Help virus sur pc resolu

Bonjour,

Tu es infecté.

Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

Double-clique sur RSIT.exe afin de lancer le programme.
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

Clique sur Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

Logfile of random's system information tool 1.06 (written by random/random)
Run by sophie at 2009-08-03 19:08:43
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1
System drive C: has 249 GB (85%) free of 292 GB
Total RAM: 2814 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:08:48, on 03/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Micro Application\LauncherMA.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\System32\wsqmcons.exe
C:\Users\sophie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BEH42ASJ\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\sophie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Setresolution] C:\ACER\config\1366x768.cmd
O4 - HKLM\..\Run: [MontiorGeo] c:\Acer\MonitorGeo.cmd
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8606 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C746095F-22C0-461D-92C6-6A2ED3783CC5}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\partner.dll [2009-07-29 157168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll [2009-07-29 736240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-02 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-02 92704]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"eRecoveryService"= []
"UpdateP2GoShortCut"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"UpdatePSTShortCut"=C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2008-09-24 210216]
"WarReg_PopUp"=C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe [2008-11-04 57344]
"Setresolution"=C:\ACER\config\1366x768.cmd []
"MontiorGeo"=c:\Acer\MonitorGeo.cmd []
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-05-08 2780432]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-07-10 195072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Users\sophie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-08-03 19:08:43 ----D---- C:\rsit
2009-08-03 12:01:41 ----D---- C:\ProgramData\BigFishSavedGames
2009-08-03 09:50:00 ----D---- C:\Program Files\Margrave Manor 2 - Le Bateau Disparu
2009-08-02 18:14:02 ----D---- C:\Users\sophie\AppData\Roaming\Anabel
2009-08-02 17:21:39 ----D---- C:\Program Files\Trend Micro
2009-08-02 10:13:39 ----D---- C:\Users\sophie\AppData\Roaming\Micro Application
2009-08-02 10:13:07 ----D---- C:\ProgramData\Micro Application
2009-08-02 10:04:07 ----D---- C:\Program Files\Micro Application
2009-08-01 22:59:19 ----D---- C:\Users\sophie\AppData\Roaming\cerasus.media
2009-08-01 10:19:11 ----D---- C:\ProgramData\BigFishv1005fr
2009-07-31 20:26:51 ----D---- C:\Users\sophie\AppData\Roaming\BigFishv1005
2009-07-31 14:47:39 ----D---- C:\ProgramData\QuickClick
2009-07-31 14:47:39 ----D---- C:\ProgramData\Product
2009-07-31 13:21:32 ----D---- C:\ProgramData\Alawar Stargaze
2009-07-31 10:49:26 ----D---- C:\Users\sophie\AppData\Roaming\Flood Light Games
2009-07-31 10:49:26 ----D---- C:\ProgramData\Flood Light Games
2009-07-31 08:46:21 ----D---- C:\Users\sophie\AppData\Roaming\FloodLightGames
2009-07-31 08:46:21 ----D---- C:\ProgramData\FloodLightGames
2009-07-30 21:36:24 ----D---- C:\ProgramData\AdventureChronicles1
2009-07-30 21:00:53 ----A---- C:\Windows\wininit.ini
2009-07-30 18:23:16 ----D---- C:\Users\sophie\AppData\Roaming\Abra Academy2
2009-07-30 15:14:30 ----D---- C:\Users\sophie\AppData\Roaming\CyberLink
2009-07-30 13:45:14 ----D---- C:\Program Files\MSXML 4.0
2009-07-30 11:05:52 ----D---- C:\Program Files\bfgclient
2009-07-30 11:04:49 ----D---- C:\BigFishGamesCache
2009-07-30 10:34:42 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-07-30 10:27:13 ----D---- C:\Users\sophie\AppData\Roaming\Skinux
2009-07-30 10:24:58 ----ASH---- C:\Users\sophie\AppData\Roaming\desktop.ini
2009-07-30 10:24:11 ----D---- C:\ProgramData\Apple Computer
2009-07-30 10:24:11 ----D---- C:\Program Files\QuickTime
2009-07-30 10:23:14 ----D---- C:\Users\sophie\AppData\Roaming\Arcsoft
2009-07-30 10:23:11 ----D---- C:\ProgramData\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\ArcSoft
2009-07-30 10:21:12 ----D---- C:\Program Files\Common Files\Kodak
2009-07-30 10:21:04 ----D---- C:\Program Files\Common Files\MSSoap
2009-07-30 10:21:03 ----D---- C:\Program Files\Kodak
2009-07-30 10:15:58 ----D---- C:\ProgramData\Kodak
2009-07-29 23:04:15 ----D---- C:\Users\sophie\AppData\Roaming\WildTangent
2009-07-29 22:10:19 ----D---- C:\Users\sophie\AppData\Roaming\Windows Live Writer
2009-07-29 22:03:40 ----D---- C:\ProgramData\Avira
2009-07-29 22:03:40 ----D---- C:\Program Files\Avira
2009-07-29 21:22:44 ----D---- C:\ProgramData\LogiShrd
2009-07-29 21:22:43 ----D---- C:\Program Files\Logitech
2009-07-29 21:20:37 ----D---- C:\Users\sophie\AppData\Roaming\Macromedia
2009-07-29 21:13:03 ----D---- C:\Users\sophie\AppData\Roaming\Adobe
2009-07-29 21:12:56 ----D---- C:\Users\sophie\AppData\Roaming\Google
2009-07-29 20:40:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-07-29 20:40:49 ----A---- C:\Windows\system32\infocardapi.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardres.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardagt.exe
2009-07-29 20:40:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-07-29 20:40:45 ----A---- C:\Windows\system32\PresentationHost.exe
2009-07-29 20:37:45 ----A---- C:\Windows\system32\dfshim.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\netfxperf.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\mscoree.dll
2009-07-29 20:37:35 ----A---- C:\Windows\system32\mscorier.dll
2009-07-29 20:37:33 ----A---- C:\Windows\system32\mscories.dll
2009-07-29 20:37:16 ----D---- C:\Program Files\Common Files\logishrd
2009-07-29 20:33:45 ----A---- C:\Windows\system32\occache.dll
2009-07-29 20:33:45 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\mstime.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieencode.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\rpcss.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\sdohlp.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasrecst.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iashost.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasdatastore.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasads.dll
