25/06/2005|07:36] C:\Program Files\ComPlus Applications
[17/06/2009|18:03] C:\Program Files\CPUID
[04/04/2009|16:29] C:\Program Files\Creative Labs
[25/06/2005|07:50] C:\Program Files\CyberLink
[09/05/2009|13:24] C:\Program Files\DAEMON Tools Lite
[09/05/2009|13:24] C:\Program Files\DAEMON Tools Toolbar
[14/06/2007|20:58] C:\Program Files\Dial-Messenger
[16/11/2007|20:32] C:\Program Files\DIFX
[24/06/2009|17:04] C:\Program Files\DivX
[27/01/2006|16:34] C:\Program Files\Doom 3
[13/11/2005|19:07] C:\Program Files\Doom 3 Demo
[08/07/2009|18:44] C:\Program Files\Driver-Soft
[04/04/2009|16:58] C:\Program Files\Eidos Interactive
[04/04/2009|16:59] C:\Program Files\EidosNet
[18/06/2009|01:36] C:\Program Files\Electronic Arts
[12/07/2007|22:21] C:\Program Files\Emjysoft
[06/04/2009|04:23] C:\Program Files\eMule
[18/08/2008|03:15] C:\Program Files\eoRezo
[18/08/2008|03:12] C:\Program Files\Eroca
[18/06/2009|01:34] C:\Program Files\Everest Poker
[09/06/2009|04:15] C:\Program Files\Fichiers communs
[09/01/2007|22:58] C:\Program Files\FileZilla
[04/04/2009|13:58] C:\Program Files\Final Fantasy VII
[12/11/2005|12:08] C:\Program Files\Flat Panel Adjust
[13/02/2008|19:22] C:\Program Files\GameShadow
[18/03/2006|12:29] C:\Program Files\GameSpy Arcade
[18/06/2009|02:51] C:\Program Files\GIMP-2.0
[30/01/2009|01:15] C:\Program Files\Google
[15/01/2008|19:24] C:\Program Files\Hair Pro 2008 Light
[07/08/2007|16:54] C:\Program Files\ICRAplus
[08/07/2009|18:27] C:\Program Files\InstallShield Installation Information
[06/07/2009|22:52] C:\Program Files\Internet Explorer
[08/05/2009|05:05] C:\Program Files\iPod
[08/05/2009|05:05] C:\Program Files\iTunes
[31/03/2009|19:17] C:\Program Files\Java
[10/09/2007|20:17] C:\Program Files\Kongsoft
[07/12/2007|00:17] C:\Program Files\Last of the patriots
[23/04/2007|22:45] C:\Program Files\Lavalys
[21/10/2008|16:04] C:\Program Files\LimeWire
[09/06/2009|04:52] C:\Program Files\Live-Player
[01/05/2009|20:52] C:\Program Files\ma-config.com
[20/10/2008|17:39] C:\Program Files\Malwarebytes' Anti-Malware
[21/10/2008|01:10] C:\Program Files\MapEDC
[18/06/2009|01:35] C:\Program Files\Maxis
[20/09/2008|15:28] C:\Program Files\Messenger
[04/09/2008|15:15] C:\Program Files\Messenger Plus! Live
[11/05/2006|18:08] C:\Program Files\MessengerPlus! 3
[12/05/2008|18:34] C:\Program Files\Microsoft ActiveSync
[04/07/2007|23:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[12/05/2008|17:10] C:\Program Files\microsoft frontpage
[13/05/2008|23:31] C:\Program Files\Microsoft Office
[23/02/2008|03:22] C:\Program Files\Microsoft SQL Server
[03/11/2007|04:18] C:\Program Files\Microsoft SQL Server Compact Edition
[24/06/2005|04:43] C:\Program Files\Microsoft Works
[18/06/2009|01:47] C:\Program Files\Microsoft WSE
[20/09/2008|15:23] C:\Program Files\Movie Maker
[10/07/2009|23:26] C:\Program Files\Mozilla Firefox
[10/09/2007|21:35] C:\Program Files\MP3
[24/06/2006|22:53] C:\Program Files\MP3 Player Utilities
[20/10/2008|21:55] C:\Program Files\MP3 Player Utilities 3.5.02
[20/10/2008|21:55] C:\Program Files\MP3 Player Utilities 3.68
[09/05/2009|22:26] C:\Program Files\MpcStar
[13/05/2008|23:30] C:\Program Files\MSECache
[20/09/2008|15:23] C:\Program Files\msn
[25/06/2005|07:35] C:\Program Files\MSN Gaming Zone
[19/11/2006|11:25] C:\Program Files\MSXML 4.0
[08/01/2008|21:41] C:\Program Files\MyXOFT
[18/01/2007|21:29] C:\Program Files\Nero
[20/09/2008|15:19] C:\Program Files\NetMeeting
[23/03/2006|19:22] C:\Program Files\NewTech Infosystems
[04/10/2008|14:51] C:\Program Files\NoDNS
[03/06/2008|16:20] C:\Program Files\Nokia
[11/04/2009|19:26] C:\Program Files\Norton Security Scan
[10/07/2009|14:15] C:\Program Files\NOS
[23/12/2008|20:47] C:\Program Files\Nuance
[04/10/2008|14:51] C:\Program Files\nvcoi
[25/06/2005|07:35] C:\Program Files\Online Services
[02/11/2007|19:14] C:\Program Files\OpenOffice.org 2.2
[20/09/2008|15:19] C:\Program Files\Outlook Express
[02/11/2007|20:06] C:\Program Files\PandoBar
[16/11/2007|20:32] C:\Program Files\PC Connectivity Solution
[05/11/2005|17:04] C:\Program Files\Real
[13/01/2006|16:53] C:\Program Files\Reality Pump
[25/06/2005|07:44] C:\Program Files\Realtek
[13/09/2006|17:41] C:\Program Files\REAPER
[26/05/2006|22:00] C:\Program Files\ReflexiveArcade
[09/05/2009|13:51] C:\Program Files\RivaTuner v2.23
[25/02/2006|17:37] C:\Program Files\Rockstar Games
[23/12/2008|20:43] C:\Program Files\ScanSoft
[24/07/2007|13:47] C:\Program Files\Securitoo
[25/06/2005|07:36] C:\Program Files\Services en ligne
[01/03/2008|02:22] C:\Program Files\SM
[09/04/2009|22:24] C:\Program Files\Soft4Ever
[14/01/2009|21:41] C:\Program Files\Sony
[23/02/2008|03:19] C:\Program Files\Sony Setup
[26/05/2006|22:33] C:\Program Files\Space Taxi 2
[09/04/2009|20:43] C:\Program Files\Spybot - Search & Destroy
[10/07/2009|00:41] C:\Program Files\SpywareBlaster
[06/04/2009|17:30] C:\Program Files\Square Soft, Inc
[07/05/2009|18:41] C:\Program Files\SystemRequirementsLab
[15/01/2008|19:26] C:\Program Files\Telltale Games
[26/05/2006|22:48] C:\Program Files\Think Tanks
[23/02/2008|03:22] C:\Program Files\Uninstall Information
[07/02/2009|21:33] C:\Program Files\USB Disk Win98 Driver
[05/12/2005|18:39] C:\Program Files\VDCodecPack1.6
[02/11/2007|19:00] C:\Program Files\VideoLAN
[27/07/2007|19:16] C:\Program Files\Vstep
[02/11/2007|18:08] C:\Program Files\Wanadoo
[25/07/2008|23:53] C:\Program Files\WarRock
[02/09/2006|19:17] C:\Program Files\Winamp
[03/11/2007|04:17] C:\Program Files\Windows Desktop Search
[25/07/2008|23:57] C:\Program Files\Windows Live
[17/11/2007|00:52] C:\Program Files\Windows Live Favorites
[20/04/2009|14:38] C:\Program Files\Windows Live Safety Center
[10/07/2009|00:16] C:\Program Files\Windows Live Toolbar
[28/11/2006|21:27] C:\Program Files\Windows Media Connect 2
[25/01/2009|21:36] C:\Program Files\Windows Media Player
[20/09/2008|15:19] C:\Program Files\Windows NT
[25/06/2005|07:36] C:\Program Files\WindowsUpdate
[08/12/2006|20:58] C:\Program Files\WinRAR
[25/06/2005|07:37] C:\Program Files\xerox
[14/01/2009|23:16] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[25/11/2008|22:19] C:\Program Files\Fichiers communs\Adobe
[17/02/2007|18:03] C:\Program Files\Fichiers communs\Ahead
[08/05/2009|05:05] C:\Program Files\Fichiers communs\Apple
[23/06/2005|05:07] C:\Program Files\Fichiers communs\ArcSoft
[10/05/2006|17:36] C:\Program Files\Fichiers communs\Caere
[12/05/2008|18:33] C:\Program Files\Fichiers communs\designer
[24/06/2009|17:03] C:\Program Files\Fichiers communs\DivX Shared
[18/03/2007|17:54] C:\Program Files\Fichiers communs\GTK
[29/08/2008|00:56] C:\Program Files\Fichiers communs\InstallShield
[02/12/2006|21:43] C:\Program Files\Fichiers communs\Java
[06/03/2009|03:16] C:\Program Files\Fichiers communs\Microsoft Shared
[25/06/2005|07:36] C:\Program Files\Fichiers communs\MSSoap
[25/06/2005|07:48] C:\Program Files\Fichiers communs\muvee Technologies
[25/06/2005|07:48] C:\Program Files\Fichiers communs\NewTech Infosystems
[03/06/2008|16:20] C:\Program Files\Fichiers communs\Nokia
[25/06/2005|07:34] C:\Program Files\Fichiers communs\ODBC
[16/11/2007|20:32] C:\Program Files\Fichiers communs\PCSuite
[06/11/2008|19:37] C:\Program Files\Fichiers communs\Real
[23/12/2008|20:44] C:\Program Files\Fichiers communs\ScanSoft Shared
[25/06/2005|07:36] C:\Program Files\Fichiers communs\Services
[25/06/2005|07:34] C:\Program Files\Fichiers communs\SpeechEngines
[11/04/2009|19:26] C:\Program Files\Fichiers communs\Symantec Shared
[20/09/2008|15:19] C:\Program Files\Fichiers communs\System
[14/11/2007|20:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[06/11/2008|19:37] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 37 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-10 23:29:30
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 1722

