( Résolu) Besoin de nettoyer mon ordinateur

Bonjours cela fait quelque jour mais Mon ordinateur commence a avoir quelque bug dont celui d'ouvrir des fenêtres internet intempestive et j'aimerai procéder a un nettoyage complet pour amélioré la vitesse et aussi rendre mes période d'utilisation de mon ordinateur plus agréable et j'aimerai avoir de l'aide.

Merci de vos conseil et aide.

Je vien de terminer le scan et voici le rapport de Malwarebyties

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1687
Windows 6.0.6001 Service Pack 1

2009-07-30 13:47:04
mbam-log-2009-07-30 (13-47-04).txt

Type de recherche: Examen complet (C:\|E:\|)
Eléments examinés: 227686
Temps écoulé: 1 hour(s), 57 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

voici les deux rapport

05 2009-01-24 09:19:08

======Uninstall list======

-->"C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\CTCMSGO\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_CDBURNER_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE" /S /U /W /L:FRN
-->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Windows\NuNInst.exe /UNINSTALL
-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL
-->MsiExec /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AB55EC6-1158-41EF-B87D-90555A8F5C92}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AB55EC6-1158-41EF-B87D-90555A8F5C92}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A68AACBA-C3AF-467B-978C-E05C31650CF6}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C88C3C27-AECE-4137-A6CC-D7A6FFAD2F84}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C88C3C27-AECE-4137-A6CC-D7A6FFAD2F84}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c /remove
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}
Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Attansic L1 Gigabit Ethernet Driver-->rundll32.exe C:\Windows\system32\Attansic\L1\atcInst.dll,VisUninst C:\Windows\system32\Attansic\L1 x86 pci\ven_1969&dev_1048
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Call of Duty(R) - World at War(TM) 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{AFAE2B15-89A0-4215-A030-F7B5B478886B}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) - World at War(TM)-->C:\Program Files\InstallShield Installation Information\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\setup.exe -runfromtemp -l0x040c
Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch-->C:\Program Files\InstallShield Installation Information\{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch-->C:\Program Files\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch-->C:\Program Files\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Command & Conquer Red Alert 3 Demo-->"C:\Program Files\Steam\steam.exe" steam://uninstall/24710
Creative ALchemy (Edition X-Fi)-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A68AACBA-C3AF-467B-978C-E05C31650CF6}\setup.exe" -l0x40c /remove
Creative Audio Console-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c /remove
Creative MediaSource 5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\SETUP.EXE" -l0x40c /remove
Creative Software AutoUpdate-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x40c /remove
Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
Dark Messiah -->C:\Program Files\InstallShield Installation Information\{A8E2EF8F-73EF-4DD8-BB38-31FCCAF50103}\setup.exe -runfromtemp -l0x040c -removeonly
Dev-C++ 5 beta 9 release (4.9.9.2)-->"C:\Dev-Cpp\uninstall.exe"
Download Manager 2.3.6-->C:\Program Files\Download Manager\uninst.exe
DVD Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
ESET NOD32 Antivirus-->MsiExec.exe /I{944F0F77-F26F-4D17-A440-6DA4CBE05B71}
Far Cry 2-->"C:\Program Files\InstallShield Installation Information\{F2835483-37F2-4123-B4FE-0E77D58447F2}\setup.exe" -runfromtemp -l0x0c0c -removeonly
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
GUILD WARS-->"C:\Program Files\GUILD WARS\Gw.exe" -uninstall
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
Hauppauge French Help Files and Resources-->C:\PROGRA~1\WinTV\UNHLPfra.EXE C:\PROGRA~1\WinTV\WTV2Kfra.LOG
Hauppauge WinTV Infrared Remote-->C:\PROGRA~1\WinTV\UNir32.EXE C:\PROGRA~1\WinTV\ir32.LOG
Hauppauge WinTV IR Blaster-->C:\PROGRA~1\WinTV\UNirblst.EXE C:\PROGRA~1\WinTV\IRblast.LOG
Hauppauge WinTV Scheduler-->C:\PROGRA~1\WinTV\SCHEDU~1\UniSched.EXE C:\PROGRA~1\WinTV\SCHEDU~1\INSTALL.LOG
Hauppauge WinTV Soft PVR-->C:\PROGRA~1\WinTV\UNSftPVR.EXE C:\PROGRA~1\WinTV\softpvr.LOG
Hauppauge WinTV Source Selector-->C:\PROGRA~1\WinTV\UNtvsel.EXE C:\PROGRA~1\WinTV\WINTVsel.LOG
Hauppauge WinTV2000-->C:\PROGRA~1\WinTV\UNTV32.EXE C:\PROGRA~1\WinTV\WINTV2K.LOG
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMB36X Raid Configurer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech GamePanel Software 2.00-->MsiExec.exe /X{948BE614-F37B-4A73-AD43-0245F23C110D}
Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Express Edition - FRA-->MsiExec.exe /X{15473D70-D791-3B5E-B174-2FD19EC0D017}
Microsoft Visual C++ 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition - FRA\setup.exe
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D}
MobileMe Control Panel-->MsiExec.exe /I{2604C0F9-BFD3-4BA0-9EB5-22537C648F03}
Module linguistique Microsoft .NET Framework 3.5 - fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
Mount and Blade Demo-->"C:\Program Files\Steam\steam.exe" steam://uninstall/22110
Mozilla Firefox (3.0.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSDN Library pour les éditions Microsoft Visual Studio 2008 Express-->C:\Program Files\Microsoft Visual Studio 9.0\MSDN Library for Microsoft Visual Studio 2008 Express Editions\install.exe
MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
nanoPEG-Editor 2.3 Hauppauge Edition-->"C:\Program Files\nanocosmos\MPEG-Tools for Hauppauge\Editor2\unins000.exe"
Nero 7 Essentials-->MsiExec.exe /X{8046A32C-88A7-45DA-B6D7-B6191E261033}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Norton Internet Security (Symantec Corporation)-->"C:\Program Files\Common Files\Symantec Shared\SymSetup\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_2_0_30\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe" /X
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
NVIDIA PhysX v8.09.04-->MsiExec.exe /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
Online Manuals for WinTV (French)-->C:\PROGRA~1\WinTV\UNTVmans.exe C:\PROGRA~1\WinTV\WinTVMan.LOG
OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Overlord-->C:\Program Files\InstallShield Installation Information\{259A8A5E-2886-4BED-9EF1-D5485282CCC3}\Setup.exe -runfromtemp -l0x040c -removeonly
PhoChron YBpublish-->"C:\Program Files\PhoChron\YBpublish\Uninstall.exe" "C:\Program Files\PhoChron\YBpublish\install.log" -u
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
Prince of Persia-->"C:\Program Files\InstallShield Installation Information\{7C11154F-3539-4CB5-979D-EF7913473E53}\setup.exe" -runfromtemp -l0x040c -removeonly
Programme de gestion Camera de Logitech®-->"C:\Program Files\Common Files\LogiShrd\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0xc0c -removeonly
Rise of the Argonauts-->"C:\Program Files\InstallShield Installation Information\{EC7EBCD9-0CB4-472B-BC64-364CDC3CAC4C}\setup.exe" -runfromtemp -l0x040c -removeonly
Rise of the Argonauts-->MsiExec.exe /X{EC7EBCD9-0CB4-472B-BC64-364CDC3CAC4C}
Safari-->MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Sins of a Solar Empire Demo-->"C:\ProgramData\{5553977E-AF8B-4870-AEB6-53B6C1BC822D}\Sins_of_a_Solar_Empire_setup.exe" REMOVE=TRUE MODIFY=FALSE
Sins of a Solar Empire Demo-->C:\ProgramData\{5553977E-AF8B-4870-AEB6-53B6C1BC822D}\Sins_of_a_Solar_Empire_setup.exe
Sound Blaster X-Fi-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0C9D0200-FA32-44B7-BBB3-7C03F700C4A0}\SETUP.EXE" -l0x40c /remove
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
The Witcher-->"C:\Program Files\InstallShield Installation Information\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}\setup.exe" -runfromtemp -l0x0c0c -removeonly
Update for Microsoft Office Excel 2007 Help (KB957242)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {49E314EE-81FA-4007-8F1A-8D39BDBB4498}
Update for Office 2007 (KB946691)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
VC Runtimes MSI-->MsiExec.exe /X{FF29527A-44CD-3422-945E-981A13584000}
ViewSonic Monitor Drivers-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B4FEA924-630D-11D4-B78E-005004566E4D}\Setup.exe" -l0x9
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"