2009-07-29 20:33:20 ----A---- C:\Windows\system32\winhttp.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\wersvc.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\Faultrep.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\secur32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\lsasrv.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\kernel32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\apilogen.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\amxread.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\xolehlp.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\msdtcprx.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\t2embed.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\fontsub.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\atmfd.dll
2009-07-29 20:33:14 ----A---- C:\Windows\explorer.exe
2009-07-29 20:33:13 ----A---- C:\Windows\system32\dciman32.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\wmp.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-07-29 20:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-07-29 20:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-07-29 20:33:09 ----A---- C:\Windows\system32\schannel.dll
2009-07-29 20:33:08 ----A---- C:\Windows\system32\localspl.dll
2009-07-29 20:31:57 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-07-29 20:31:16 ----A---- C:\Windows\system32\rpcrt4.dll
2009-07-29 20:29:57 ----D---- C:\Users\sophie\AppData\Roaming\Identities
2009-07-29 20:28:38 ----D---- C:\ProgramData\Partner
2009-07-29 20:28:29 ----HD---- C:\ACERSW
2009-07-29 20:28:12 ----D---- C:\ProgramData\Google
2009-07-29 20:27:54 ----SD---- C:\Users\sophie\AppData\Roaming\Microsoft
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wups2.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wucltux.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuauclt.exe
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wups.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wudriver.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wuapi.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuwebv.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuapp.exe
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Modèles
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Menu Démarrer
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Favoris
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Bureau
2009-07-29 20:24:55 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-08-03 19:08:48 ----D---- C:\Windows\Prefetch
2009-08-03 19:08:45 ----D---- C:\Windows\Temp
2009-08-03 16:23:41 ----D---- C:\Windows\System32
2009-08-03 16:23:41 ----D---- C:\Windows\inf
2009-08-03 16:23:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-03 13:29:46 ----D---- C:\ProgramData\WildTangent
2009-08-03 13:29:29 ----D---- C:\Program Files\eMachines Games
2009-08-03 12:02:10 ----RD---- C:\Program Files
2009-08-03 12:01:41 ----HD---- C:\ProgramData
2009-08-03 12:01:34 ----AD---- C:\ProgramData\Temp
2009-08-03 11:23:50 ----SHD---- C:\System Volume Information
2009-08-02 10:13:28 ----SHD---- C:\Windows\Installer
2009-08-02 10:04:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-02 10:04:06 ----D---- C:\Windows\system32\catroot2
2009-08-01 10:08:58 ----D---- C:\Windows\Debug
2009-08-01 10:04:13 ----D---- C:\Windows
2009-07-30 20:25:11 ----D---- C:\Windows\rescache
2009-07-30 19:36:15 ----D---- C:\Windows\system32\WDI
2009-07-30 19:28:52 ----D---- C:\Windows\Tasks
2009-07-30 19:28:52 ----D---- C:\Windows\system32\Tasks
2009-07-30 15:14:30 ----D---- C:\ProgramData\CyberLink
2009-07-30 13:45:28 ----D---- C:\Windows\winsxs
2009-07-30 13:02:44 ----D---- C:\Windows\Logs
2009-07-30 12:25:24 ----D---- C:\Windows\Microsoft.NET
2009-07-30 10:35:37 ----D---- C:\Windows\system32\drivers
2009-07-30 10:35:13 ----D---- C:\ProgramData\Microsoft Help
2009-07-30 10:34:02 ----RSD---- C:\Windows\assembly
2009-07-30 10:32:51 ----RSD---- C:\Windows\Fonts
2009-07-30 10:32:48 ----D---- C:\Program Files\Common Files\microsoft shared
2009-07-30 10:24:22 ----D---- C:\Program Files\Internet Explorer
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files
2009-07-30 10:22:24 ----D---- C:\Windows\system32\catroot
2009-07-30 10:22:02 ----D---- C:\Windows\Help
2009-07-29 22:02:42 ----D---- C:\Program Files\Windows Live
2009-07-29 21:51:48 ----D---- C:\ProgramData\Norton
2009-07-29 21:11:25 ----D---- C:\Windows\system32\LogFiles
2009-07-29 21:06:12 ----D---- C:\Windows\system32\fr-FR
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Media Player
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Mail
2009-07-29 21:06:10 ----D---- C:\Windows\system32\wbem
2009-07-29 21:06:09 ----D---- C:\Windows\system32\manifeststore
2009-07-29 21:06:09 ----D---- C:\Windows\AppPatch
2009-07-29 21:06:00 ----D---- C:\Windows\system32\XPSViewer
2009-07-29 21:06:00 ----D---- C:\Windows\system32\en-US
2009-07-29 20:37:16 ----D---- C:\Windows\twain_32
2009-07-29 20:37:07 ----D---- C:\Windows\SoftwareDistribution
2009-07-29 20:30:49 ----HD---- C:\ACER
2009-07-29 20:30:08 ----SHD---- C:\$Recycle.Bin
2009-07-29 20:29:24 ----D---- C:\Windows\system32\OEM
2009-07-29 20:28:33 ----D---- C:\Program Files\EMACHINES
2009-07-29 20:28:12 ----D---- C:\Program Files\Google
2009-07-29 20:27:37 ----RD---- C:\Users
2009-07-29 20:24:55 ----D---- C:\Program Files\Windows NT
2009-07-07 08:10:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-29 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-06-11 15392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2009-04-30 25624]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-03-25 1048480]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-02 7460320]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S1 SRTSP;SRTSP; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSP.SYS []
S1 SRTSPX;SRTSPX; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSPX.SYS []
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-05 1203808]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-29 185089]
R2 ETService;Empowering Technology Service; C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [2008-06-11 24576]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-04-30 154136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-02 118784]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
S2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 []
S3 GameConsoleService;GameConsoleService; C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe [2009-07-17 250616]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-29 138168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\partner.exe [2009-07-29 110576]