--------------------\\ Recherche d'autres infections

C:\Program Files\Live-Player
C:\Program Files\Live-Player\data
C:\Program Files\Live-Player\img
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\live-player.log
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\skins
C:\Program Files\Live-Player\sqlite3.dll
C:\Program Files\Live-Player\uninst.exe
C:\DOCUME~1\Bite\APPLIC~1\live-player
C:\DOCUME~1\Bite\APPLIC~1\live-player\liveplayer.s3db
C:\DOCUME~1\Bite\APPLIC~1\live-player\flv.swf
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Conditions g‚n‚rales.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Confidentialit‚.url
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\D‚sinstaller.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Live-Player.lnk
C:\DOCUME~1\ALLUSE~1\MENUD~1\PROGRA~1\Live-Player\Website.url
C:\WINDOWS\Pack.epk

C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu.exe
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu_nav.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\soqyu_navps.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme.exe
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme_nav.dat
C:\DOCUME~1\Bite\LOCALS~1\APPLIC~1\uigme_navps.dat
C:\WINDOWS\System32\kpligtx_navtmp.dat
C:\WINDOWS\System32\rcmfyrb.dat
C:\WINDOWS\System32\rcmfyrb_nav.dat
C:\WINDOWS\System32\rcmfyrb_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Bite\Mes documents\Ma musique\iTunes\iTunes Music\Limp Bizkit\limpbizkit.fan.pl\01 Crack Addict (CD Version).mp3
C:\DOCUME~1\Bite\Mes documents\Ma musique\Juelz Santana\What the Game's Been Missing!\18 I Am Crack.wma
C:\DOCUME~1\Bite\Mes documents\Ma musique\Mistah F.A.B\Da Baydestrian Disc 1\06 Cracky Baby Anthem.wma
C:\DOCUME~1\Bite\Mes documents\Mes fichiers re‡us\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\DOCUME~1\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar


[F:505][D:86]-> C:\DOCUME~1\Bite\LOCALS~1\Temp
[F:260][D:0]-> C:\DOCUME~1\Bite\Cookies
[F:10435][D:21]-> C:\DOCUME~1\Bite\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - 10/07/2009|14:33 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 10/07/2009|23:33 - Option : [2]

--------------------\\ Fin du rapport a 23:33:33

Je ne trouve pas le rapport...

• Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

• Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
• Double-clique sur le raccourci d'Ad-Remover situé sur ton Bureau pour le lancer.

(Sous Vista, il faut cliquer droit sur le raccourci d'Ad-Remover et choisir Exécuter en tant qu'administrateur)

• Choisis la langue F pour français.
• Au menu principal, choisis l'option S.

/!\ Laisse travailler l'outil /!\

• Poste le rapport qui apparaît à la fin (C:\Ad-Report-SCAN.log).

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 16:26:32, 11/07/2009 | Mode Normal | Option: SCAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: ACER-A38B4A0260 | Utilisateur actuel: Bite
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
Administrateur: Bite
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Classes\EoRezoBHO.EoBho
HKLM\Software\Classes\EoRezoBHO.EoBho.1
HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKLM\Software\Classes\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKLM\Software\EoRezo
HKLM\Software\ItsLabel
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKU\S-1-5-21-3147813610-3887638009-2142806373-1009\Software\Eorezo
.
C:\DOCUME~1\Bite\APPLIC~1\EoRezo
C:\Program Files\EoRezo
C:\Program Files\Everest Poker
C:\DOCUME~1\Bite\Cookies\bite@scache0.eorezo[1].txt
.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: rjzrilzu.default (Bite)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Camfrog" );
(Prefs.js) user_pref("browser.search.selectedEngine", "Camfrog" );
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.camfrog.com/search.php?q=" );
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr" );
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11" );
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://www.wanadoo.fr/go/page_recherche/
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Search Page: hxxp://www.google.com
Start Page: hxxp://www.google.fr/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Start Page: hxxp://www.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\app.log
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\binkw32.dll
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\EAXUnified.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\FF8.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\FF8_Patch12.txt
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaPatch\EAXUnified.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaPatch\FF8.exe
C:\Documents and Settings\Bite\Mes documents\Mes fichiers re‡us\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\Documents and Settings\Bite\Recent\FFVII Patches.rar.lnk
.
===================================
.
4429 Octet(s) - C:\Ad-Report-SCAN.log
.
72 Fichier(s) - C:\DOCUME~1\Bite\LOCALS~1\Temp
10 Fichier(s) - C:\WINDOWS\Temp
.
1 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
0 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 17:04:16 | 11/07/2009
.
============== E.O.F ==============
.

.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 17:14:49, 11/07/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: ACER-A38B4A0260 | Utilisateur actuel: Bite
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
Administrateur: Bite
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\EoRezo
HKLM\Software\ItsLabel
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
.
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\db
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\Bite\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\Bite\APPLIC~1\EoRezo
C:\Program Files\EoRezo\cmhost.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoRezoImg_9.dll
C:\Program Files\EoRezo\EoRezoTools_9.dll
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
C:\Program Files\EoRezo\EoAdv\tmp
C:\Program Files\EoRezo
C:\Program Files\Everest Poker
C:\DOCUME~1\Bite\Cookies\bite@scache0.eorezo[1].txt

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.11 *

Nom du profil: rjzrilzu.default (Bite)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Camfrog" );
(Prefs.js) user_pref("browser.search.selectedEngine", "Camfrog" );
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.camfrog.com/search.php?q=" );
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr" );
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11" );
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://www.wanadoo.fr/go/page_recherche/
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\app.log
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\binkw32.dll
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\EAXUnified.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\FF8.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaNVPatch.zip\FF8_Patch12.txt
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaPatch\EAXUnified.exe
C:\Documents and Settings\Bite\Bureau\Final Fantasy VIII\FF VIII PATCH\FF8SqeaPatch\FF8.exe
C:\Documents and Settings\Bite\Mes documents\Mes fichiers re‡us\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Crack‚ Fonctionne.rar
C:\Documents and Settings\Bite\Recent\FFVII Patches.rar.lnk
.
===================================
.
5420 Octet(s) - C:\Ad-Report-CLEAN.log
4740 Octet(s) - C:\Ad-Report-SCAN.log
.
0 Fichier(s) - C:\DOCUME~1\Bite\LOCALS~1\Temp
4 Fichier(s) - C:\WINDOWS\Temp
.
19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
14 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 17:54:59 | 11/07/2009
.
============== E.O.F ==============
.