======Security center information======

AV: ESET NOD32 Antivirus 3.0
AV: Norton Internet Security
FW: Norton Internet Security
AS: ESET NOD32 Antivirus 3.0
AS: Spybot - Search and Destroy (outdated)
AS: Windows Defender
AS: Norton Internet Security

System event log

Computer Name: PC-de-Vince
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 112473
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090124140838.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 112474
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090124141045.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 112475
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090124141252.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 112476
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090124141459.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 112477
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090124141706.000000-000
Event Type: Information
User:

Application event log

Computer Name: PC-de-Vince
Event Code: 0
Message:
Record Number: 23919
Source Name: iPod Service
Time Written: 20090124135801.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés. Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système et les dernières entrées du registre d'aide.
Record Number: 23920
Source Name: Microsoft-Windows-LoadPerf
Time Written: 20090124140220.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés. Les données d'enregistrement dans la section des données contiennent les nouvelles valeurs d'index assignées à ce service.
Record Number: 23921
Source Name: Microsoft-Windows-LoadPerf
Time Written: 20090124140221.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1005
Message: Les données du Programme d’amélioration de l’expérience utilisateur Windows ont été regroupées dans des fichiers qui seront envoyés à Microsoft pour analyse. Ces fichiers ne sont envoyés que si l’utilisateur joint le Programme d’amélioration de l’expérience utilisateur Windows.
Record Number: 23922
Source Name: Microsoft-Windows-CEIP
Time Written: 20090124140558.000000-000
Event Type: Information
User:

Computer Name: PC-de-Vince
Event Code: 1007
Message: Les données du Programme d’amélioration des services ont été correctement envoyées à Microsoft.
Record Number: 23923
Source Name: Microsoft-Windows-CEIP
Time Written: 20090124141237.000000-000
Event Type: Information
User:

Security event log

Computer Name: PC-de-Vince
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-19
Nom du compte : SERVICE LOCAL
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e5

Privilèges : SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeImpersonatePrivilege
Record Number: 20620
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081207072645.884549-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Vince
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-VINCE$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x294
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 20621
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081207072645.931350-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Vince
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-VINCE$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Type d’ouverture de session : 5

Nouvelle ouverture de session :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x294
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Nom de la station de travail :
Adresse du réseau source : -
Port source : -

Informations détaillées sur l’authentification :
Processus d’ouverture de session : Advapi
Package d’authentification : Negotiate
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 20622
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081207072645.931350-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Vince
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7

Privilèges : SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 20623
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081207072645.931350-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-Vince
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-VINCE$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x294
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 20624
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20081207072645.978150-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=1707
"NUMBER_OF_PROCESSORS"=4
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"VS90COMNTOOLS"=C:\Program Files\Microsoft Visual Studio 9.0\Common7\Tools\
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------



et voici le deuxième


Logfile of random's system information tool 1.05 (written by random/random)
Run by V!nce at 2009-01-24 09:19:04
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 103 GB (34%) free of 305 GB
Total RAM: 3326 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:19:06, on 2009-01-24
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Program Files\Common Files\logishrd\LComMgr\LVComSX.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\V!nce\Program Files\DNA\btdna.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Xfire\xfire.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Safari\Safari.exe
C:\Users\V!nce\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\V!nce.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jeuxvideo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\V!nce\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; .NET CLR 1.1.4322; .NET CLR 3.5.21022; Creative AutoUpdate v1.10.10)" -"http://www.nikkisplaymates.com/webcams.php"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ [...] .6.108.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareup [...] /CTPID.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative ALchemy AL1 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 13054 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{DED683EA-7B11-46D4-B24E-CCD710DFADD6}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-01-28 1554256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-09 251504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-09 657904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-01-09 522224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-01-09 251504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-20 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-23 4423680]
"Skytel"=C:\Windows\Skytel.exe [2007-03-16 1822720]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-01-09 115816]
"VolPanel"=C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2007-02-28 180224]
"SPIRunE"=Rundll32 SPIRunE.dll []
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"SecurDisc"=C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe [2007-05-15 1628208]
"InCD"=C:\Program Files\Nero\Nero 7\InCD\InCD.exe [2007-05-15 1057328]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2008-02-29 76304]
"Launch LCDMon"=C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2007-07-17 1687824]
"Launch LGDCore"=C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [2007-07-17 2094352]
"LVCOMSX"=C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe [2007-02-06 252704]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-10-01 111936]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2008-02-20 1443072]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-07-07 167936]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-17 13580832]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-17 92704]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-20 1233920]
"WindowsWelcomeCenter"=C:\Windows\system32\oobefldr.dll [2008-01-20 2153472]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2008-12-02 3882312]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-06-27 68856]
"igndlm.exe"=C:\Program Files\Download Manager\DLM.exe [2007-03-05 1103480]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-01-28 2097488]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856]
"BitTorrent DNA"=C:\Users\V!nce\Program Files\DNA\btdna.exe [2008-12-19 342848]
"Steam"=c:\program files\steam\steam.exe [2008-11-20 1410296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Shockwave Updater"=C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE [2008-08-06 447928]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AutoStart IR.lnk - C:\Program Files\WinTV\Ir.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
Xfire.lnk - C:\Program Files\Xfire\xfire.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - E:\Launcher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1640152b-434c-11dd-9fde-806e6f6e6963}]
shell\AutoRun\command - D:\setup\rsrc\Autorun.exe
shell\dinstall\command - D:\Directx\dxsetup.exe