-----------------EOF-----------------info.txt logfile of random's system information tool 1.06 2009-08-03 19:08:49

======Uninstall list======

-->"C:\Program Files\eMachines Games\Bejeweled 2 Deluxe\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Cake Mania\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Chicken Invaders 3 - Revenge of the Yolk\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Diner Dash\Uninstall.exe"
-->"C:\Program Files\eMachines Games\eMachines Game Console\Uninstall.exe"
-->"C:\Program Files\eMachines Games\FATE\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Hot Dish\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Penguins!\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Polar Bowler\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Zuma Deluxe\Uninstall.exe"
-->"C:\Program Files\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
3 Days - Zoo Mystery-->"C:\Program Files\eMachines Games\3 Days - Zoo Mystery\Uninstall.exe"
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems PCI-SV92EX Soft Modem-->agrsmdel
ArcSoft Print Creations - Album Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1AlbumPage
ArcSoft Print Creations - Funhouse-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Funhouse
ArcSoft Print Creations - Greeting Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1GreetingCard
ArcSoft Print Creations - Photo Book-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1PhotoBook
ArcSoft Print Creations - Photo Calendar-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Calendar
ArcSoft Print Creations - Scrapbook-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1ScrapBook
ArcSoft Print Creations - Slimline Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Slimline
ArcSoft Print Creations-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
CCScore-->MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" -uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink PowerDVD-->"C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
eMachines Games-->"C:\Program Files\eMachines Games\Uninstall.exe"
eMachines Recovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
ESSBrwr-->MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
ESSCDBK-->MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
ESScore-->MsiExec.exe /I{42938595-0D83-404D-9F73-F8177FDD531A}
ESSgui-->MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
ESSini-->MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
ESSPCD-->MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
ESSPDock-->MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
ESSTOOLS-->MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
essvatgt-->MsiExec.exe /I{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
fflink-->MsiExec.exe /I{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Incaball-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E9D6B81-2BEB-47DA-AF7B-5E2FDD85A866}\Setup.exe" -l0x40c
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LauncherMA-->MsiExec.exe /X{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
Logiciel Kodak EasyShare-->C:\ProgramData\Kodak\EasyShareSetup\$SETUP_140001_19563a\Setup.exe /APR-REMOVE
Logitech Webcam Software-->MsiExec.exe /I{AC96671C-2001-432C-9826-5266D84EF1DC}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
netbrdg-->MsiExec.exe /I{4537EA4B-F603-4181-89FB-2953FC695AB1}
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
OfotoXMI-->MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
SHASTA-->MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
skin0001-->MsiExec.exe /I{5316DFC9-CE99-4458-9AB3-E8726EDE0210}
SKINXSDK-->MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
staticcr-->MsiExec.exe /I{8943CE61-53BD-475E-90E1-A580869E98A2}
tooltips-->MsiExec.exe /I{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VPRINTOL-->MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
WIRELESS-->MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 31737
Source Name: Service Control Manager
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 31762
Source Name: Service Control Manager
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 31795
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090803141816.294503-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 31839
Source Name: Service Control Manager
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 31865
Source Name: Service Control Manager
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: machine
Event Code: 33
Message: La création du contexte d’activation a échoué pour « C:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\WksWP.exe ». Assembly dépendant msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
Record Number: 2189
Source Name: SideBySide
Time Written: 20090803135823.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 64
Message: Le certificat de Système local avec l’empreinte numérique 4e 7c 54 42 2a 43 1a db de 20 36 77 0e b2 fa 58 fb 58 cd 44 est sur le point d’expirer ou a déjà expiré.
Record Number: 2190
Source Name: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Time Written: 20090803135855.000000-000
Event Type: Avertissement
User:

Computer Name: machine
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2192
Source Name: Microsoft-Windows-WMI
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 64
Message: Le certificat de Système local avec l’empreinte numérique 4e 7c 54 42 2a 43 1a db de 20 36 77 0e b2 fa 58 fb 58 cd 44 est sur le point d’expirer ou a déjà expiré.
Record Number: 2217
Source Name: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Time Written: 20090803141926.000000-000
Event Type: Avertissement
User:

Computer Name: machine
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2219
Source Name: Microsoft-Windows-WMI
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

=====Security event log=====

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3213
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170847.983303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3214
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.013303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3215
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.043303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3216
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.073303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3217
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.101303-000
Event Type: Échec de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-08-03 19:08:49

======Uninstall list======

-->"C:\Program Files\eMachines Games\Bejeweled 2 Deluxe\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Cake Mania\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Chicken Invaders 3 - Revenge of the Yolk\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Diner Dash\Uninstall.exe"
-->"C:\Program Files\eMachines Games\eMachines Game Console\Uninstall.exe"
-->"C:\Program Files\eMachines Games\FATE\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Hot Dish\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Penguins!\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Polar Bowler\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Zuma Deluxe\Uninstall.exe"
-->"C:\Program Files\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
3 Days - Zoo Mystery-->"C:\Program Files\eMachines Games\3 Days - Zoo Mystery\Uninstall.exe"
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems PCI-SV92EX Soft Modem-->agrsmdel
ArcSoft Print Creations - Album Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1AlbumPage
ArcSoft Print Creations - Funhouse-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Funhouse
ArcSoft Print Creations - Greeting Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1GreetingCard
ArcSoft Print Creations - Photo Book-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1PhotoBook
ArcSoft Print Creations - Photo Calendar-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Calendar
ArcSoft Print Creations - Scrapbook-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1ScrapBook
ArcSoft Print Creations - Slimline Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Slimline
ArcSoft Print Creations-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
CCScore-->MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" -uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink PowerDVD-->"C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
eMachines Games-->"C:\Program Files\eMachines Games\Uninstall.exe"
eMachines Recovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
ESSBrwr-->MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
ESSCDBK-->MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
ESScore-->MsiExec.exe /I{42938595-0D83-404D-9F73-F8177FDD531A}
ESSgui-->MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
ESSini-->MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
ESSPCD-->MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
ESSPDock-->MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
ESSTOOLS-->MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
essvatgt-->MsiExec.exe /I{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
fflink-->MsiExec.exe /I{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Incaball-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E9D6B81-2BEB-47DA-AF7B-5E2FDD85A866}\Setup.exe" -l0x40c
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LauncherMA-->MsiExec.exe /X{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
Logiciel Kodak EasyShare-->C:\ProgramData\Kodak\EasyShareSetup\$SETUP_140001_19563a\Setup.exe /APR-REMOVE
Logitech Webcam Software-->MsiExec.exe /I{AC96671C-2001-432C-9826-5266D84EF1DC}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
netbrdg-->MsiExec.exe /I{4537EA4B-F603-4181-89FB-2953FC695AB1}
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
OfotoXMI-->MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
SHASTA-->MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
skin0001-->MsiExec.exe /I{5316DFC9-CE99-4458-9AB3-E8726EDE0210}
SKINXSDK-->MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
staticcr-->MsiExec.exe /I{8943CE61-53BD-475E-90E1-A580869E98A2}
tooltips-->MsiExec.exe /I{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VPRINTOL-->MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
WIRELESS-->MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 31737
Source Name: Service Control Manager
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 31762
Source Name: Service Control Manager
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 31795
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090803141816.294503-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 31839
Source Name: Service Control Manager
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 31865
Source Name: Service Control Manager
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: machine
Event Code: 33
Message: La création du contexte d’activation a échoué pour « C:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\WksWP.exe ». Assembly dépendant msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
Record Number: 2189
Source Name: SideBySide
Time Written: 20090803135823.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 64
Message: Le certificat de Système local avec l’empreinte numérique 4e 7c 54 42 2a 43 1a db de 20 36 77 0e b2 fa 58 fb 58 cd 44 est sur le point d’expirer ou a déjà expiré.
Record Number: 2190
Source Name: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Time Written: 20090803135855.000000-000
Event Type: Avertissement
User:

Computer Name: machine
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2192
Source Name: Microsoft-Windows-WMI
Time Written: 20090803140041.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 64
Message: Le certificat de Système local avec l’empreinte numérique 4e 7c 54 42 2a 43 1a db de 20 36 77 0e b2 fa 58 fb 58 cd 44 est sur le point d’expirer ou a déjà expiré.
Record Number: 2217
Source Name: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Time Written: 20090803141926.000000-000
Event Type: Avertissement
User:

Computer Name: machine
Event Code: 10
Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Record Number: 2219
Source Name: Microsoft-Windows-WMI
Time Written: 20090803141958.000000-000
Event Type: Erreur
User:

=====Security event log=====

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3213
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170847.983303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3214
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.013303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3215
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.043303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3216
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.073303-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3217
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090803170848.101303-000
Event Type: Échec de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

-----------------EOF-----------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by sophie at 2009-08-03 19:08:43
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1
System drive C: has 249 GB (85%) free of 292 GB
Total RAM: 2814 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:08:48, on 03/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Micro Application\LauncherMA.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\System32\wsqmcons.exe
C:\Users\sophie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BEH42ASJ\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\sophie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Setresolution] C:\ACER\config\1366x768.cmd
O4 - HKLM\..\Run: [MontiorGeo] c:\Acer\MonitorGeo.cmd
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8606 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C746095F-22C0-461D-92C6-6A2ED3783CC5}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\partner.dll [2009-07-29 157168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll [2009-07-29 736240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-02 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-02 92704]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"eRecoveryService"= []
"UpdateP2GoShortCut"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"UpdatePSTShortCut"=C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2008-09-24 210216]
"WarReg_PopUp"=C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe [2008-11-04 57344]
"Setresolution"=C:\ACER\config\1366x768.cmd []
"MontiorGeo"=c:\Acer\MonitorGeo.cmd []
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-05-08 2780432]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-07-10 195072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Users\sophie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-08-03 19:08:43 ----D---- C:\rsit
2009-08-03 12:01:41 ----D---- C:\ProgramData\BigFishSavedGames
2009-08-03 09:50:00 ----D---- C:\Program Files\Margrave Manor 2 - Le Bateau Disparu
2009-08-02 18:14:02 ----D---- C:\Users\sophie\AppData\Roaming\Anabel
2009-08-02 17:21:39 ----D---- C:\Program Files\Trend Micro
2009-08-02 10:13:39 ----D---- C:\Users\sophie\AppData\Roaming\Micro Application
2009-08-02 10:13:07 ----D---- C:\ProgramData\Micro Application
2009-08-02 10:04:07 ----D---- C:\Program Files\Micro Application
2009-08-01 22:59:19 ----D---- C:\Users\sophie\AppData\Roaming\cerasus.media
2009-08-01 10:19:11 ----D---- C:\ProgramData\BigFishv1005fr
2009-07-31 20:26:51 ----D---- C:\Users\sophie\AppData\Roaming\BigFishv1005
2009-07-31 14:47:39 ----D---- C:\ProgramData\QuickClick
2009-07-31 14:47:39 ----D---- C:\ProgramData\Product
2009-07-31 13:21:32 ----D---- C:\ProgramData\Alawar Stargaze
2009-07-31 10:49:26 ----D---- C:\Users\sophie\AppData\Roaming\Flood Light Games
2009-07-31 10:49:26 ----D---- C:\ProgramData\Flood Light Games
2009-07-31 08:46:21 ----D---- C:\Users\sophie\AppData\Roaming\FloodLightGames
2009-07-31 08:46:21 ----D---- C:\ProgramData\FloodLightGames
2009-07-30 21:36:24 ----D---- C:\ProgramData\AdventureChronicles1
2009-07-30 21:00:53 ----A---- C:\Windows\wininit.ini
2009-07-30 18:23:16 ----D---- C:\Users\sophie\AppData\Roaming\Abra Academy2
2009-07-30 15:14:30 ----D---- C:\Users\sophie\AppData\Roaming\CyberLink
2009-07-30 13:45:14 ----D---- C:\Program Files\MSXML 4.0
2009-07-30 11:05:52 ----D---- C:\Program Files\bfgclient
2009-07-30 11:04:49 ----D---- C:\BigFishGamesCache
2009-07-30 10:34:42 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-07-30 10:27:13 ----D---- C:\Users\sophie\AppData\Roaming\Skinux
2009-07-30 10:24:58 ----ASH---- C:\Users\sophie\AppData\Roaming\desktop.ini
2009-07-30 10:24:11 ----D---- C:\ProgramData\Apple Computer
2009-07-30 10:24:11 ----D---- C:\Program Files\QuickTime
2009-07-30 10:23:14 ----D---- C:\Users\sophie\AppData\Roaming\Arcsoft
2009-07-30 10:23:11 ----D---- C:\ProgramData\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\ArcSoft
2009-07-30 10:21:12 ----D---- C:\Program Files\Common Files\Kodak
2009-07-30 10:21:04 ----D---- C:\Program Files\Common Files\MSSoap
2009-07-30 10:21:03 ----D---- C:\Program Files\Kodak
2009-07-30 10:15:58 ----D---- C:\ProgramData\Kodak
2009-07-29 23:04:15 ----D---- C:\Users\sophie\AppData\Roaming\WildTangent
2009-07-29 22:10:19 ----D---- C:\Users\sophie\AppData\Roaming\Windows Live Writer
2009-07-29 22:03:40 ----D---- C:\ProgramData\Avira
2009-07-29 22:03:40 ----D---- C:\Program Files\Avira
2009-07-29 21:22:44 ----D---- C:\ProgramData\LogiShrd
2009-07-29 21:22:43 ----D---- C:\Program Files\Logitech
2009-07-29 21:20:37 ----D---- C:\Users\sophie\AppData\Roaming\Macromedia
2009-07-29 21:13:03 ----D---- C:\Users\sophie\AppData\Roaming\Adobe
2009-07-29 21:12:56 ----D---- C:\Users\sophie\AppData\Roaming\Google
2009-07-29 20:40:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-07-29 20:40:49 ----A---- C:\Windows\system32\infocardapi.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardres.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardagt.exe
2009-07-29 20:40:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-07-29 20:40:45 ----A---- C:\Windows\system32\PresentationHost.exe
2009-07-29 20:37:45 ----A---- C:\Windows\system32\dfshim.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\netfxperf.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\mscoree.dll
2009-07-29 20:37:35 ----A---- C:\Windows\system32\mscorier.dll
2009-07-29 20:37:33 ----A---- C:\Windows\system32\mscories.dll
2009-07-29 20:37:16 ----D---- C:\Program Files\Common Files\logishrd
2009-07-29 20:33:45 ----A---- C:\Windows\system32\occache.dll