C'est lequel le scan RSIT ?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bite at 2009-07-11 18:25:12
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 26 GB (28%) free of 93 GB
Total RAM: 1535 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:25:28, on 11/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\UMStor\Res.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Bite\Bureau\RSIT.exe
C:\Program Files\trend micro\Bite.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: Microsoft MSJava 32 - {43F7497C-7687-4DEA-A057-F21BD81BC896} - C:\WINDOWS\system32\msjava32.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\WINDOWS\UMStor\Res.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [NoDNS] C:\Program Files\\NoDNS\\NoDNS.exe
O4 - HKCU\..\Run: [nvcoi] C:\Program Files\nvcoi\nvcoi.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user')
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5512 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-11-06 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43F7497C-7687-4DEA-A057-F21BD81BC896}]
CJava Object - C:\WINDOWS\system32\msjava32.dll [2008-04-14 362496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ControlCenter3"=C:\Program Files\Brother\ControlCenter3\brctrcen.exe [2007-01-26 65536]
"USB Storage Toolbox"=C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2009-04-09 557056]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-05-20 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"NoDNS"=C:\Program Files\\NoDNS\\NoDNS.exe []
"nvcoi"=C:\Program Files\nvcoi\nvcoi.exe []
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2009-04-29 3338240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Bite\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2007-01-29 46632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSN MultiConnect]
C:\Program Files\MSN Multiconnect\MSN Multiconnect.exe min []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinTouch]
C:\Documents and Settings\Bite\Application Data\WinTouch\WinTouch.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bite^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.2.lnk]
C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE [2007-02-02 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"iPod Service"=3
"gusvc"=2
"avast! Web Scanner"=3
"avast! Mail Scanner"=3
"avast! Antivirus"=2
"Apple Mobile Device"=2
"aswUpdSv"=2
"Bonjour Service"=2
"SharedAccess"=2
"Fax"=2
"CiSvc"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-05-16 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000
"NoDriveAutoRun"=4294967295
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=
"AllowUnhashedWebView"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-07-11 18:25:13 ----D---- C:\Program Files\trend micro
2009-07-11 16:24:43 ----D---- C:\Program Files\Ad-remover
2009-07-11 03:15:54 ----A---- C:\cleannavi.txt
2009-07-11 03:15:23 ----D---- C:\Program Files\Navilog1
2009-07-10 14:24:00 ----A---- C:\lopR.txt
2009-07-10 14:23:17 ----D---- C:\Lop SD
2009-07-10 01:02:06 ----D---- C:\Program Files\NOS
2009-07-10 01:02:06 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-07-10 00:52:57 ----D---- C:\rsit
2009-07-10 00:38:28 ----D---- C:\Program Files\SpywareBlaster
2009-07-08 19:32:31 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2009-07-08 19:22:45 ----D---- C:\ATI
2009-07-08 18:44:43 ----A---- C:\WINDOWS\system32\XceedZip.dll
2009-07-08 18:44:39 ----D---- C:\Program Files\Driver-Soft
2009-07-08 18:38:06 ----D---- C:\Documents and Settings\Bite\Application Data\ATI
2009-07-08 18:24:47 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-07-08 18:24:43 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2009-07-08 18:24:12 ----D---- C:\Program Files\ATI Technologies
2009-07-06 15:41:29 ----D---- C:\WINDOWS\ie8updates
2009-07-06 15:39:23 ----HDC---- C:\WINDOWS\ie8
2009-06-25 14:31:58 ----D---- C:\Documents and Settings\Bite\Application Data\ScanSoft
2009-06-18 15:20:30 ----D---- C:\Program Files\ATITool
2009-06-18 01:47:54 ----D---- C:\Program Files\Microsoft WSE
2009-06-17 18:03:49 ----D---- C:\Program Files\CPUID

======List of files/folders modified in the last 1 months======

2009-07-11 18:25:13 ----RD---- C:\Program Files
2009-07-11 18:23:07 ----D---- C:\WINDOWS\Temp
2009-07-11 18:23:07 ----D---- C:\WINDOWS\Prefetch
2009-07-11 18:06:26 ----D---- C:\Program Files\Mozilla Firefox
2009-07-11 15:28:18 ----SD---- C:\WINDOWS\Tasks
2009-07-11 15:28:10 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-07-11 15:28:05 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-11 04:06:49 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-11 04:04:25 ----AD---- C:\WINDOWS\system32
2009-07-11 04:00:37 ----AD---- C:\WINDOWS
2009-07-10 14:15:56 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-10 00:45:33 ----D---- C:\WINDOWS\system32\FlashAX
2009-07-10 00:45:31 ----D---- C:\Program Files\CFWebAdvancedU
2009-07-10 00:43:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-07-10 00:16:31 ----D---- C:\Program Files\Windows Live Toolbar
2009-07-08 23:16:44 ----SHD---- C:\WINDOWS\Installer
2009-07-08 19:27:46 ----RSD---- C:\WINDOWS\assembly
2009-07-08 19:27:37 ----D---- C:\WINDOWS\WinSxS
2009-07-08 19:23:47 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-08 19:23:40 ----AD---- C:\WINDOWS\system32\drivers
2009-07-08 19:23:37 ----HD---- C:\WINDOWS\inf
2009-07-08 18:38:08 ----D---- C:\WINDOWS\system32\config
2009-07-08 18:27:31 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-06 22:52:41 ----D---- C:\WINDOWS\system32\fr-fr
2009-07-06 22:52:41 ----D---- C:\WINDOWS\Media
2009-07-06 22:52:40 ----D---- C:\WINDOWS\Help
2009-07-06 22:52:40 ----D---- C:\Program Files\Internet Explorer
2009-07-06 15:41:58 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-06 15:41:48 ----A---- C:\WINDOWS\imsins.BAK
2009-07-04 15:39:00 ----RASH---- C:\boot.ini
2009-07-04 15:39:00 ----A---- C:\WINDOWS\win.ini
2009-07-04 15:39:00 ----A---- C:\WINDOWS\system.ini
2009-06-28 17:39:58 ----D---- C:\WINDOWS\Debug
2009-06-24 17:04:15 ----D---- C:\Program Files\DivX
2009-06-24 17:03:48 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-06-18 15:30:55 ----D---- C:\WINDOWS\Minidump
2009-06-18 03:43:21 ----D---- C:\Downloads
2009-06-18 02:57:08 ----D---- C:\Casino
2009-06-18 02:55:53 ----D---- C:\Mp3 Player
2009-06-18 02:52:14 ----D---- C:\WINDOWS\twain_32
2009-06-18 02:51:40 ----D---- C:\Program Files\GIMP-2.0
2009-06-18 01:36:01 ----D---- C:\Program Files\Electronic Arts
2009-06-18 01:35:28 ----D---- C:\Program Files\Maxis
2009-06-17 18:13:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-12 18:09:40 ----D---- C:\Program Files\BitComet

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2003-06-13 25244]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2009-04-09 79232]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 int15.sys;int15.sys; \??\C:\Program Files\Acer\eRecovery\int15.sys []
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-06-29 1268204]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-05-16 4069888]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-03-19 23400]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-14 3134976]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-06-25 6144]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2009-04-09 58232]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2005-03-30 230400]
S3 AEXPAM;Philips SmartManage Service; C:\WINDOWS\System32\Drivers\aexpamdrv.sys [2004-09-01 21824]
S3 afq6h923;afq6h923; C:\WINDOWS\system32\drivers\afq6h923.sys []
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
S3 catchme;catchme; \??\C:\DOCUME~1\Bite\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
S3 DCamUSBIntel;Webcam; C:\WINDOWS\System32\Drivers\TP6800.sys []
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-06-14 25544]
S3 MSICPL;MSICPL; \??\G:\install4\MSICPL.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 NTACCESS;NTACCESS; \??\G:\NTACCESS.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.23\RivaTuner32.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\G:\NTGLM7X.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SNCT511;VideoCAM Trek; C:\WINDOWS\system32\DRIVERS\snct511.sys [2005-02-03 229376]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TIEHDUSB;TIEHDUSB; C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WinDriver6;WinDriver6; C:\WINDOWS\system32\drivers\windrvr6.sys [2008-07-03 193696]
S3 WinUSB;PS3Eye Camera; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\acer\Acer eConsole\MediaServerService.exe [2005-06-21 438272]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-05-16 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-05-15 593920]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-01 168004]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-04-21 216232]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WSearch;Recherche Windows; C:\WINDOWS\system32\SearchIndexer.exe [2007-02-05 300032]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]
S4 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S4 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2408
Windows 5.1.2600 Service Pack 3