======List of files/folders created in the last 1 months======

2009-01-24 09:19:04 ----D---- C:\rsit
2009-01-23 23:38:21 ----D---- C:\Users\V!nce\AppData\Roaming\Mount&Blade
2009-01-23 22:09:31 ----D---- C:\Users\V!nce\AppData\Roaming\Malwarebytes
2009-01-23 22:09:26 ----D---- C:\ProgramData\Malwarebytes
2009-01-23 22:09:26 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-01-23 21:29:12 ----D---- C:\_OTMoveIt
2009-01-23 20:23:14 ----D---- C:\Program Files\Trend Micro
2009-01-23 19:37:51 ----D---- C:\Program Files\Microsoft
2009-01-23 19:37:01 ----D---- C:\Program Files\Windows Live SkyDrive
2009-01-23 19:32:49 ----D---- C:\Program Files\Common Files\Windows Live
2009-01-23 17:39:34 ----D---- C:\Users\V!nce\AppData\Roaming\Red Alert 3 Demo
2009-01-21 16:37:11 ----HD---- C:\ProgramData\{5553977E-AF8B-4870-AEB6-53B6C1BC822D}
2009-01-21 16:34:45 ----D---- C:\Program Files\Stardock Games
2009-01-15 03:37:02 ----A---- C:\Windows\system32\xfcodec.dll
2009-01-03 16:46:38 ----D---- C:\Windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2008-12-30 12:36:29 ----A---- C:\Windows\system32\hcwsnbd9.dll
2008-12-30 12:36:29 ----A---- C:\Windows\system32\Hcwchan.dll
2008-12-27 15:26:01 ----A---- C:\Windows\system32\XAudio2_2.dll
2008-12-27 15:26:01 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2008-12-27 15:26:00 ----A---- C:\Windows\system32\xactengine3_2.dll
2008-12-27 15:26:00 ----A---- C:\Windows\system32\d3dx10_39.dll
2008-12-27 15:26:00 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2008-12-27 15:25:59 ----A---- C:\Windows\system32\D3DX9_39.dll
2008-12-27 09:05:48 ----AD---- C:\ProgramData\TEMP
2008-12-27 09:05:48 ----A---- C:\Windows\system32\wpcap.dll
2008-12-27 09:05:48 ----A---- C:\Windows\system32\packet.dll
2008-12-26 15:41:49 ----D---- C:\Program Files\nanocosmos
2008-12-26 15:41:49 ----A---- C:\Windows\nanoPEG.ini
2008-12-26 15:41:37 ----A---- C:\Windows\system32\msxml.dll
2008-12-26 15:41:37 ----A---- C:\Windows\system32\hcwzblast.dll
2008-12-26 15:41:37 ----A---- C:\Windows\system32\hcwIRblast.dll
2008-12-26 15:41:37 ----A---- C:\Windows\HCWBlast_sav.ini
2008-12-26 15:41:37 ----A---- C:\Windows\HCWBlast.ini
2008-12-26 15:41:27 ----A---- C:\Windows\Irremote.ini
2008-12-26 15:41:22 ----A---- C:\Windows\system32\hcwsched.dll
2008-12-26 15:41:22 ----A---- C:\Windows\system32\dmcrypto.dll
2008-12-26 15:40:43 ----D---- C:\Windows\system32\hauppauge
2008-12-26 15:40:36 ----D---- C:\MyVideos
2008-12-26 15:40:36 ----A---- C:\Windows\system32\HCWTVWND.dll
2008-12-26 15:40:36 ----A---- C:\Windows\system32\hcwi2c32.dll
2008-12-26 15:40:31 ----A---- C:\Windows\system32\bt848wst.dll
2008-12-26 15:40:30 ----A---- C:\Windows\system32\Hcwtvdlg.dll
2008-12-26 15:40:24 ----A---- C:\Windows\system32\hcwpnp32.dll
2008-12-26 15:40:24 ----A---- C:\Windows\system32\hcwhook.dll
2008-12-26 15:40:24 ----A---- C:\Windows\system32\btgpio32.dll
2008-12-26 15:40:22 ----D---- C:\Program Files\WinTV
2008-12-26 15:39:31 ----A---- C:\Windows\HCWPNP.INI

======List of files/folders modified in the last 1 months======

2009-01-24 09:19:06 ----D---- C:\Windows\Temp
2009-01-24 09:17:27 ----D---- C:\Users\V!nce\AppData\Roaming\DNA
2009-01-24 09:02:21 ----D---- C:\Windows\System32
2009-01-24 09:02:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-01-24 09:02:20 ----D---- C:\Windows\inf
2009-01-24 08:58:05 ----D---- C:\Program Files\Steam
2009-01-24 00:31:14 ----D---- C:\Users\V!nce\AppData\Roaming\BitTorrent
2009-01-23 22:43:53 ----D---- C:\ProgramData\Google Updater
2009-01-23 22:17:08 ----RD---- C:\Program Files
2009-01-23 22:17:08 ----D---- C:\Windows\system32\drivers
2009-01-23 22:17:08 ----D---- C:\Windows
2009-01-23 22:09:26 ----HD---- C:\ProgramData
2009-01-23 21:41:56 ----D---- C:\ProgramData\Xfire
2009-01-23 19:38:18 ----SHD---- C:\Windows\Installer
2009-01-23 19:38:18 ----SHD---- C:\Config.Msi
2009-01-23 19:37:44 ----D---- C:\Windows\system32\catroot
2009-01-23 19:37:25 ----D---- C:\Program Files\Common Files\microsoft shared
2009-01-23 19:36:34 ----D---- C:\Program Files\Windows Live
2009-01-23 19:36:20 ----D---- C:\Windows\winsxs
2009-01-23 19:32:49 ----D---- C:\Program Files\Common Files
2009-01-23 19:32:10 ----SD---- C:\ProgramData\Microsoft
2009-01-23 19:26:41 ----SHD---- C:\System Volume Information
2009-01-23 18:53:27 ----D---- C:\Windows\system32\Tasks
2009-01-23 18:50:15 ----D---- C:\Windows\Prefetch
2009-01-21 20:37:35 ----D---- C:\Program Files\Xfire
2009-01-21 18:19:20 ----D---- C:\Users\V!nce\AppData\Roaming\Xfire
2009-01-21 14:50:07 ----A---- C:\Windows\system32\PnkBstrB.exe
2009-01-18 09:14:46 ----D---- C:\Program Files\Common Files\Steam
2009-01-14 17:17:45 ----SD---- C:\Users\V!nce\AppData\Roaming\Microsoft
2009-01-13 20:42:47 ----HD---- C:\Program Files\InstallShield Installation Information
2009-01-11 22:57:07 ----RSD---- C:\Windows\assembly
2009-01-11 22:31:43 ----D---- C:\Program Files\Activision
2009-01-11 09:17:25 ----D---- C:\Windows\system32\catroot2
2009-01-10 15:56:53 ----A---- C:\Windows\system32\PnkBstrA.exe
2009-01-10 15:56:53 ----A---- C:\Windows\system32\pbsvc.exe
2009-01-10 09:16:04 ----D---- C:\Program Files\Google
2009-01-09 21:23:15 ----D---- C:\ProgramData\Google
2009-01-03 16:47:51 ----D---- C:\Program Files\Codemasters
2009-01-03 16:46:31 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-12-27 15:14:04 ----D---- C:\Program Files\Ubisoft
2008-12-26 23:33:29 ----D---- C:\ProgramData\Symantec
2008-12-26 23:33:27 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-12-26 15:41:52 ----D---- C:\Program Files\Common Files\Adobe
2008-12-25 16:00:33 ----D---- C:\Users\V!nce\AppData\Roaming\LimeWire

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2008-02-20 29704]
R1 epfwtdir;epfwtdir; C:\Windows\system32\DRIVERS\epfwtdir.sys [2008-02-20 33800]
R1 InCDPass;InCDPass; C:\Windows\system32\drivers\InCDPass.sys [2007-05-15 37040]
R1 incdrm;InCD Reader; C:\Windows\system32\drivers\InCDRm.sys [2007-05-15 38576]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-07-07 56108]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2008-08-02 278984]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2008-02-20 39944]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2008-08-02 25416]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\Windows\system32\DRIVERS\atl01v32.sys [2007-03-15 48128]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2008-08-15 25280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-26 1761696]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [2008-02-29 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-17 7379872]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2007-10-12 490776]
R3 t3;Sound Blaster X-Fi Xtreme Audio (Vista); C:\Windows\system32\drivers\t3.sys [2008-01-29 404480]
R4 InCDfs;InCD File System; C:\Windows\system32\drivers\InCDFs.sys [2007-05-15 118576]
S3 afqy3d1w;afqy3d1w; C:\Windows\system32\drivers\afqy3d1w.sys []
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-20 5632]
S3 HCWBT8xx;Hauppauge WinTV 848/9 WDM Video Driver; C:\Windows\system32\drivers\HCWBT8XX.sys [2006-01-25 472644]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVER

voici le rapport :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q9450 @ 2.66GHz )
BIOS : BIOS Date: 06/18/08 21:14:06 Ver: 08.00.12
USER : V!nce ( Administrator )
BOOT : Normal boot
Antivirus : ESET NOD32 Antivirus 3.0 3.0 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:14 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:298 Go (Free:234 Go)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2009-07-30|14:29 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[2009-01-11|23:59] C:\Users\V!nce\AppData\Local\Activision
[2009-04-05|09:19] C:\Users\V!nce\AppData\Local\Adobe
[2008-09-28|01:45] C:\Users\V!nce\AppData\Local\Ahead
[2008-06-27|23:35] C:\Users\V!nce\AppData\Local\Apple
[2008-11-05|18:59] C:\Users\V!nce\AppData\Local\Apple Computer
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Application Data
[2008-10-02|16:13] C:\Users\V!nce\AppData\Local\ApplicationHistory
[2009-07-27|23:01] C:\Users\V!nce\AppData\Local\assembly
[2009-07-27|14:06] C:\Users\V!nce\AppData\Local\d3d8caps.dat
[2009-07-27|14:06] C:\Users\V!nce\AppData\Local\d3d9caps.dat
[2009-06-18|22:21] C:\Users\V!nce\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-06-28|13:21] C:\Users\V!nce\AppData\Local\DNA
[2008-09-27|18:43] C:\Users\V!nce\AppData\Local\Downloaded Installations
[2009-02-28|17:11] C:\Users\V!nce\AppData\Local\Electronic Arts
[2008-09-27|22:25] C:\Users\V!nce\AppData\Local\ESET
[2009-06-03|16:23] C:\Users\V!nce\AppData\Local\Fallout3
[2008-07-08|18:19] C:\Users\V!nce\AppData\Local\fusioncache.dat
[2008-10-02|22:41] C:\Users\V!nce\AppData\Local\GameSpy
[2009-06-10|21:46] C:\Users\V!nce\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-06-21|14:57] C:\Users\V!nce\AppData\Local\Google
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Historique
[2009-07-30|01:22] C:\Users\V!nce\AppData\Local\IconCache.db
[2009-01-21|17:37] C:\Users\V!nce\AppData\Local\Ironclad Games
[2008-06-27|01:55] C:\Users\V!nce\AppData\Local\Logitech
[2009-07-06|00:01] C:\Users\V!nce\AppData\Local\Microsoft
[2008-12-08|23:14] C:\Users\V!nce\AppData\Local\Microsoft Games
[2008-10-22|16:19] C:\Users\V!nce\AppData\Local\Microsoft Help
[2008-08-15|18:47] C:\Users\V!nce\AppData\Local\Mozilla
[2008-10-24|19:10] C:\Users\V!nce\AppData\Local\My Games
[2009-06-27|21:10] C:\Users\V!nce\AppData\Local\Oblivion
[2009-01-11|23:59] C:\Users\V!nce\AppData\Local\PunkBuster
[2009-03-08|16:39] C:\Users\V!nce\AppData\Local\Rockstar Games
[2009-07-30|14:28] C:\Users\V!nce\AppData\Local\Temp
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Temporary Internet Files
[2008-07-27|23:42] C:\Users\V!nce\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[2009-07-30 12:35][--a------] C:\Windows\tasks\Google Software Updater.job
[2009-07-30 00:05][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{DED683EA-7B11-46D4-B24E-CCD710DFADD6}.job
[2009-07-30 01:24][--ah-----] C:\Windows\tasks\SA.DAT
[2009-07-30 01:22][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[2009-03-18|16:01] C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009-04-08|20:09] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008-10-18|14:56] C:\ProgramData\2DBoy
[2009-04-05|09:18] C:\ProgramData\Adobe
[2008-06-27|00:49] C:\ProgramData\Ahead
[2009-06-05|15:52] C:\ProgramData\Apple
[2008-11-23|02:01] C:\ProgramData\Apple Computer
[2006-11-02|09:02] C:\ProgramData\Application Data
[2009-04-13|02:17] C:\ProgramData\Blizzard
[2008-06-26|09:01] C:\ProgramData\Bureau
[2008-07-01|22:30] C:\ProgramData\Creative
[2008-08-31|22:45] C:\ProgramData\CyberLink
[2006-11-02|09:02] C:\ProgramData\Desktop
[2006-11-02|09:02] C:\ProgramData\Documents
[2009-03-06|00:34] C:\ProgramData\EA Logs
[2009-03-05|21:37] C:\ProgramData\Electronic Arts
[2008-09-27|17:45] C:\ProgramData\ESET
[2008-06-26|09:01] C:\ProgramData\Favoris
[2006-11-02|09:02] C:\ProgramData\Favorites
[2009-01-09|22:23] C:\ProgramData\Google
[2009-07-29|16:06] C:\ProgramData\Google Updater
[2009-06-21|15:37] C:\ProgramData\ijjigame
[2008-06-26|23:05] C:\ProgramData\Logishrd
[2009-05-04|18:26] C:\ProgramData\Logitech
[2009-01-23|23:09] C:\ProgramData\Malwarebytes
[2009-06-15|11:24] C:\ProgramData\Media Center Programs
[2008-06-26|09:01] C:\ProgramData\Menu D‚marrer
[2009-01-23|20:32] C:\ProgramData\Microsoft
[2008-12-12|00:48] C:\ProgramData\Microsoft Help
[2008-06-26|09:01] C:\ProgramData\ModŠles
[2009-06-26|00:38] C:\ProgramData\Namco
[2009-06-26|00:42] C:\ProgramData\Namco Networks
[2008-06-27|00:47] C:\ProgramData\Nero
[2009-01-25|00:27] C:\ProgramData\NortonInstaller
[2009-07-30|01:24] C:\ProgramData\NVIDIA
[2008-06-30|23:40] C:\ProgramData\Spybot - Search & Destroy
[2006-11-02|09:02] C:\ProgramData\Start Menu
[2009-01-25|00:28] C:\ProgramData\Symantec
[2009-01-23|22:34] C:\ProgramData\TEMP
[2006-11-02|09:02] C:\ProgramData\Templates
[2008-10-13|23:37] C:\ProgramData\Trymedia
[2008-07-01|16:39] C:\ProgramData\Ubisoft
[2008-07-01|15:09] C:\ProgramData\VMware
[2008-06-26|23:27] C:\ProgramData\WLInstaller
[2009-07-29|20:28] C:\ProgramData\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files