2009-07-29 20:33:45 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\mstime.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieencode.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\rpcss.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\sdohlp.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasrecst.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iashost.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasdatastore.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasads.dll
2009-07-29 20:33:20 ----A---- C:\Windows\system32\winhttp.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\wersvc.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\Faultrep.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\secur32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\lsasrv.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\kernel32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\apilogen.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\amxread.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\xolehlp.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\msdtcprx.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\t2embed.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\fontsub.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\atmfd.dll
2009-07-29 20:33:14 ----A---- C:\Windows\explorer.exe
2009-07-29 20:33:13 ----A---- C:\Windows\system32\dciman32.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\wmp.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-07-29 20:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-07-29 20:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-07-29 20:33:09 ----A---- C:\Windows\system32\schannel.dll
2009-07-29 20:33:08 ----A---- C:\Windows\system32\localspl.dll
2009-07-29 20:31:57 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-07-29 20:31:16 ----A---- C:\Windows\system32\rpcrt4.dll
2009-07-29 20:29:57 ----D---- C:\Users\sophie\AppData\Roaming\Identities
2009-07-29 20:28:38 ----D---- C:\ProgramData\Partner
2009-07-29 20:28:29 ----HD---- C:\ACERSW
2009-07-29 20:28:12 ----D---- C:\ProgramData\Google
2009-07-29 20:27:54 ----SD---- C:\Users\sophie\AppData\Roaming\Microsoft
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wups2.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wucltux.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuauclt.exe
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wups.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wudriver.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wuapi.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuwebv.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuapp.exe
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Modèles
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Menu Démarrer
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Favoris
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Bureau
2009-07-29 20:24:55 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-08-03 19:08:48 ----D---- C:\Windows\Prefetch
2009-08-03 19:08:45 ----D---- C:\Windows\Temp
2009-08-03 16:23:41 ----D---- C:\Windows\System32
2009-08-03 16:23:41 ----D---- C:\Windows\inf
2009-08-03 16:23:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-03 13:29:46 ----D---- C:\ProgramData\WildTangent
2009-08-03 13:29:29 ----D---- C:\Program Files\eMachines Games
2009-08-03 12:02:10 ----RD---- C:\Program Files
2009-08-03 12:01:41 ----HD---- C:\ProgramData
2009-08-03 12:01:34 ----AD---- C:\ProgramData\Temp
2009-08-03 11:23:50 ----SHD---- C:\System Volume Information
2009-08-02 10:13:28 ----SHD---- C:\Windows\Installer
2009-08-02 10:04:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-02 10:04:06 ----D---- C:\Windows\system32\catroot2
2009-08-01 10:08:58 ----D---- C:\Windows\Debug
2009-08-01 10:04:13 ----D---- C:\Windows
2009-07-30 20:25:11 ----D---- C:\Windows\rescache
2009-07-30 19:36:15 ----D---- C:\Windows\system32\WDI
2009-07-30 19:28:52 ----D---- C:\Windows\Tasks
2009-07-30 19:28:52 ----D---- C:\Windows\system32\Tasks
2009-07-30 15:14:30 ----D---- C:\ProgramData\CyberLink
2009-07-30 13:45:28 ----D---- C:\Windows\winsxs
2009-07-30 13:02:44 ----D---- C:\Windows\Logs
2009-07-30 12:25:24 ----D---- C:\Windows\Microsoft.NET
2009-07-30 10:35:37 ----D---- C:\Windows\system32\drivers
2009-07-30 10:35:13 ----D---- C:\ProgramData\Microsoft Help
2009-07-30 10:34:02 ----RSD---- C:\Windows\assembly
2009-07-30 10:32:51 ----RSD---- C:\Windows\Fonts
2009-07-30 10:32:48 ----D---- C:\Program Files\Common Files\microsoft shared
2009-07-30 10:24:22 ----D---- C:\Program Files\Internet Explorer
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files
2009-07-30 10:22:24 ----D---- C:\Windows\system32\catroot
2009-07-30 10:22:02 ----D---- C:\Windows\Help
2009-07-29 22:02:42 ----D---- C:\Program Files\Windows Live
2009-07-29 21:51:48 ----D---- C:\ProgramData\Norton
2009-07-29 21:11:25 ----D---- C:\Windows\system32\LogFiles
2009-07-29 21:06:12 ----D---- C:\Windows\system32\fr-FR
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Media Player
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Mail
2009-07-29 21:06:10 ----D---- C:\Windows\system32\wbem
2009-07-29 21:06:09 ----D---- C:\Windows\system32\manifeststore
2009-07-29 21:06:09 ----D---- C:\Windows\AppPatch
2009-07-29 21:06:00 ----D---- C:\Windows\system32\XPSViewer
2009-07-29 21:06:00 ----D---- C:\Windows\system32\en-US
2009-07-29 20:37:16 ----D---- C:\Windows\twain_32
2009-07-29 20:37:07 ----D---- C:\Windows\SoftwareDistribution
2009-07-29 20:30:49 ----HD---- C:\ACER
2009-07-29 20:30:08 ----SHD---- C:\$Recycle.Bin
2009-07-29 20:29:24 ----D---- C:\Windows\system32\OEM
2009-07-29 20:28:33 ----D---- C:\Program Files\EMACHINES
2009-07-29 20:28:12 ----D---- C:\Program Files\Google
2009-07-29 20:27:37 ----RD---- C:\Users
2009-07-29 20:24:55 ----D---- C:\Program Files\Windows NT
2009-07-07 08:10:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-29 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-06-11 15392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2009-04-30 25624]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-03-25 1048480]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-02 7460320]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S1 SRTSP;SRTSP; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSP.SYS []
S1 SRTSPX;SRTSPX; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSPX.SYS []
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-05 1203808]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-29 185089]
R2 ETService;Empowering Technology Service; C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [2008-06-11 24576]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-04-30 154136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-02 118784]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
S2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 []
S3 GameConsoleService;GameConsoleService; C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe [2009-07-17 250616]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-29 138168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\partner.exe [2009-07-29 110576]

-----------------EOF-----------------

Télécharge OTM (OldTimer) sur ton Bureau.