11/07/2009 18:50:33
mbam-log-2009-07-11 (18-50-33).txt

Type de recherche: Examen rapide
Eléments examinés: 112782
Temps écoulé: 12 minute(s), 30 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 8
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nvcoi (Trojan.Stars) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NoDNS (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\xInsiDERexe (Adware.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\MapEDC (Adware.Maxifiles) -> Quarantined and deleted successfully.
C:\Program Files\NoDNS (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\nvcoi (Trojan.Stars) -> Quarantined and deleted successfully.
C:\Program Files\Eroca (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system33 (Spyware.Banker) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\download (Spyware.Banker) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\logs (Spyware.Banker) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\sounds (Spyware.Banker) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\program files\MapEDC\IDE.stt (Adware.Maxifiles) -> Quarantined and deleted successfully.
c:\program files\MapEDC\MapEDC.exe.lzma (Adware.Maxifiles) -> Quarantined and deleted successfully.
c:\program files\NoDNS\UnInstall.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\nvcoi\mst.stt (Trojan.Stars) -> Quarantined and deleted successfully.
c:\program files\nvcoi\nvcoi.exe.lzma (Trojan.Stars) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\BoGo.dll (Spyware.Banker) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\mirc.ini (Spyware.Banker) -> Quarantined and deleted successfully.
c:\WINDOWS\system33\zalid.zip (Spyware.Banker) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\Update.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bite at 2009-07-11 19:06:30
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 26 GB (28%) free of 93 GB
Total RAM: 1535 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:06:37, on 11/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\UMStor\Res.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Bite\Bureau\RSIT.exe
C:\Program Files\trend micro\Bite.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: Microsoft MSJava 32 - {43F7497C-7687-4DEA-A057-F21BD81BC896} - C:\WINDOWS\system32\msjava32.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\WINDOWS\UMStor\Res.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [NoDNS] C:\Program Files\\NoDNS\\NoDNS.exe
O4 - HKCU\..\Run: [nvcoi] C:\Program Files\nvcoi\nvcoi.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user')
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5770 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-11-06 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43F7497C-7687-4DEA-A057-F21BD81BC896}]
CJava Object - C:\WINDOWS\system32\msjava32.dll [2008-04-14 362496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ControlCenter3"=C:\Program Files\Brother\ControlCenter3\brctrcen.exe [2007-01-26 65536]
"USB Storage Toolbox"=C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2009-04-09 557056]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-05-20 98304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-06-17 414992]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-06-17 1287440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"NoDNS"=C:\Program Files\\NoDNS\\NoDNS.exe []
"nvcoi"=C:\Program Files\nvcoi\nvcoi.exe []
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2009-04-29 3338240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Bite\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2007-01-29 46632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSN MultiConnect]
C:\Program Files\MSN Multiconnect\MSN Multiconnect.exe min []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinTouch]
C:\Documents and Settings\Bite\Application Data\WinTouch\WinTouch.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bite^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.2.lnk]
C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE [2007-02-02 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"iPod Service"=3
"gusvc"=2
"avast! Web Scanner"=3
"avast! Mail Scanner"=3
"avast! Antivirus"=2
"Apple Mobile Device"=2
"aswUpdSv"=2
"Bonjour Service"=2
"SharedAccess"=2
"Fax"=2
"CiSvc"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-05-16 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000
"NoDriveAutoRun"=4294967295
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=
"AllowUnhashedWebView"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 3 months======

2009-07-11 18:50:48 ----A---- C:\WINDOWS\nqku.txt
2009-07-11 18:25:13 ----D---- C:\Program Files\trend micro
2009-07-11 16:24:43 ----D---- C:\Program Files\Ad-remover
2009-07-11 03:15:54 ----A---- C:\cleannavi.txt
2009-07-10 14:24:00 ----A---- C:\lopR.txt
2009-07-10 14:23:17 ----D---- C:\Lop SD
2009-07-10 01:02:06 ----D---- C:\Program Files\NOS
2009-07-10 01:02:06 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-07-10 00:52:57 ----D---- C:\rsit
2009-07-10 00:38:28 ----D---- C:\Program Files\SpywareBlaster
2009-07-08 19:32:31 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2009-07-08 19:22:45 ----D---- C:\ATI
2009-07-08 18:44:43 ----A---- C:\WINDOWS\system32\XceedZip.dll
2009-07-08 18:44:39 ----D---- C:\Program Files\Driver-Soft
2009-07-08 18:38:06 ----D---- C:\Documents and Settings\Bite\Application Data\ATI
2009-07-08 18:24:47 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-07-08 18:24:43 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2009-07-08 18:24:12 ----D---- C:\Program Files\ATI Technologies
2009-07-06 15:41:29 ----D---- C:\WINDOWS\ie8updates
2009-07-06 15:39:23 ----HDC---- C:\WINDOWS\ie8
2009-06-25 14:31:58 ----D---- C:\Documents and Settings\Bite\Application Data\ScanSoft
2009-06-18 15:20:30 ----D---- C:\Program Files\ATITool
2009-06-18 01:47:54 ----D---- C:\Program Files\Microsoft WSE
2009-06-17 18:03:49 ----D---- C:\Program Files\CPUID
2009-06-11 05:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 05:07:20 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 05:04:11 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 05:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-09 03:56:47 ----HDC---- C:\WINDOWS\$NtUninstallwinusb0100$
2009-06-09 03:55:25 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2009-06-09 03:55:22 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2009-06-09 03:51:52 ----A---- C:\WINDOWS\system32\WinUSBCoInstaller.dll
2009-06-09 03:51:52 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2009-06-09 03:38:54 ----D---- C:\Program Files\AlexP
2009-06-03 13:50:05 ----D---- C:\Documents and Settings\Bite\Application Data\DivX
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-06-03 13:48:21 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-05-16 04:38:04 ----A---- C:\WINDOWS\system32\atimpc32.dll
2009-05-16 04:38:04 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2009-05-16 04:31:46 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2009-05-16 03:35:09 ----A---- C:\WINDOWS\system32\aticalrt.dll
2009-05-16 03:34:54 ----A---- C:\WINDOWS\system32\aticalcl.dll
2009-05-16 03:33:18 ----A---- C:\WINDOWS\system32\aticaldd.dll
2009-05-09 22:32:15 ----D---- C:\Documents and Settings\Bite\Application Data\CometNetwork
2009-05-09 22:31:36 ----D---- C:\Program Files\CometBird
2009-05-09 22:30:44 ----D---- C:\Documents and Settings\Bite\Application Data\TigerPlayer
2009-05-09 22:26:17 ----D---- C:\Program Files\MpcStar
2009-05-09 19:22:52 ----D---- C:\WINDOWS\nview
2009-05-09 19:22:52 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-05-09 19:22:27 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-05-09 13:51:24 ----D---- C:\Program Files\RivaTuner v2.23
2009-05-09 13:24:13 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-05-09 13:24:09 ----D---- C:\Program Files\DAEMON Tools Lite
2009-05-08 05:05:29 ----D---- C:\Program Files\iPod
2009-05-08 05:05:19 ----D---- C:\Program Files\iTunes
2009-05-08 05:05:19 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-07 18:41:09 ----D---- C:\Program Files\SystemRequirementsLab
2009-05-07 18:41:02 ----D---- C:\Documents and Settings\Bite\Application Data\SystemRequirementsLab
2009-05-05 21:33:29 ----A---- C:\WINDOWS\system32\atibtmon.exe
2009-05-01 23:02:28 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\DivX.dll
2009-05-01 20:52:13 ----D---- C:\Program Files\ma-config.com
2009-05-01 20:52:13 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrses.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2009-05-01 00:31:10 ----A---- C:\WINDOWS\system32\nwiz.exe
2009-05-01 00:31:10 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2009-05-01 00:31:08 ----A---- C:\WINDOWS\system32\nvappbar.exe
2009-05-01 00:31:08 ----A---- C:\WINDOWS\system32\keystone.exe
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvwimg.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvshell.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nview.dll
2009-05-01 00:31:00 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2009-05-01 00:30:58 ----A---- C:\WINDOWS\system32\nvcplui.exe
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrszht.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrstr.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsth.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssv.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssk.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsru.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrspt.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrspl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsno.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsko.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsja.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsit.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrshu.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrshe.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvwddi.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrses.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrseng.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsel.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsde.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsda.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrscs.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsar.dll
2009-05-01 00:30:38 ----A---- C:\WINDOWS\system32\nvwssr.dll
2009-05-01 00:30:36 ----A---- C:\WINDOWS\system32\nvwss.dll
2009-05-01 00:30:34 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2009-05-01 00:30:30 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2009-05-01 00:30:28 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmobls.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmccss.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2009-05-01 00:30:24 ----A---- C:\WINDOWS\system32\nvgames.dll
2009-05-01 00:30:22 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvdisps.dll
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvcolor.exe
2009-05-01 00:30:16 ----A---- C:\WINDOWS\system32\nvmctray.dll
2009-05-01 00:30:16 ----A---- C:\WINDOWS\system32\nvcpl.dll
2009-05-01 00:30:14 ----A---- C:\WINDOWS\system32\nvmccs.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2009-04-15 14:57:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-04-15 14:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-04-15 14:51:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-04-15 14:51:24 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-04-15 14:50:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-04-15 14:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