[2009-06-14|17:57] C:\Program Files\Activision
[2009-04-06|21:26] C:\Program Files\Adobe
[2009-07-29|18:40] C:\Program Files\AGEIA Technologies
[2008-08-14|08:11] C:\Program Files\Apple Software Update
[2009-06-10|21:26] C:\Program Files\BestGameEver
[2009-06-27|21:30] C:\Program Files\Bethesda Softworks
[2009-01-29|16:56] C:\Program Files\BitTorrent
[2008-12-18|22:48] C:\Program Files\Bonjour
[2009-01-03|17:47] C:\Program Files\Codemasters
[2009-06-21|15:55] C:\Program Files\Common Files
[2008-06-27|00:07] C:\Program Files\Creative
[2008-06-26|23:45] C:\Program Files\Creative Installation Information
[2008-06-27|00:44] C:\Program Files\CyberLink
[2008-07-01|16:10] C:\Program Files\DAEMON Tools Lite
[2008-06-28|13:21] C:\Program Files\DNA
[2009-04-06|21:28] C:\Program Files\Download Manager
[2009-03-06|00:50] C:\Program Files\EA Games
[2009-03-05|21:36] C:\Program Files\Electronic Arts
[2008-09-27|17:45] C:\Program Files\ESET
[2008-06-26|09:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[2008-07-07|23:16] C:\Program Files\GameSpy
[2009-01-10|10:16] C:\Program Files\Google
[2008-07-22|20:15] C:\Program Files\GUILD WARS
[2008-08-15|20:13] C:\Program Files\Hamachi
[2008-10-04|23:12] C:\Program Files\Infogrames Interactive
[2009-07-27|23:00] C:\Program Files\InstallShield Installation Information
[2008-06-26|09:08] C:\Program Files\Intel
[2008-07-08|03:00] C:\Program Files\Internet Explorer
[2009-07-15|17:49] C:\Program Files\iPod
[2009-07-15|17:49] C:\Program Files\iTunes
[2009-03-24|21:02] C:\Program Files\Java
[2009-04-23|19:51] C:\Program Files\LimeWire
[2009-06-18|19:04] C:\Program Files\Lionhead Studios
[2009-05-04|18:26] C:\Program Files\Logitech
[2009-01-23|23:09] C:\Program Files\Malwarebytes' Anti-Malware
[2009-06-18|20:58] C:\Program Files\Maxis
[2009-01-23|20:37] C:\Program Files\Microsoft
[2009-07-23|11:34] C:\Program Files\Microsoft Games
[2009-03-08|16:33] C:\Program Files\Microsoft Games for Windows - LIVE
[2008-09-27|18:04] C:\Program Files\Microsoft Office
[2008-10-17|21:28] C:\Program Files\Microsoft SDKs
[2008-10-21|21:00] C:\Program Files\Microsoft Silverlight
[2008-10-17|21:32] C:\Program Files\Microsoft Visual Studio 9.0
[2008-09-27|18:04] C:\Program Files\Microsoft Works
[2008-09-27|18:03] C:\Program Files\Microsoft.NET
[2009-01-29|20:54] C:\Program Files\Mount&Blade
[2008-01-20|22:35] C:\Program Files\Movie Maker
[2009-07-28|21:26] C:\Program Files\Mozilla Firefox
[2006-11-02|08:37] C:\Program Files\MSBuild
[2008-06-28|00:43] C:\Program Files\MSXML 4.0
[2008-06-27|01:08] C:\Program Files\My Company Name
[2009-06-26|01:29] C:\Program Files\Namco
[2008-12-26|16:41] C:\Program Files\nanocosmos
[2009-07-29|15:28] C:\Program Files\NCSoft
[2008-06-27|00:47] C:\Program Files\Nero
[2009-06-21|15:16] C:\Program Files\NHN USA
[2008-09-27|17:40] C:\Program Files\Norton Internet Security
[2009-07-29|18:43] C:\Program Files\NVIDIA Corporation
[2009-06-15|10:48] C:\Program Files\OpenAL
[2008-09-27|18:34] C:\Program Files\OpenOffice.org 2.4
[2009-04-06|22:14] C:\Program Files\OsmosDemo
[2009-01-25|00:33] C:\Program Files\Panda Security
[2008-12-23|10:38] C:\Program Files\PhoChron
[2008-09-29|17:21] C:\Program Files\PowerISO
[2009-07-21|16:35] C:\Program Files\PremiereAdvertisingPlatform
[2009-05-22|23:35] C:\Program Files\Project64 v1.5
[2009-06-03|18:17] C:\Program Files\QuickTime
[2008-06-26|09:46] C:\Program Files\Realtek
[2006-11-02|08:37] C:\Program Files\Reference Assemblies
[2009-07-08|21:04] C:\Program Files\Safari
[2008-08-07|15:05] C:\Program Files\SEGA
[2008-10-08|17:38] C:\Program Files\Sierra
[2008-06-30|23:14] C:\Program Files\Spybot - Search & Destroy
[2009-01-21|17:34] C:\Program Files\Stardock Games
[2009-07-30|12:39] C:\Program Files\Steam
[2008-10-04|16:54] C:\Program Files\SystemRequirementsLab
[2008-08-03|09:36] C:\Program Files\The Witcher
[2008-07-28|23:20] C:\Program Files\Tremulous
[2009-01-23|21:23] C:\Program Files\Trend Micro
[2009-07-09|20:41] C:\Program Files\Ubisoft
[2006-11-02|09:01] C:\Program Files\Uninstall Information
[2009-05-03|14:39] C:\Program Files\VideoLAN
[2008-01-20|22:35] C:\Program Files\Windows Calendar
[2008-01-20|22:35] C:\Program Files\Windows Collaboration
[2008-01-20|22:35] C:\Program Files\Windows Defender
[2008-01-20|22:35] C:\Program Files\Windows Journal
[2009-01-23|20:36] C:\Program Files\Windows Live
[2009-01-23|20:37] C:\Program Files\Windows Live SkyDrive
[2008-12-12|16:59] C:\Program Files\Windows Mail
[2009-07-21|16:35] C:\Program Files\Windows Media Player
[2008-06-26|09:01] C:\Program Files\Windows NT
[2008-01-20|22:35] C:\Program Files\Windows Photo Gallery
[2008-01-20|22:35] C:\Program Files\Windows Sidebar
[2008-07-08|08:18] C:\Program Files\WinRAR
[2009-04-06|21:32] C:\Program Files\WinTV
[2009-04-13|13:19] C:\Program Files\World of Warcraft
[2009-07-27|20:54] C:\Program Files\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[2009-04-06|21:31] C:\Program Files\Common Files\Adobe
[2008-06-27|00:49] C:\Program Files\Common Files\Ahead
[2009-07-15|17:49] C:\Program Files\Common Files\Apple
[2009-04-12|15:43] C:\Program Files\Common Files\Blizzard Entertainment
[2008-06-26|23:44] C:\Program Files\Common Files\Creative
[2008-06-27|00:08] C:\Program Files\Common Files\Creative Labs Shared
[2008-09-27|18:03] C:\Program Files\Common Files\DESIGNER
[2009-06-21|15:55] C:\Program Files\Common Files\INCA Shared
[2008-06-27|01:06] C:\Program Files\Common Files\InstallShield
[2008-07-28|21:49] C:\Program Files\Common Files\Java
[2008-09-03|15:35] C:\Program Files\Common Files\logishrd
[2008-09-03|15:35] C:\Program Files\Common Files\Logitech
[2008-10-17|21:30] C:\Program Files\Common Files\Merge Modules
[2009-02-19|12:57] C:\Program Files\Common Files\microsoft shared
[2006-11-02|07:18] C:\Program Files\Common Files\Services
[2006-11-02|07:18] C:\Program Files\Common Files\SpeechEngines
[2009-07-04|09:12] C:\Program Files\Common Files\Steam
[2008-10-04|23:13] C:\Program Files\Common Files\SWF Studio
[2009-01-25|00:28] C:\Program Files\Common Files\Symantec Shared
[2008-01-20|22:35] C:\Program Files\Common Files\System
[2009-01-23|20:32] C:\Program Files\Common Files\Windows Live
[2008-06-26|23:28] C:\Program Files\Common Files\WindowsLiveInstaller
[2009-07-29|18:40] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 92 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\V!nce\AppData\Local\Temp\nsd54E5.tmp
C:\Users\V!nce\AppData\Local\Temp\nsisos.dll
C:\Users\V!nce\AppData\Local\Temp\nsr53B2.tmp
C:\Users\V!nce\AppData\Local\Temp\nsx53D4.tmp
C:\Users\V!nce\AppData\Local\Temp\stadistic.log
C:\Users\V!nce\AppData\Roaming\MICROS~1\Windows\Cookies\v!nce@game-advertising-online[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-30 14:29:35
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\V!nce\AppData\Roaming\BitTorrent\crysis crack.zip.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Crysis Cracks.rar.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\crysis warhead+crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\CRYSIS.Crack.only.no.cd.7z.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Crysis.Win32.Razor1911.Crack.Only.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount & Blade 1.011 Crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount&Blade 1.003 +crack.1.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount&Blade 1.003 +crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Overlord Full DVD With CRACK.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\PROTOTYPE CRACK ONLY - RAZOR 1911.rar.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\SimCity 4 Deluxe Edition + Serial + NoCD Crack Sim City.rar.torrent
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Black___White_2___KEYGEN_.cue___.ccd_files.3418562.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Crysis Cracks.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\install de jeux avec crack.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount.and.Blade.1.011.Crack-R0BBE.4623411.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount_Blade_1.003__crack.4462884.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount___Blade_1.003___Crack___Mod___Full_Game.4645040.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (2).lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (3).lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (4).lnk
C:\Users\V!nce\Documents\install de jeux avec crack
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack
C:\Users\V!nce\Documents\install de jeux avec crack\The Witcher
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2.rar
C:\Users\V!nce\Documents\install de jeux avec crack\The_Witcher_iso__1.2_patch_censorship_patch(optional)_no-cd_crac.4236683.TPB.torrent
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\ASSASSINS_CREED.mdf
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\ASSASSINS_CREED.mds
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\AssassinsCreed_Dx10.exe
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\AssassinsCreed_Dx9.exe
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack\Crysis.exe
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack\read !.txt
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\rld-spor.exe
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\SporeApp.exe
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\Torrent downloaded from Demonoid.com.txt
C:\Users\V!nce\Documents\install de jeux avec crack\The Witcher\Read me first!!.txt
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\the witcher back up exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcherPatch.1.2.0.1160(314).exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TWCF.exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\witcher (2).exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\the witcher back up exe\witcher.exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO\coreadrin torrent.txt
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO\TheWitcherISO.iso