Clique droit sur OTM.exe et choisis Exécuter en tant qu'administrateur.

Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:services
Partner Service

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

:files
C:\ProgramData\Partner

:commands
[purity]
[emptytemp]
[reboot]

Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

Clique maintenant sur le bouton MoveIt! puis ferme OTM.

---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
---> Le nom du rapport correspond au moment de sa création : date_heure.log

J'ai fais exactement ce que tu as dit mais une fois que je clique sur le bouton MOVEIT tout disparait de mon écran d'ordinateur.Il me reste plus que l'écran de fond et rien ne se passe ensuite.Et quand je rallume mon ordinateur,je regarde le dossier :C:/_OTM/MovedFiles/ et il me marque que le dossier est vide.
Est-ce normale?Que dois-je faire?
Merci d'avance.

Refais un scan RSIT et poste le rapport log.

Logfile of random's system information tool 1.06 (written by random/random)
Run by sophie at 2009-08-04 18:37:18
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1
System drive C: has 249 GB (85%) free of 292 GB
Total RAM: 2814 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:37:26, on 04/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Micro Application\LauncherMA.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\sophie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BEH42ASJ\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\sophie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Setresolution] C:\ACER\config\1366x768.cmd
O4 - HKLM\..\Run: [MontiorGeo] c:\Acer\MonitorGeo.cmd
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8572 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C746095F-22C0-461D-92C6-6A2ED3783CC5}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\partner.dll [2009-07-29 157168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll [2009-07-29 736240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-02 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-02 92704]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"eRecoveryService"= []
"UpdateP2GoShortCut"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"UpdatePSTShortCut"=C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2008-09-24 210216]
"WarReg_PopUp"=C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe [2008-11-04 57344]
"Setresolution"=C:\ACER\config\1366x768.cmd []
"MontiorGeo"=c:\Acer\MonitorGeo.cmd []
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-05-08 2780432]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-07-10 195072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Users\sophie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-08-04 16:58:48 ----D---- C:\_OTM
2009-08-04 08:39:17 ----D---- C:\Users\sophie\AppData\Roaming\YoudaGames
2009-08-03 19:08:43 ----D---- C:\rsit
2009-08-03 12:01:41 ----D---- C:\ProgramData\BigFishSavedGames
2009-08-03 09:50:00 ----D---- C:\Program Files\Margrave Manor 2 - Le Bateau Disparu
2009-08-02 18:14:02 ----D---- C:\Users\sophie\AppData\Roaming\Anabel
2009-08-02 17:21:39 ----D---- C:\Program Files\Trend Micro
2009-08-02 10:13:39 ----D---- C:\Users\sophie\AppData\Roaming\Micro Application
2009-08-02 10:13:07 ----D---- C:\ProgramData\Micro Application
2009-08-02 10:04:07 ----D---- C:\Program Files\Micro Application
2009-08-01 22:59:19 ----D---- C:\Users\sophie\AppData\Roaming\cerasus.media
2009-08-01 10:19:11 ----D---- C:\ProgramData\BigFishv1005fr
2009-07-31 20:26:51 ----D---- C:\Users\sophie\AppData\Roaming\BigFishv1005
2009-07-31 14:47:39 ----D---- C:\ProgramData\QuickClick
2009-07-31 14:47:39 ----D---- C:\ProgramData\Product
2009-07-31 13:21:32 ----D---- C:\ProgramData\Alawar Stargaze
2009-07-31 10:49:26 ----D---- C:\Users\sophie\AppData\Roaming\Flood Light Games
2009-07-31 10:49:26 ----D---- C:\ProgramData\Flood Light Games
2009-07-31 08:46:21 ----D---- C:\Users\sophie\AppData\Roaming\FloodLightGames
2009-07-31 08:46:21 ----D---- C:\ProgramData\FloodLightGames
2009-07-30 21:36:24 ----D---- C:\ProgramData\AdventureChronicles1
2009-07-30 21:00:53 ----A---- C:\Windows\wininit.ini
2009-07-30 18:23:16 ----D---- C:\Users\sophie\AppData\Roaming\Abra Academy2
2009-07-30 15:14:30 ----D---- C:\Users\sophie\AppData\Roaming\CyberLink
2009-07-30 13:45:14 ----D---- C:\Program Files\MSXML 4.0
2009-07-30 11:05:52 ----D---- C:\Program Files\bfgclient
2009-07-30 11:04:49 ----D---- C:\BigFishGamesCache
2009-07-30 10:34:42 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-07-30 10:27:13 ----D---- C:\Users\sophie\AppData\Roaming\Skinux
2009-07-30 10:24:58 ----ASH---- C:\Users\sophie\AppData\Roaming\desktop.ini
2009-07-30 10:24:11 ----D---- C:\ProgramData\Apple Computer
2009-07-30 10:24:11 ----D---- C:\Program Files\QuickTime
2009-07-30 10:23:14 ----D---- C:\Users\sophie\AppData\Roaming\Arcsoft
2009-07-30 10:23:11 ----D---- C:\ProgramData\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\ArcSoft
2009-07-30 10:21:12 ----D---- C:\Program Files\Common Files\Kodak
2009-07-30 10:21:04 ----D---- C:\Program Files\Common Files\MSSoap
2009-07-30 10:21:03 ----D---- C:\Program Files\Kodak
2009-07-30 10:15:58 ----D---- C:\ProgramData\Kodak
2009-07-29 23:04:15 ----D---- C:\Users\sophie\AppData\Roaming\WildTangent
2009-07-29 22:10:19 ----D---- C:\Users\sophie\AppData\Roaming\Windows Live Writer
2009-07-29 22:03:40 ----D---- C:\ProgramData\Avira
2009-07-29 22:03:40 ----D---- C:\Program Files\Avira
2009-07-29 21:22:44 ----D---- C:\ProgramData\LogiShrd
2009-07-29 21:22:43 ----D---- C:\Program Files\Logitech
2009-07-29 21:20:37 ----D---- C:\Users\sophie\AppData\Roaming\Macromedia
2009-07-29 21:13:03 ----D---- C:\Users\sophie\AppData\Roaming\Adobe
2009-07-29 21:12:56 ----D---- C:\Users\sophie\AppData\Roaming\Google
2009-07-29 20:40:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-07-29 20:40:49 ----A---- C:\Windows\system32\infocardapi.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardres.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardagt.exe
2009-07-29 20:40:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-07-29 20:40:45 ----A---- C:\Windows\system32\PresentationHost.exe
2009-07-29 20:37:45 ----A---- C:\Windows\system32\dfshim.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\netfxperf.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\mscoree.dll
2009-07-29 20:37:35 ----A---- C:\Windows\system32\mscorier.dll
2009-07-29 20:37:33 ----A---- C:\Windows\system32\mscories.dll
2009-07-29 20:37:16 ----D---- C:\Program Files\Common Files\logishrd
2009-07-29 20:33:45 ----A---- C:\Windows\system32\occache.dll
2009-07-29 20:33:45 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\mstime.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieencode.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\rpcss.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\sdohlp.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasrecst.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iashost.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasdatastore.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasads.dll