======List of files/folders modified in the last 3 months======

2009-07-11 19:06:07 ----RD---- C:\Program Files
2009-07-11 18:50:48 ----AD---- C:\WINDOWS\system32\drivers
2009-07-11 18:50:48 ----AD---- C:\WINDOWS
2009-07-11 18:50:32 ----AD---- C:\WINDOWS\system32
2009-07-11 18:36:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-11 18:25:26 ----D---- C:\WINDOWS\Prefetch
2009-07-11 18:23:07 ----D---- C:\WINDOWS\Temp
2009-07-11 18:06:26 ----D---- C:\Program Files\Mozilla Firefox
2009-07-11 15:28:18 ----SD---- C:\WINDOWS\Tasks
2009-07-11 15:28:10 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-07-11 15:28:05 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-11 04:06:49 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-10 14:15:56 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-10 00:45:33 ----D---- C:\WINDOWS\system32\FlashAX
2009-07-10 00:45:31 ----D---- C:\Program Files\CFWebAdvancedU
2009-07-10 00:43:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-07-10 00:16:31 ----D---- C:\Program Files\Windows Live Toolbar
2009-07-08 23:16:44 ----SHD---- C:\WINDOWS\Installer
2009-07-08 19:27:46 ----RSD---- C:\WINDOWS\assembly
2009-07-08 19:27:37 ----D---- C:\WINDOWS\WinSxS
2009-07-08 19:23:47 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-08 19:23:37 ----HD---- C:\WINDOWS\inf
2009-07-08 18:38:08 ----D---- C:\WINDOWS\system32\config
2009-07-08 18:27:31 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-06 22:52:41 ----D---- C:\WINDOWS\system32\fr-fr
2009-07-06 22:52:41 ----D---- C:\WINDOWS\Media
2009-07-06 22:52:40 ----D---- C:\WINDOWS\Help
2009-07-06 22:52:40 ----D---- C:\Program Files\Internet Explorer
2009-07-06 15:41:58 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-06 15:41:48 ----A---- C:\WINDOWS\imsins.BAK
2009-07-04 15:39:00 ----RASH---- C:\boot.ini
2009-07-04 15:39:00 ----A---- C:\WINDOWS\win.ini
2009-07-04 15:39:00 ----A---- C:\WINDOWS\system.ini
2009-06-28 17:39:58 ----D---- C:\WINDOWS\Debug
2009-06-24 17:04:15 ----D---- C:\Program Files\DivX
2009-06-18 15:30:55 ----D---- C:\WINDOWS\Minidump
2009-06-18 03:43:21 ----D---- C:\Downloads
2009-06-18 02:57:08 ----D---- C:\Casino
2009-06-18 02:55:53 ----D---- C:\Mp3 Player
2009-06-18 02:52:14 ----D---- C:\WINDOWS\twain_32
2009-06-18 02:51:40 ----D---- C:\Program Files\GIMP-2.0
2009-06-18 01:36:01 ----D---- C:\Program Files\Electronic Arts
2009-06-18 01:35:28 ----D---- C:\Program Files\Maxis
2009-06-17 18:13:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-12 18:09:40 ----D---- C:\Program Files\BitComet
2009-06-11 05:03:48 ----D---- C:\WINDOWS\ie7updates
2009-06-09 04:24:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-09 04:17:08 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-09 04:16:30 ----D---- C:\Program Files\CamStudio
2009-06-09 04:15:51 ----D---- C:\Program Files\Fichiers communs
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-19 09:04:04 ----D---- C:\WINDOWS\system32\FxsTmp
2009-05-16 05:38:15 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2009-05-16 05:18:08 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2009-05-16 05:17:50 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2009-05-16 05:17:37 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2009-05-16 05:17:27 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2009-05-16 05:17:13 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2009-05-16 05:15:52 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2009-05-16 05:14:24 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2009-05-16 05:07:31 ----A---- C:\WINDOWS\system32\ati3duag.dll
2009-05-16 04:55:29 ----A---- C:\WINDOWS\system32\atioglxx.dll
2009-05-16 04:54:21 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2009-05-16 04:51:01 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2009-05-16 04:33:48 ----A---- C:\WINDOWS\system32\atikvmag.dll
2009-05-16 04:31:28 ----A---- C:\WINDOWS\system32\atitvo32.dll
2009-05-16 04:26:43 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2009-05-16 04:24:43 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\wininet.dll
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-05-09 22:56:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-09 14:31:15 ----D---- C:\WINDOWS\Resources
2009-05-09 14:24:37 ----D---- C:\Documents and Settings\Bite\Application Data\DAEMON Tools Lite
2009-05-09 14:18:34 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-05-09 14:12:43 ----A---- C:\AUTOEXEC.BAT
2009-05-09 00:19:15 ----D---- C:\Documents and Settings\Bite\Application Data\Nokia Multimedia Player
2009-05-08 05:05:27 ----D---- C:\Program Files\Fichiers communs\Apple
2009-05-07 18:43:23 ----D---- C:\NVIDIA
2009-05-07 17:33:02 ----A---- C:\WINDOWS\system32\localspl.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\vxblock.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxwave.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxsfs.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxmas.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxinsa64.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxhpinst.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxdrv.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxcpya64.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\px.dll
2009-04-30 23:16:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-04-30 23:16:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-04-30 23:16:11 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-04-30 23:16:10 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-04-30 23:16:09 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuda.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcodins.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcod.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvapi.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2009-04-30 13:21:08 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2009-04-29 06:45:35 ----N---- C:\WINDOWS\system32\extmgr.dll
2009-04-20 14:38:06 ----D---- C:\Program Files\Windows Live Safety Center
2009-04-15 16:53:29 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2009-04-15 15:09:11 ----D---- C:\WINDOWS\system32\wbem
2009-04-15 15:09:11 ----D---- C:\WINDOWS\AppPatch
2009-04-15 14:51:56 ----AD---- C:\i386

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2003-06-13 25244]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2009-04-09 79232]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 int15.sys;int15.sys; \??\C:\Program Files\Acer\eRecovery\int15.sys []
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-06-29 1268204]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-05-16 4069888]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-03-19 23400]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-14 3134976]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-06-25 6144]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2009-04-09 58232]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2005-03-30 230400]
S3 AEXPAM;Philips SmartManage Service; C:\WINDOWS\System32\Drivers\aexpamdrv.sys [2004-09-01 21824]
S3 afq6h923;afq6h923; C:\WINDOWS\system32\drivers\afq6h923.sys []
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
S3 catchme;catchme; \??\C:\DOCUME~1\Bite\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
S3 DCamUSBIntel;Webcam; C:\WINDOWS\System32\Drivers\TP6800.sys []
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-06-14 25544]
S3 MSICPL;MSICPL; \??\G:\install4\MSICPL.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 NTACCESS;NTACCESS; \??\G:\NTACCESS.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.23\RivaTuner32.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\G:\NTGLM7X.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SNCT511;VideoCAM Trek; C:\WINDOWS\system32\DRIVERS\snct511.sys [2005-02-03 229376]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TIEHDUSB;TIEHDUSB; C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WinDriver6;WinDriver6; C:\WINDOWS\system32\drivers\windrvr6.sys [2008-07-03 193696]
S3 WinUSB;PS3Eye Camera; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\acer\Acer eConsole\MediaServerService.exe [2005-06-21 438272]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-05-16 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-05-15 593920]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-01 168004]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-04-21 216232]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WSearch;Recherche Windows; C:\WINDOWS\system32\SearchIndexer.exe [2007-02-05 300032]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]
S4 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S4 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]

-----------------EOF-----------------

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43F7497C-7687-4DEA-A057-F21BD81BC896}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43F7497C-7687-4DEA-A057-F21BD81BC896}\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\NoDNS deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nvcoi deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinTouch\ deleted successfully.
========== FILES ==========
C:\WINDOWS\system32\msjava32.dll unregistered successfully.
C:\WINDOWS\system32\msjava32.dll moved successfully.
File/Folder C:\Program Files\\NoDNS not found.
File/Folder C:\Program Files\nvcoi not found.
File/Folder C:\Documents and Settings\Bite\Application Data\WinTouch not found.
File/Folder C:\WINDOWS\nqku.txt not found.
C:\Program Files\DAEMON Tools Toolbar moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Bite
->Temp folder emptied: 318397 bytes
->Temporary Internet Files folder emptied: 149947763 bytes
->Java cache emptied: 15257649 bytes
->FireFox cache emptied: 84626987 bytes
->Google Chrome cache emptied: 423585 bytes
->Apple Safari cache emptied: 148797809 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 67356 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 309881683 bytes

User: PictureViewer.Resources

User: Plugins

User: PropertyPanels

User: Propriétaire

User: QTComponents

User: QTSystem

User: QuickTimePlayer.Resources

%systemdrive% .tmp files removed: 0 bytes
C:\WINDOWS\msdownld.tmp folder deleted successfully.
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 12554240 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_75c.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 33432 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 688,55 mb


OTM by OldTimer - Version 3.0.0.4 log created on 07122009_163819

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_75c.dat moved successfully.