[F:1803][D:104]-> C:\Users\V!nce\AppData\Local\Temp
[F:206][D:1]-> C:\Users\V!nce\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6265][D:14]-> C:\Users\V!nce\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:7][D:1]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 2009-07-30|14:32 - Option : [1]

--------------------\\ Fin du rapport a 14:32:18
[ UAC => 1 ]

un peut de tout surtout des truc du genre casino ou site de rencontre.

Les quelle deus antivirus j'ai il me semble avoir désinstaller norton il y a un bon momment.

J'ai désinstaller Norton seulement le problème de cookie si je peu nommer cela comme sa est toujours présent.

Celui expliquer plus au avec des page internet qui s'ouvre d'eux même sur de la publiciter.

voici le rapport seulement il na rien écris ou presque.

vendredi 31 juillet 2009
Système d'exploitation : Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Version de Kaspersky Online Scanner : 7.0.26.13
Dernière mise à jour de la base : Friday, July 31, 2009 03:24:45
Enregistrements dans la base : 2565300
Paramètres d'analyse
analyser avec la base suivante étendue
Analyser les archives oui
Analyser les bases de messagerie oui
Zone d'analyse Poste de travail
A:\
C:\
D:\
E:\
F:\
Statistiques d'analyse
Objets analysés 173687
Menaces trouvées 0
Objets infectés trouvés 0
Objets suspects trouvés 0
Durée d'analyse 03:05:54

Aucune menace trouvée. La zone d'analyse est propre.
La zone sélectionnée a été analysée.

Voici le rapport:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q9450 @ 2.66GHz )
BIOS : BIOS Date: 06/18/08 21:14:06 Ver: 08.00.12
USER : V!nce ( Administrator )
BOOT : Normal boot
Antivirus : ESET NOD32 Antivirus 3.0 3.0 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:16 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:298 Go (Free:234 Go)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 2009-07-31|11:48 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Users\V!nce\AppData\Local\Temp\nsd54E5.tmp
Supprime! - C:\Users\V!nce\AppData\Local\Temp\nsisos.dll
Supprime! - C:\Users\V!nce\AppData\Local\Temp\nsr53B2.tmp
Supprime! - C:\Users\V!nce\AppData\Local\Temp\nsx53D4.tmp
Supprime! - C:\Users\V!nce\AppData\Local\Temp\stadistic.log
Supprime! - C:\Users\V!nce\AppData\Roaming\MICROS~1\Windows\Cookies\v!nce@game-advertising-online[1].txt
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[2009-01-11|23:59] C:\Users\V!nce\AppData\Local\Activision
[2009-04-05|09:19] C:\Users\V!nce\AppData\Local\Adobe
[2008-09-28|01:45] C:\Users\V!nce\AppData\Local\Ahead
[2008-06-27|23:35] C:\Users\V!nce\AppData\Local\Apple
[2008-11-05|18:59] C:\Users\V!nce\AppData\Local\Apple Computer
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Application Data
[2008-10-02|16:13] C:\Users\V!nce\AppData\Local\ApplicationHistory
[2009-07-27|23:01] C:\Users\V!nce\AppData\Local\assembly
[2009-07-27|14:06] C:\Users\V!nce\AppData\Local\d3d8caps.dat
[2009-07-27|14:06] C:\Users\V!nce\AppData\Local\d3d9caps.dat
[2009-06-18|22:21] C:\Users\V!nce\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-06-28|13:21] C:\Users\V!nce\AppData\Local\DNA
[2008-09-27|18:43] C:\Users\V!nce\AppData\Local\Downloaded Installations
[2009-02-28|17:11] C:\Users\V!nce\AppData\Local\Electronic Arts
[2008-09-27|22:25] C:\Users\V!nce\AppData\Local\ESET
[2009-06-03|16:23] C:\Users\V!nce\AppData\Local\Fallout3
[2008-07-08|18:19] C:\Users\V!nce\AppData\Local\fusioncache.dat
[2008-10-02|22:41] C:\Users\V!nce\AppData\Local\GameSpy
[2009-06-10|21:46] C:\Users\V!nce\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-06-21|14:57] C:\Users\V!nce\AppData\Local\Google
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Historique
[2009-07-31|01:18] C:\Users\V!nce\AppData\Local\IconCache.db
[2009-01-21|17:37] C:\Users\V!nce\AppData\Local\Ironclad Games
[2008-06-27|01:55] C:\Users\V!nce\AppData\Local\Logitech
[2009-07-06|00:01] C:\Users\V!nce\AppData\Local\Microsoft
[2008-12-08|23:14] C:\Users\V!nce\AppData\Local\Microsoft Games
[2008-10-22|16:19] C:\Users\V!nce\AppData\Local\Microsoft Help
[2008-08-15|18:47] C:\Users\V!nce\AppData\Local\Mozilla
[2008-10-24|19:10] C:\Users\V!nce\AppData\Local\My Games
[2009-06-27|21:10] C:\Users\V!nce\AppData\Local\Oblivion
[2009-01-11|23:59] C:\Users\V!nce\AppData\Local\PunkBuster
[2009-03-08|16:39] C:\Users\V!nce\AppData\Local\Rockstar Games
[2009-07-31|11:48] C:\Users\V!nce\AppData\Local\Temp
[2008-06-26|09:03] C:\Users\V!nce\AppData\Local\Temporary Internet Files
[2008-07-27|23:42] C:\Users\V!nce\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[2009-07-31 11:44][--a------] C:\Windows\tasks\Google Software Updater.job
[2009-07-31 11:47][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{DED683EA-7B11-46D4-B24E-CCD710DFADD6}.job
[2009-07-31 11:41][--ah-----] C:\Windows\tasks\SA.DAT
[2009-07-31 01:19][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[2009-03-18|16:01] C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009-04-08|20:09] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008-10-18|14:56] C:\ProgramData\2DBoy
[2009-04-05|09:18] C:\ProgramData\Adobe
[2008-06-27|00:49] C:\ProgramData\Ahead
[2009-06-05|15:52] C:\ProgramData\Apple
[2008-11-23|02:01] C:\ProgramData\Apple Computer
[2006-11-02|09:02] C:\ProgramData\Application Data
[2009-04-13|02:17] C:\ProgramData\Blizzard
[2008-06-26|09:01] C:\ProgramData\Bureau
[2008-07-01|22:30] C:\ProgramData\Creative
[2008-08-31|22:45] C:\ProgramData\CyberLink
[2006-11-02|09:02] C:\ProgramData\Desktop
[2006-11-02|09:02] C:\ProgramData\Documents
[2009-03-06|00:34] C:\ProgramData\EA Logs
[2009-03-05|21:37] C:\ProgramData\Electronic Arts
[2008-09-27|17:45] C:\ProgramData\ESET
[2008-06-26|09:01] C:\ProgramData\Favoris
[2006-11-02|09:02] C:\ProgramData\Favorites
[2009-01-09|22:23] C:\ProgramData\Google
[2009-07-30|17:07] C:\ProgramData\Google Updater
[2009-06-21|15:37] C:\ProgramData\ijjigame
[2008-06-26|23:05] C:\ProgramData\Logishrd
[2009-05-04|18:26] C:\ProgramData\Logitech
[2009-01-23|23:09] C:\ProgramData\Malwarebytes
[2009-06-15|11:24] C:\ProgramData\Media Center Programs
[2008-06-26|09:01] C:\ProgramData\Menu D‚marrer
[2009-01-23|20:32] C:\ProgramData\Microsoft
[2008-12-12|00:48] C:\ProgramData\Microsoft Help
[2008-06-26|09:01] C:\ProgramData\ModŠles
[2009-06-26|00:38] C:\ProgramData\Namco
[2009-06-26|00:42] C:\ProgramData\Namco Networks
[2008-06-27|00:47] C:\ProgramData\Nero
[2009-07-30|15:15] C:\ProgramData\NortonInstaller
[2009-07-31|11:42] C:\ProgramData\NVIDIA
[2008-06-30|23:40] C:\ProgramData\Spybot - Search & Destroy
[2006-11-02|09:02] C:\ProgramData\Start Menu
[2009-07-30|15:16] C:\ProgramData\Symantec
[2009-01-23|22:34] C:\ProgramData\TEMP
[2006-11-02|09:02] C:\ProgramData\Templates
[2008-10-13|23:37] C:\ProgramData\Trymedia
[2008-07-01|16:39] C:\ProgramData\Ubisoft
[2008-07-01|15:09] C:\ProgramData\VMware
[2008-06-26|23:27] C:\ProgramData\WLInstaller
[2009-07-29|20:28] C:\ProgramData\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files