2009-07-29 20:33:20 ----A---- C:\Windows\system32\winhttp.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\wersvc.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\Faultrep.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\secur32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\lsasrv.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\kernel32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\apilogen.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\amxread.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\xolehlp.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\msdtcprx.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\t2embed.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\fontsub.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\atmfd.dll
2009-07-29 20:33:14 ----A---- C:\Windows\explorer.exe
2009-07-29 20:33:13 ----A---- C:\Windows\system32\dciman32.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\wmp.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-07-29 20:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-07-29 20:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-07-29 20:33:09 ----A---- C:\Windows\system32\schannel.dll
2009-07-29 20:33:08 ----A---- C:\Windows\system32\localspl.dll
2009-07-29 20:31:57 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-07-29 20:31:16 ----A---- C:\Windows\system32\rpcrt4.dll
2009-07-29 20:29:57 ----D---- C:\Users\sophie\AppData\Roaming\Identities
2009-07-29 20:28:38 ----D---- C:\ProgramData\Partner
2009-07-29 20:28:29 ----HD---- C:\ACERSW
2009-07-29 20:28:12 ----D---- C:\ProgramData\Google
2009-07-29 20:27:54 ----SD---- C:\Users\sophie\AppData\Roaming\Microsoft
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wups2.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wucltux.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuauclt.exe
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wups.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wudriver.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wuapi.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuwebv.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuapp.exe
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Modèles
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Menu Démarrer
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Favoris
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Bureau
2009-07-29 20:24:55 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-08-04 18:37:11 ----D---- C:\Windows\Temp
2009-08-04 18:36:17 ----D---- C:\Windows\Prefetch
2009-08-04 17:15:23 ----D---- C:\Windows\System32
2009-08-04 17:15:23 ----D---- C:\Windows\inf
2009-08-04 17:15:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-04 10:16:58 ----RD---- C:\Program Files
2009-08-04 10:16:47 ----AD---- C:\ProgramData\Temp
2009-08-04 06:51:56 ----SHD---- C:\System Volume Information
2009-08-03 13:29:46 ----D---- C:\ProgramData\WildTangent
2009-08-03 13:29:29 ----D---- C:\Program Files\eMachines Games
2009-08-03 12:01:41 ----HD---- C:\ProgramData
2009-08-02 10:13:28 ----SHD---- C:\Windows\Installer
2009-08-02 10:04:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-02 10:04:06 ----D---- C:\Windows\system32\catroot2
2009-08-01 10:08:58 ----D---- C:\Windows\Debug
2009-08-01 10:04:13 ----D---- C:\Windows
2009-07-30 20:25:11 ----D---- C:\Windows\rescache
2009-07-30 19:36:15 ----D---- C:\Windows\system32\WDI
2009-07-30 19:28:52 ----D---- C:\Windows\Tasks
2009-07-30 19:28:52 ----D---- C:\Windows\system32\Tasks
2009-07-30 15:14:30 ----D---- C:\ProgramData\CyberLink
2009-07-30 13:45:28 ----D---- C:\Windows\winsxs
2009-07-30 13:02:44 ----D---- C:\Windows\Logs
2009-07-30 12:25:24 ----D---- C:\Windows\Microsoft.NET
2009-07-30 10:35:37 ----D---- C:\Windows\system32\drivers
2009-07-30 10:35:13 ----D---- C:\ProgramData\Microsoft Help
2009-07-30 10:34:02 ----RSD---- C:\Windows\assembly
2009-07-30 10:32:51 ----RSD---- C:\Windows\Fonts
2009-07-30 10:32:48 ----D---- C:\Program Files\Common Files\microsoft shared
2009-07-30 10:24:22 ----D---- C:\Program Files\Internet Explorer
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files
2009-07-30 10:22:24 ----D---- C:\Windows\system32\catroot
2009-07-30 10:22:02 ----D---- C:\Windows\Help
2009-07-29 22:02:42 ----D---- C:\Program Files\Windows Live
2009-07-29 21:51:48 ----D---- C:\ProgramData\Norton
2009-07-29 21:11:25 ----D---- C:\Windows\system32\LogFiles
2009-07-29 21:06:12 ----D---- C:\Windows\system32\fr-FR
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Media Player
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Mail
2009-07-29 21:06:10 ----D---- C:\Windows\system32\wbem
2009-07-29 21:06:09 ----D---- C:\Windows\system32\manifeststore
2009-07-29 21:06:09 ----D---- C:\Windows\AppPatch
2009-07-29 21:06:00 ----D---- C:\Windows\system32\XPSViewer
2009-07-29 21:06:00 ----D---- C:\Windows\system32\en-US
2009-07-29 20:37:16 ----D---- C:\Windows\twain_32
2009-07-29 20:37:07 ----D---- C:\Windows\SoftwareDistribution
2009-07-29 20:30:49 ----HD---- C:\ACER
2009-07-29 20:30:08 ----SHD---- C:\$Recycle.Bin
2009-07-29 20:29:24 ----D---- C:\Windows\system32\OEM
2009-07-29 20:28:33 ----D---- C:\Program Files\EMACHINES
2009-07-29 20:28:12 ----D---- C:\Program Files\Google
2009-07-29 20:27:37 ----RD---- C:\Users
2009-07-29 20:24:55 ----D---- C:\Program Files\Windows NT
2009-07-07 08:10:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-29 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-06-11 15392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2009-04-30 25624]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-03-25 1048480]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-02 7460320]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S1 SRTSP;SRTSP; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSP.SYS []
S1 SRTSPX;SRTSPX; \??\C:\Windows\system32\drivers\NIS\1000000.07D\SRTSPX.SYS []
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-05 1203808]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-29 185089]
R2 ETService;Empowering Technology Service; C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [2008-06-11 24576]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-04-30 154136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-02 118784]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
S2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe /s Norton Internet Security /m C:\Program Files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll /prefetch:1 []
S3 GameConsoleService;GameConsoleService; C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe [2009-07-17 250616]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-29 138168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\partner.exe [2009-07-29 110576]

-----------------EOF-----------------

La procédure avec OTM n'a pas fonctionné.