Registry entries deleted on Reboot...

Pas plus que ça, si il'y a mieu ....

Avira AntiVir Personal
Date de création du fichier de rapport : dimanche 12 juillet 2009 20:21

La recherche porte sur 1515293 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série : 0000149996-ADJIE-0000001
Plateforme : Windows XP
Version de Windows : (Service Pack 3) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur : ACER-A38B4A0260

Informations de version :
BUILD.DAT : 9.0.0.65 17959 Bytes 22/04/2009 12:06:00
AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 12:20:54
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 16:13:31
ANTIVIR2.VDF : 7.1.4.198 778752 Bytes 08/07/2009 16:13:32
ANTIVIR3.VDF : 7.1.4.220 504320 Bytes 11/07/2009 16:13:32
Version du moteur : 8.2.0.204
AEVDF.DLL : 8.1.1.1 106868 Bytes 12/07/2009 16:13:36
AESCRIPT.DLL : 8.1.2.13 426362 Bytes 12/07/2009 16:13:36
AESCN.DLL : 8.1.2.3 127347 Bytes 12/07/2009 16:13:35
AERDL.DLL : 8.1.2.2 438642 Bytes 12/07/2009 16:13:35
AEPACK.DLL : 8.1.3.18 401783 Bytes 12/07/2009 16:13:35
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 12/07/2009 16:13:34
AEHEUR.DLL : 8.1.0.137 1823095 Bytes 12/07/2009 16:13:34
AEHELP.DLL : 8.1.3.6 205174 Bytes 12/07/2009 16:13:33
AEGEN.DLL : 8.1.1.48 348532 Bytes 12/07/2009 16:13:33
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
AECORE.DLL : 8.1.6.12 180599 Bytes 12/07/2009 16:13:33
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 17/02/2009 12:49:32
RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:, D:,
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen

Début de la recherche : dimanche 12 juillet 2009 20:21

La recherche d'objets cachés commence.
'79324' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CCC.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MOM.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'looknstop.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Res.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmiapsrv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmpnetwk.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MediaServerService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'33' processus ont été contrôlés avec '33' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD1
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD2
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD3
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD4
[INFO] Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !
Secteur d'amorçage 'D:\'
[INFO] Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '52' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\' <ACER>
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\Documents and Settings\Bite\Mes documents\Mes fichiers reçus\Sphinx Millenium 4.5 Cracké Fonctionne.rar
[0] Type d'archive: RAR
--> Fichiers\MacrosLexica.dot
[RESULTAT] Contient le code suspect : HEUR/Macro.Word95
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Cracké Fonctionne.rar
[0] Type d'archive: RAR
--> Fichiers\MacrosLexica.dot
[RESULTAT] Contient le code suspect : HEUR/Macro.Word95
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx\Fichiers\MacrosLexica.dot
[RESULTAT] Contient le code suspect : HEUR/Macro.Word95
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP774\A0235072.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP779\A0236393.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP788\A0237642.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP793\A0243202.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP796\A0243554.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP803\A0243876.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP807\A0244078.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP818\A0251902.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP820\A0252058.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP824\A0253064.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Downloader.NaviPromo.B.27
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP825\A0254166.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP826\A0254205.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP829\A0254477.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP829\A0254500.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP842\A0261854.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Agent.nlz
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP842\A0261930.exe
[RESULTAT] Contient le cheval de Troie TR/Trash.Gen
C:\WINDOWS\system32\Updatae22.exe
[0] Type d'archive: NSIS
--> CWINDOWS/system33/mirc.ini
[AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
[AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\WINDOWS\system32\WindowsUp.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
C:\WINDOWS\system32\WindowsUp_v4x.exe
[0] Type d'archive: NSIS
--> CWINDOWS/system32/WindowsUp.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
C:\WINDOWS\system32\WInfirewire3.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
C:\WINDOWS\system32\winfirewire333.exe
[0] Type d'archive: NSIS
--> CWINDOWS/system32/WInfirewire3.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
C:\WINDOWS\system32\drivers\sptd.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
Recherche débutant dans 'D:\' <ACERDATA>
D:\Musiques\lilrob akhenaton.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.WMA.Wima.AA
D:\Musiques\bandaleros keny arkana.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.WMA.Wima.AA
D:\Musiques\Trick Daddy - Gangsta feat Baby Scarface.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
D:\Musiques\Wesley Willis - Mr Scarface.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
D:\Musiques\Dr Dre - Murder Ink.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
D:\Musiques\Lil wayne tha carter III_sidonkey(canus_rg)\05 Comfortable (Featuring Babyface).mp3
[RESULTAT] Contient le modèle de détection de l'exploit EXP/ASF.GetCodec.Gen

Début de la désinfection :
C:\Documents and Settings\Bite\Mes documents\Mes fichiers reçus\Sphinx Millenium 4.5 Cracké Fonctionne.rar
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac24f23.qua' !
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx Millenium 4.5 Cracké Fonctionne.rar
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b41ad3c.qua' !
C:\Documents and Settings\Bite\Mes documents\stix19\Sphinx\Fichiers\MacrosLexica.dot
[RESULTAT] Contient le code suspect : HEUR/Macro.Word95
[REMARQUE] Le résultat positif a été classé comme suspect.
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4abd4f14.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP774\A0235072.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a8c4ee4.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP779\A0236393.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4941d325.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP788\A0237642.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4940db1d.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP793\A0243202.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4bf7ed3d.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP796\A0243554.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4bf38c1d.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP803\A0243876.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4bf0e545.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP807\A0244078.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4bf2f5d5.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP818\A0251902.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b0d9c6d.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP820\A0252058.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49445b45.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP824\A0253064.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Downloader.NaviPromo.B.27
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a8c4ee5.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP825\A0254166.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4943e3b6.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP826\A0254205.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b0e94b6.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP829\A0254477.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49cb351e.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP829\A0254500.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/AdSpy.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4942eb6e.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP842\A0261854.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Agent.nlz
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49c4cd26.qua' !
C:\System Volume Information\_restore{E27BA98E-2CFC-424E-BDA2-9BF88577901F}\RP842\A0261930.exe
[RESULTAT] Contient le cheval de Troie TR/Trash.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49c5c56e.qua' !
C:\WINDOWS\system32\WindowsUp.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac84f1e.qua' !
C:\WINDOWS\system32\WindowsUp_v4x.exe
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac84f1f.qua' !
C:\WINDOWS\system32\WInfirewire3.exe
[RESULTAT] Contient le cheval de Troie TR/PSW.ZFZ.35
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac84eff.qua' !
C:\WINDOWS\system32\winfirewire333.exe
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4985e588.qua' !
D:\Musiques\lilrob akhenaton.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.WMA.Wima.AA
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac64f1f.qua' !
D:\Musiques\bandaleros keny arkana.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.WMA.Wima.AA
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac84f17.qua' !
D:\Musiques\Trick Daddy - Gangsta feat Baby Scarface.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ac34f28.qua' !
D:\Musiques\Wesley Willis - Mr Scarface.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4acd4f1b.qua' !
D:\Musiques\Dr Dre - Murder Ink.wma
[RESULTAT] Contient le cheval de Troie TR/Dldr.Age.1171323
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a7a4f29.qua' !
D:\Musiques\Lil wayne tha carter III_sidonkey(canus_rg)\05 Comfortable (Featuring Babyface).mp3
[RESULTAT] Contient le modèle de détection de l'exploit EXP/ASF.GetCodec.Gen
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a7a4eec.qua' !