[2009-06-14|17:57] C:\Program Files\Activision
[2009-04-06|21:26] C:\Program Files\Adobe
[2009-07-29|18:40] C:\Program Files\AGEIA Technologies
[2008-08-14|08:11] C:\Program Files\Apple Software Update
[2009-06-10|21:26] C:\Program Files\BestGameEver
[2009-06-27|21:30] C:\Program Files\Bethesda Softworks
[2009-01-29|16:56] C:\Program Files\BitTorrent
[2008-12-18|22:48] C:\Program Files\Bonjour
[2009-01-03|17:47] C:\Program Files\Codemasters
[2009-06-21|15:55] C:\Program Files\Common Files
[2008-06-27|00:07] C:\Program Files\Creative
[2008-06-26|23:45] C:\Program Files\Creative Installation Information
[2008-06-27|00:44] C:\Program Files\CyberLink
[2008-07-01|16:10] C:\Program Files\DAEMON Tools Lite
[2008-06-28|13:21] C:\Program Files\DNA
[2009-04-06|21:28] C:\Program Files\Download Manager
[2009-03-06|00:50] C:\Program Files\EA Games
[2009-03-05|21:36] C:\Program Files\Electronic Arts
[2008-09-27|17:45] C:\Program Files\ESET
[2008-06-26|09:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[2008-07-07|23:16] C:\Program Files\GameSpy
[2009-01-10|10:16] C:\Program Files\Google
[2008-07-22|20:15] C:\Program Files\GUILD WARS
[2008-08-15|20:13] C:\Program Files\Hamachi
[2008-10-04|23:12] C:\Program Files\Infogrames Interactive
[2009-07-27|23:00] C:\Program Files\InstallShield Installation Information
[2008-06-26|09:08] C:\Program Files\Intel
[2008-07-08|03:00] C:\Program Files\Internet Explorer
[2009-07-15|17:49] C:\Program Files\iPod
[2009-07-15|17:49] C:\Program Files\iTunes
[2009-03-24|21:02] C:\Program Files\Java
[2009-04-23|19:51] C:\Program Files\LimeWire
[2009-06-18|19:04] C:\Program Files\Lionhead Studios
[2009-05-04|18:26] C:\Program Files\Logitech
[2009-01-23|23:09] C:\Program Files\Malwarebytes' Anti-Malware
[2009-06-18|20:58] C:\Program Files\Maxis
[2009-01-23|20:37] C:\Program Files\Microsoft
[2009-07-23|11:34] C:\Program Files\Microsoft Games
[2009-03-08|16:33] C:\Program Files\Microsoft Games for Windows - LIVE
[2008-09-27|18:04] C:\Program Files\Microsoft Office
[2008-10-17|21:28] C:\Program Files\Microsoft SDKs
[2008-10-21|21:00] C:\Program Files\Microsoft Silverlight
[2008-10-17|21:32] C:\Program Files\Microsoft Visual Studio 9.0
[2008-09-27|18:04] C:\Program Files\Microsoft Works
[2008-09-27|18:03] C:\Program Files\Microsoft.NET
[2009-01-29|20:54] C:\Program Files\Mount&Blade
[2008-01-20|22:35] C:\Program Files\Movie Maker
[2009-07-28|21:26] C:\Program Files\Mozilla Firefox
[2006-11-02|08:37] C:\Program Files\MSBuild
[2008-06-28|00:43] C:\Program Files\MSXML 4.0
[2008-06-27|01:08] C:\Program Files\My Company Name
[2009-06-26|01:29] C:\Program Files\Namco
[2008-12-26|16:41] C:\Program Files\nanocosmos
[2009-07-29|15:28] C:\Program Files\NCSoft
[2008-06-27|00:47] C:\Program Files\Nero
[2009-06-21|15:16] C:\Program Files\NHN USA
[2009-07-29|18:43] C:\Program Files\NVIDIA Corporation
[2009-06-15|10:48] C:\Program Files\OpenAL
[2008-09-27|18:34] C:\Program Files\OpenOffice.org 2.4
[2009-01-25|00:33] C:\Program Files\Panda Security
[2008-12-23|10:38] C:\Program Files\PhoChron
[2008-09-29|17:21] C:\Program Files\PowerISO
[2009-07-21|16:35] C:\Program Files\PremiereAdvertisingPlatform
[2009-05-22|23:35] C:\Program Files\Project64 v1.5
[2009-06-03|18:17] C:\Program Files\QuickTime
[2008-06-26|09:46] C:\Program Files\Realtek
[2006-11-02|08:37] C:\Program Files\Reference Assemblies
[2009-07-08|21:04] C:\Program Files\Safari
[2008-08-07|15:05] C:\Program Files\SEGA
[2008-10-08|17:38] C:\Program Files\Sierra
[2008-06-30|23:14] C:\Program Files\Spybot - Search & Destroy
[2009-01-21|17:34] C:\Program Files\Stardock Games
[2009-07-31|11:44] C:\Program Files\Steam
[2008-10-04|16:54] C:\Program Files\SystemRequirementsLab
[2008-08-03|09:36] C:\Program Files\The Witcher
[2008-07-28|23:20] C:\Program Files\Tremulous
[2009-01-23|21:23] C:\Program Files\Trend Micro
[2009-07-09|20:41] C:\Program Files\Ubisoft
[2006-11-02|09:01] C:\Program Files\Uninstall Information
[2009-05-03|14:39] C:\Program Files\VideoLAN
[2008-01-20|22:35] C:\Program Files\Windows Calendar
[2008-01-20|22:35] C:\Program Files\Windows Collaboration
[2008-01-20|22:35] C:\Program Files\Windows Defender
[2008-01-20|22:35] C:\Program Files\Windows Journal
[2009-01-23|20:36] C:\Program Files\Windows Live
[2009-01-23|20:37] C:\Program Files\Windows Live SkyDrive
[2008-12-12|16:59] C:\Program Files\Windows Mail
[2009-07-21|16:35] C:\Program Files\Windows Media Player
[2008-06-26|09:01] C:\Program Files\Windows NT
[2008-01-20|22:35] C:\Program Files\Windows Photo Gallery
[2008-01-20|22:35] C:\Program Files\Windows Sidebar
[2008-07-08|08:18] C:\Program Files\WinRAR
[2009-04-06|21:32] C:\Program Files\WinTV
[2009-04-13|13:19] C:\Program Files\World of Warcraft
[2009-07-27|20:54] C:\Program Files\Xfire