Fin de la recherche : dimanche 12 juillet 2009 22:59
Temps nécessaire: 1:47:12 Heure(s)

La recherche a été effectuée intégralement

13168 Les répertoires ont été contrôlés
731701 Des fichiers ont été contrôlés
26 Des virus ou programmes indésirables ont été trouvés
3 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
29 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
731670 Fichiers non infectés
11311 Les archives ont été contrôlées
4 Avertissements
30 Consignes
79324 Des objets ont été contrôlés lors du Rootkitscan
0 Des objets cachés ont été trouvés

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bite at 2009-07-13 12:23:22
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 26 GB (28%) free of 93 GB
Total RAM: 1535 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:23:42, on 13/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\UMStor\Res.EXE
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Bite\Bureau\RSIT.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\trend micro\Bite.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\WINDOWS\UMStor\Res.EXE
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\Bite\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user')
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5674 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-11-06 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask.com Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-02-26 809864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-13 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-13 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask.com Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-02-26 809864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ControlCenter3"=C:\Program Files\Brother\ControlCenter3\brctrcen.exe [2007-01-26 65536]
"USB Storage Toolbox"=C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]
"Look 'n' Stop"=C:\Program Files\Soft4Ever\looknstop\looknstop.exe [2009-04-09 557056]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-05-20 98304]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-13 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"MessengerPlusLiveUninstall"=C:\DOCUME~1\Bite\LOCALS~1\Temp\MsgPlusUninstall.exe [2008-08-09 901456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2009-04-29 3338240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Bite\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2007-01-29 46632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSN MultiConnect]
C:\Program Files\MSN Multiconnect\MSN Multiconnect.exe min []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bite^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.2.lnk]
C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE [2007-02-02 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"iPod Service"=3
"gusvc"=2
"avast! Web Scanner"=3
"avast! Mail Scanner"=3
"avast! Antivirus"=2
"Apple Mobile Device"=2
"aswUpdSv"=2
"Bonjour Service"=2
"SharedAccess"=2
"Fax"=2
"CiSvc"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-05-16 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000
"NoDriveAutoRun"=4294967295
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=
"AllowUnhashedWebView"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 3 months======

2009-07-13 12:21:09 ----A---- C:\WINDOWS\system32\javaws.exe
2009-07-13 12:21:09 ----A---- C:\WINDOWS\system32\javaw.exe
2009-07-13 12:21:09 ----A---- C:\WINDOWS\system32\java.exe
2009-07-12 23:27:36 ----D---- C:\Program Files\Ask.com
2009-07-12 18:10:57 ----D---- C:\Program Files\Avira
2009-07-12 18:10:57 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-07-12 16:38:19 ----D---- C:\_OTM
2009-07-11 18:25:13 ----D---- C:\Program Files\trend micro
2009-07-11 16:24:43 ----D---- C:\Program Files\Ad-remover
2009-07-11 03:15:54 ----A---- C:\cleannavi.txt
2009-07-10 14:24:00 ----A---- C:\lopR.txt
2009-07-10 14:23:17 ----D---- C:\Lop SD
2009-07-10 01:02:06 ----D---- C:\Program Files\NOS
2009-07-10 01:02:06 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-07-10 00:52:57 ----D---- C:\rsit
2009-07-10 00:38:28 ----D---- C:\Program Files\SpywareBlaster
2009-07-08 19:32:31 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2009-07-08 19:22:45 ----D---- C:\ATI
2009-07-08 18:44:43 ----A---- C:\WINDOWS\system32\XceedZip.dll
2009-07-08 18:44:39 ----D---- C:\Program Files\Driver-Soft
2009-07-08 18:38:06 ----D---- C:\Documents and Settings\Bite\Application Data\ATI
2009-07-08 18:24:47 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-07-08 18:24:43 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2009-07-08 18:24:12 ----D---- C:\Program Files\ATI Technologies
2009-07-06 15:41:29 ----D---- C:\WINDOWS\ie8updates
2009-07-06 15:39:23 ----HDC---- C:\WINDOWS\ie8
2009-06-25 14:31:58 ----D---- C:\Documents and Settings\Bite\Application Data\ScanSoft
2009-06-18 15:20:30 ----D---- C:\Program Files\ATITool
2009-06-18 01:47:54 ----D---- C:\Program Files\Microsoft WSE
2009-06-17 18:03:49 ----D---- C:\Program Files\CPUID
2009-06-11 05:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 05:07:20 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 05:04:11 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 05:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-09 03:56:47 ----HDC---- C:\WINDOWS\$NtUninstallwinusb0100$
2009-06-09 03:55:25 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2009-06-09 03:55:22 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2009-06-09 03:51:52 ----A---- C:\WINDOWS\system32\WinUSBCoInstaller.dll
2009-06-09 03:51:52 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2009-06-09 03:38:54 ----D---- C:\Program Files\AlexP
2009-06-03 13:50:05 ----D---- C:\Documents and Settings\Bite\Application Data\DivX
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2009-06-03 13:48:49 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-06-03 13:48:21 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-05-16 04:38:04 ----A---- C:\WINDOWS\system32\atimpc32.dll
2009-05-16 04:38:04 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2009-05-16 04:31:46 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2009-05-16 03:35:09 ----A---- C:\WINDOWS\system32\aticalrt.dll
2009-05-16 03:34:54 ----A---- C:\WINDOWS\system32\aticalcl.dll
2009-05-16 03:33:18 ----A---- C:\WINDOWS\system32\aticaldd.dll
2009-05-09 22:32:15 ----D---- C:\Documents and Settings\Bite\Application Data\CometNetwork
2009-05-09 22:31:36 ----D---- C:\Program Files\CometBird
2009-05-09 22:30:44 ----D---- C:\Documents and Settings\Bite\Application Data\TigerPlayer
2009-05-09 22:26:17 ----D---- C:\Program Files\MpcStar
2009-05-09 19:22:52 ----D---- C:\WINDOWS\nview
2009-05-09 19:22:52 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-05-09 19:22:27 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-05-09 13:51:24 ----D---- C:\Program Files\RivaTuner v2.23
2009-05-09 13:24:09 ----D---- C:\Program Files\DAEMON Tools Lite
2009-05-08 05:05:29 ----D---- C:\Program Files\iPod
2009-05-08 05:05:19 ----D---- C:\Program Files\iTunes
2009-05-08 05:05:19 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-07 18:41:09 ----D---- C:\Program Files\SystemRequirementsLab
2009-05-07 18:41:02 ----D---- C:\Documents and Settings\Bite\Application Data\SystemRequirementsLab
2009-05-05 21:33:29 ----A---- C:\WINDOWS\system32\atibtmon.exe
2009-05-01 23:02:28 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\DivX.dll
2009-05-01 20:52:13 ----D---- C:\Program Files\ma-config.com
2009-05-01 20:52:13 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2009-05-01 00:31:18 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2009-05-01 00:31:16 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2009-05-01 00:31:14 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrses.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2009-05-01 00:31:12 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2009-05-01 00:31:10 ----A---- C:\WINDOWS\system32\nwiz.exe
2009-05-01 00:31:10 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2009-05-01 00:31:08 ----A---- C:\WINDOWS\system32\nvappbar.exe
2009-05-01 00:31:08 ----A---- C:\WINDOWS\system32\keystone.exe
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvwimg.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nvshell.dll
2009-05-01 00:31:06 ----A---- C:\WINDOWS\system32\nview.dll
2009-05-01 00:31:00 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2009-05-01 00:30:58 ----A---- C:\WINDOWS\system32\nvcplui.exe
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrszht.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrstr.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsth.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssv.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrssk.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsru.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrspt.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrspl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsno.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsko.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsja.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrsit.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrshu.dll
2009-05-01 00:30:50 ----A---- C:\WINDOWS\system32\nvrshe.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvwddi.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrses.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrseng.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsel.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsde.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsda.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrscs.dll
2009-05-01 00:30:48 ----A---- C:\WINDOWS\system32\nvrsar.dll
2009-05-01 00:30:38 ----A---- C:\WINDOWS\system32\nvwssr.dll
2009-05-01 00:30:36 ----A---- C:\WINDOWS\system32\nvwss.dll
2009-05-01 00:30:34 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2009-05-01 00:30:30 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2009-05-01 00:30:28 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmobls.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvmccss.dll
2009-05-01 00:30:26 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2009-05-01 00:30:24 ----A---- C:\WINDOWS\system32\nvgames.dll
2009-05-01 00:30:22 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvdisps.dll
2009-05-01 00:30:18 ----A---- C:\WINDOWS\system32\nvcolor.exe
2009-05-01 00:30:16 ----A---- C:\WINDOWS\system32\nvmctray.dll
2009-05-01 00:30:16 ----A---- C:\WINDOWS\system32\nvcpl.dll
2009-05-01 00:30:14 ----A---- C:\WINDOWS\system32\nvmccs.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2009-04-15 14:57:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-04-15 14:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-04-15 14:51:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-04-15 14:51:24 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-04-15 14:50:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-04-15 14:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

======List of files/folders modified in the last 3 months======

2009-07-13 12:23:28 ----D---- C:\WINDOWS\Prefetch
2009-07-13 12:22:59 ----SHD---- C:\WINDOWS\Installer
2009-07-13 12:22:38 ----AD---- C:\WINDOWS\system32
2009-07-13 12:21:10 ----D---- C:\WINDOWS\Temp
2009-07-13 12:20:51 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-07-13 12:17:33 ----D---- C:\Program Files\Messenger Plus! Live
2009-07-13 12:17:16 ----RD---- C:\Program Files
2009-07-13 12:16:20 ----D---- C:\Program Files\Java
2009-07-13 12:16:20 ----D---- C:\Program Files\Fichiers communs
2009-07-13 12:05:00 ----D---- C:\Program Files\Mozilla Firefox
2009-07-13 11:59:55 ----SD---- C:\WINDOWS\Tasks
2009-07-13 11:59:53 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-13 04:42:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-13 04:00:00 ----D---- C:\Documents and Settings\Bite\Application Data\Camfrog
2009-07-13 00:26:33 ----A---- C:\WINDOWS\win.ini
2009-07-12 20:05:17 ----AD---- C:\WINDOWS
2009-07-12 18:11:06 ----AD---- C:\WINDOWS\system32\drivers
2009-07-12 18:11:05 ----HD---- C:\WINDOWS\inf
2009-07-12 18:09:51 ----D---- C:\WINDOWS\WinSxS
2009-07-12 16:29:15 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-07-11 18:36:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-10 14:15:56 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-10 00:45:33 ----D---- C:\WINDOWS\system32\FlashAX
2009-07-10 00:45:31 ----D---- C:\Program Files\CFWebAdvancedU
2009-07-10 00:43:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-07-10 00:16:31 ----D---- C:\Program Files\Windows Live Toolbar
2009-07-08 19:27:46 ----RSD---- C:\WINDOWS\assembly
2009-07-08 19:23:47 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-08 18:38:08 ----D---- C:\WINDOWS\system32\config
2009-07-08 18:27:31 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-06 22:52:41 ----D---- C:\WINDOWS\system32\fr-fr
2009-07-06 22:52:41 ----D---- C:\WINDOWS\Media
2009-07-06 22:52:40 ----D---- C:\WINDOWS\Help
2009-07-06 22:52:40 ----D---- C:\Program Files\Internet Explorer
2009-07-06 15:41:58 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-06 15:41:48 ----A---- C:\WINDOWS\imsins.BAK
2009-07-04 15:39:00 ----RASH---- C:\boot.ini
2009-07-04 15:39:00 ----A---- C:\WINDOWS\system.ini
2009-06-28 17:39:58 ----D---- C:\WINDOWS\Debug
2009-06-24 17:04:15 ----D---- C:\Program Files\DivX
2009-06-18 15:30:55 ----D---- C:\WINDOWS\Minidump
2009-06-18 03:43:21 ----D---- C:\Downloads
2009-06-18 02:57:08 ----D---- C:\Casino
2009-06-18 02:55:53 ----D---- C:\Mp3 Player
2009-06-18 02:52:14 ----D---- C:\WINDOWS\twain_32
2009-06-18 02:51:40 ----D---- C:\Program Files\GIMP-2.0
2009-06-18 01:36:01 ----D---- C:\Program Files\Electronic Arts
2009-06-18 01:35:28 ----D---- C:\Program Files\Maxis
2009-06-17 18:13:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-12 18:09:40 ----D---- C:\Program Files\BitComet
2009-06-11 05:03:48 ----D---- C:\WINDOWS\ie7updates
2009-06-09 04:24:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-09 04:17:08 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-09 04:16:30 ----D---- C:\Program Files\CamStudio
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-19 09:04:04 ----D---- C:\WINDOWS\system32\FxsTmp
2009-05-16 05:38:15 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2009-05-16 05:18:08 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2009-05-16 05:17:50 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2009-05-16 05:17:37 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2009-05-16 05:17:27 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2009-05-16 05:17:13 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2009-05-16 05:15:52 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2009-05-16 05:14:24 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2009-05-16 05:07:31 ----A---- C:\WINDOWS\system32\ati3duag.dll
2009-05-16 04:55:29 ----A---- C:\WINDOWS\system32\atioglxx.dll
2009-05-16 04:54:21 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2009-05-16 04:51:01 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2009-05-16 04:33:48 ----A---- C:\WINDOWS\system32\atikvmag.dll
2009-05-16 04:31:28 ----A---- C:\WINDOWS\system32\atitvo32.dll
2009-05-16 04:26:43 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2009-05-16 04:24:43 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\wininet.dll
2009-05-13 07:04:17 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-05-09 22:56:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-09 14:31:15 ----D---- C:\WINDOWS\Resources
2009-05-09 14:24:37 ----D---- C:\Documents and Settings\Bite\Application Data\DAEMON Tools Lite
2009-05-09 14:18:34 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-05-09 14:12:43 ----A---- C:\AUTOEXEC.BAT
2009-05-09 00:19:15 ----D---- C:\Documents and Settings\Bite\Application Data\Nokia Multimedia Player
2009-05-08 05:05:27 ----D---- C:\Program Files\Fichiers communs\Apple
2009-05-07 18:43:23 ----D---- C:\NVIDIA
2009-05-07 17:33:02 ----A---- C:\WINDOWS\system32\localspl.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\vxblock.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxwave.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxsfs.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxmas.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxinsa64.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxhpinst.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxdrv.dll
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\pxcpya64.exe
2009-05-01 23:03:38 ----C---- C:\WINDOWS\system32\px.dll
2009-04-30 23:16:17 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-04-30 23:16:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-04-30 23:16:11 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-04-30 23:16:10 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-04-30 23:16:09 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcuda.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcodins.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvcod.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nvapi.dll
2009-04-30 22:02:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2009-04-30 13:21:08 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2009-04-29 06:45:35 ----N---- C:\WINDOWS\system32\extmgr.dll
2009-04-20 14:38:06 ----D---- C:\Program Files\Windows Live Safety Center
2009-04-15 16:53:29 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2009-04-15 15:09:11 ----D---- C:\WINDOWS\system32\wbem
2009-04-15 15:09:11 ----D---- C:\WINDOWS\AppPatch
2009-04-15 14:51:56 ----AD---- C:\i386

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2003-06-13 25244]
R1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [2009-04-09 79232]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 int15.sys;int15.sys; \??\C:\Program Files\Acer\eRecovery\int15.sys []
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-06-29 1268204]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-05-16 4069888]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-03-19 23400]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-14 3134976]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-06-25 6144]
R3 SFilter;Look 'n' Stop Driver; C:\WINDOWS\system32\DRIVERS\lnsfw.sys [2009-04-09 58232]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2005-03-30 230400]
S3 AEXPAM;Philips SmartManage Service; C:\WINDOWS\System32\Drivers\aexpamdrv.sys [2004-09-01 21824]
S3 ayeiefd2;ayeiefd2; C:\WINDOWS\system32\drivers\ayeiefd2.sys []
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
S3 catchme;catchme; \??\C:\DOCUME~1\Bite\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
S3 DCamUSBIntel;Webcam; C:\WINDOWS\System32\Drivers\TP6800.sys []
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-06-14 25544]
S3 MSICPL;MSICPL; \??\G:\install4\MSICPL.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 NTACCESS;NTACCESS; \??\G:\NTACCESS.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.23\RivaTuner32.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\G:\NTGLM7X.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SNCT511;VideoCAM Trek; C:\WINDOWS\system32\DRIVERS\snct511.sys [2005-02-03 229376]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TIEHDUSB;TIEHDUSB; C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WinDriver6;WinDriver6; C:\WINDOWS\system32\drivers\windrvr6.sys [2008-07-03 193696]
S3 WinUSB;PS3Eye Camera; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer Media Server;Acer Media Server; C:\Program Files\acer\Acer eConsole\MediaServerService.exe [2005-06-21 438272]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-05-16 602112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-13 152984]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-05-15 593920]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-01 168004]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-04-21 216232]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WSearch;Recherche Windows; C:\WINDOWS\system32\SearchIndexer.exe [2007-02-05 300032]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]
S4 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S4 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]

-----------------EOF-----------------

J'ai décoché la barre Ask.com lors de l'installation, mais quand j'ai ouvert firefox je l'avais quand même.

Oui c'est bon c'est désinstallé.

Oui ça va beaucoup mieux, merci pour tout !!

J'ai un probleme toolscleaner bloque, j'ai réessayé sans le pare-feu, et ça donne pareil.

Merci encore !