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[2009-04-06|21:31] C:\Program Files\Common Files\Adobe
[2008-06-27|00:49] C:\Program Files\Common Files\Ahead
[2009-07-15|17:49] C:\Program Files\Common Files\Apple
[2009-04-12|15:43] C:\Program Files\Common Files\Blizzard Entertainment
[2008-06-26|23:44] C:\Program Files\Common Files\Creative
[2008-06-27|00:08] C:\Program Files\Common Files\Creative Labs Shared
[2008-09-27|18:03] C:\Program Files\Common Files\DESIGNER
[2009-06-21|15:55] C:\Program Files\Common Files\INCA Shared
[2008-06-27|01:06] C:\Program Files\Common Files\InstallShield
[2008-07-28|21:49] C:\Program Files\Common Files\Java
[2008-09-03|15:35] C:\Program Files\Common Files\logishrd
[2008-09-03|15:35] C:\Program Files\Common Files\Logitech
[2008-10-17|21:30] C:\Program Files\Common Files\Merge Modules
[2009-02-19|12:57] C:\Program Files\Common Files\microsoft shared
[2006-11-02|07:18] C:\Program Files\Common Files\Services
[2006-11-02|07:18] C:\Program Files\Common Files\SpeechEngines
[2009-07-04|09:12] C:\Program Files\Common Files\Steam
[2008-10-04|23:13] C:\Program Files\Common Files\SWF Studio
[2009-01-25|00:28] C:\Program Files\Common Files\Symantec Shared
[2008-01-20|22:35] C:\Program Files\Common Files\System
[2009-01-23|20:32] C:\Program Files\Common Files\Windows Live
[2008-06-26|23:28] C:\Program Files\Common Files\WindowsLiveInstaller
[2009-07-29|18:40] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 91 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-31 11:48:12
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\Windows\System32\wbem\Performance\WmiApRpl_new.ini 41898 bytes
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\V!nce\AppData\Roaming\BitTorrent\crysis crack.zip.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Crysis Cracks.rar.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\crysis warhead+crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\CRYSIS.Crack.only.no.cd.7z.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Crysis.Win32.Razor1911.Crack.Only.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount & Blade 1.011 Crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount&Blade 1.003 +crack.1.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Mount&Blade 1.003 +crack.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\Overlord Full DVD With CRACK.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\PROTOTYPE CRACK ONLY - RAZOR 1911.rar.torrent
C:\Users\V!nce\AppData\Roaming\BitTorrent\SimCity 4 Deluxe Edition + Serial + NoCD Crack Sim City.rar.torrent
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Black___White_2___KEYGEN_.cue___.ccd_files.3418562.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Crysis Cracks.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\install de jeux avec crack.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount.and.Blade.1.011.Crack-R0BBE.4623411.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount_Blade_1.003__crack.4462884.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Mount___Blade_1.003___Crack___Mod___Full_Game.4645040.TPB.torrent.lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (2).lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (3).lnk
C:\Users\V!nce\AppData\Roaming\Microsoft\Windows\Recent\Overlord Full DVD With CRACK (4).lnk
C:\Users\V!nce\Documents\install de jeux avec crack
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack
C:\Users\V!nce\Documents\install de jeux avec crack\The Witcher
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2.rar
C:\Users\V!nce\Documents\install de jeux avec crack\The_Witcher_iso__1.2_patch_censorship_patch(optional)_no-cd_crac.4236683.TPB.torrent
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\ASSASSINS_CREED.mdf
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\ASSASSINS_CREED.mds
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\AssassinsCreed_Dx10.exe
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\AssassinsCreed_Dx9.exe
C:\Users\V!nce\Documents\install de jeux avec crack\Assassins Creed Game PC multilanguage - With Crack\Crack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack\Crysis.exe
C:\Users\V!nce\Documents\install de jeux avec crack\crysis crack\read !.txt
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\reloaded.nfo
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\rld-spor.exe
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\SporeApp.exe
C:\Users\V!nce\Documents\install de jeux avec crack\SporeCrack\Torrent downloaded from Demonoid.com.txt
C:\Users\V!nce\Documents\install de jeux avec crack\The Witcher\Read me first!!.txt
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\the witcher back up exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcherPatch.1.2.0.1160(314).exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TWCF.exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\witcher (2).exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\the witcher back up exe\witcher.exe
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO\coreadrin torrent.txt
C:\Users\V!nce\Documents\install de jeux avec crack\TheWitcher_v1.2\TheWitcher ISO\TheWitcherISO.iso


[F:3276][D:114]-> C:\Users\V!nce\AppData\Local\Temp
[F:205][D:1]-> C:\Users\V!nce\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6487][D:14]-> C:\Users\V!nce\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:7][D:1]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 2009-07-30|14:32 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2009-07-31|11:51 - Option : [2]

--------------------\\ Fin du rapport a 11:51:09
[ UAC => 1 ]

Dsl j'avais pas vue et non j'utilise mozila firefox.

Pour le moment je ne les pas revu apparaitre si il reviens dans l'heure qui suit je vais envoyer un message sinon et bien le problème régler.

• Télécharge et installe CCleaner Slim.
• Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
• Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.

Tu as des pubs sur tous les sites ?

--> Il n'est pas du tout à jour donc mets-le à jour et refais un scan.

Tes pubs viennent de là, supprime les infections trouvées.

• Relance MBAM, va dans Quarantaine et supprime tout.

• Refais un scan RSIT et poste le rapport log.

Ça a l'air bon.

1/

• Désinstalle HijackThis.

• Télécharge ToolsCleaner2 sur ton Bureau.
• Clique droit sur ToolsCleaner2.exe et choisis Exécuter en tant qu'administrateur.
• Clique sur Recherche et laisse le scan agir.
• Clique sur Suppression pour finaliser.
• Tu peux, si tu le souhaites, te servir des Options Facultatives.
• Clique sur Quitter pour obtenir le rapport.
• Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

2/

• Télécharge et installe CCleaner Slim.
• Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
• Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.

3/

• Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

==Prévention==

Réactive l'UAC si ce n'est pas déjà fait.

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

--> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :

• Clique, dans ton premier message, sur le bouton Editer .
• Ajoute la mention [Résolu] devant le titre.
• Clique ensuite sur Valider votre message.

Sois plus vigilant(e) sur Internet

Tu peux supprimer ToolsCleaner.