Retente-la en mode sans échec.

File/Folder avenger.zip not found.
File/Folder avenger.exe not found.
File/Folder Avenger not found.
File/Folder avenger.txt not found.
File/Folder bfu.zip not found.
File/Folder BFU not found.
File/Folder combofix.exe not found.
File/Folder combo-fix.exe not found.
File/Folder Combo-Fix.sys not found.
File/Folder ComboFix not found.
File/Folder erdnt\subs not found.
File/Folder QooBox not found.
File/Folder ComboFix*.txt not found.
Service not present: catchme.
File/Folder catchme.exe not found.
File/Folder fdsv.exe not found.
File/Folder grep.exe not found.
File/Folder moveex.exe not found.
File/Folder nircmd.exe not found.
File/Folder sed.exe not found.
File/Folder swreg.exe not found.
File/Folder Swsc.exe not found.
File/Folder Swxcacls.exe not found.
File/Folder VFind.exe not found.
File/Folder WS2Fix.exe not found.
File/Folder zip.exe not found.
File/Folder tmp.reg not found.
File/Folder dds.scr not found.
File/Folder dds.pif not found.
File/Folder dds.com not found.
File/Folder dss.exe not found.
File/Folder Deckard not found.
File/Folder deljob.exe not found.
File/Folder deljob not found.
File/Folder logit.txt not found.
File/Folder FindAWF.exe not found.
File/Folder AWF.txt not found.
File/Folder fixwareout.exe not found.
File/Folder fixwareout not found.
File/Folder fsbl.exe not found.
File/Folder fsbl*.log not found.
File/Folder gmer.exe not found.
File/Folder gmer.dll not found.
File/Folder gmer.ini not found.
File/Folder gmer.log not found.
File/Folder gmer_uninstall.cmd not found.
File/Folder gmer.sys not found.
Service not present: gmer.
File/Folder haxfix.exe not found.
File/Folder haxfix.txt not found.
File/Folder killbox.exe not found.
File/Folder !Killbox not found.
File/Folder NoLop.exe not found.
File/Folder NoLop.txt not found.
File/Folder NoLopOLD.txt not found.
File/Folder delete.bat not found.
File/Folder OTListIt2.exe not found.
File/Folder OTListIt.txt not found.
File/Folder Extras.txt not found.
File/Folder _OTListIt not found.
File/Folder OTL.exe not found.
File/Folder _OTL not found.
File/Folder OTMoveIt.exe not found.
File/Folder OTMoveIt2.exe not found.
File/Folder OTMoveIt3.exe not found.
File/Folder OTM.exe not found.
File/Folder _OTMoveIt not found.
File/Folder _OTM not found.
File/Folder OTScanIt.exe not found.
File/Folder OTScanIt not found.
File/Folder OTScanIt2.exe not found.
File/Folder OTScanIt2 not found.
File/Folder OTS.exe not found.
File/Folder _OTScanIt not found.
File/Folder _OTS not found.
File/Folder OTViewIt.exe not found.
File/Folder OTViewIt.txt not found.
File/Folder rustbfix.exe not found.
File/Folder Rustbfix not found.
File/Folder Runscanner.zip not found.
File/Folder Runscanner.exe not found.
File/Folder Runscanner.net not found.
File/Folder *.run not found.
File/Folder Runscanner not found.
File/Folder sdfix.exe not found.
File/Folder SDFix not found.
File/Folder Silent Runners.vbs not found.
File/Folder SmitfraudFix.exe not found.
File/Folder SmitfraudFix not found.
File/Folder dumphive.exe not found.
File/Folder iedfix.exe not found.
File/Folder rapport.txt not found.
File/Folder vacfix.exe not found.
File/Folder vcclsid.exe not found.
File/Folder 404fix.exe not found.
File/Folder SysInsite not found.
File/Folder VundoFix.exe not found.
File/Folder VundoFix Backups not found.
File/Folder vundofix.txt not found.
File/Folder vundofix.vft not found.
File/Folder win32delfkil.exe not found.
File/Folder _backupD not found.
File/Folder windelf.txt not found.
File/Folder winpfind.exe not found.
File/Folder WinPfind not found.
File/Folder WinPFind3u.exe not found.
File/Folder WinPFind3u not found.
File/Folder WinPFind35u.exe not found.
File/Folder WinPFind35u not found.
File/Folder RSIT.exe not found.
File/Folder RSIT not found.
File/Folder LopSD.exe not found.
File/Folder lopR.txt not found.
File/Folder Lop SD not found.
File/Folder Rooter.exe not found.
File/Folder Rooter.txt not found.
File/Folder Rooter$ not found.
File/Folder cleanup.txt not found.
File delete failed. C:\Users\sophie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IPNCR3F\OTM[1].exe scheduled to be deleted on reboot.

Tu t'es trompé de bouton sur OTM.

Quand j'appuie sur moveit ,l'ordinateur s'eteint et il me reste que l'écran de fond.Et quand je regarde le dossier ensuite ,il est vide.
Que puis-je faire?
merci d'avance.

Tu as bien essayé en mode sans échec ?

excuse moi mais c'est quoi le mode sans echec?

Pour redémarrer en mode sans échec :

Redémarre ton PC.

Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.

Dans le menu d'options avancées, choisis Mode sans échec.

Choisis ta session.

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========

Service\Driver Partner Service deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}\ deleted successfully.
========== FILES ==========
C:\ProgramData\Partner moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: sophie
->Temp folder emptied: 202728371 bytes
->Temporary Internet Files folder emptied: 64237973 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 2862998 bytes
RecycleBin emptied: 174235058 bytes

Total Files Cleaned = 423,52 mb


OTM by OldTimer - Version 3.0.0.5 log created on 08042009_221209

Files moved on Reboot...

Registry entries deleted on Reboot...

Bien.

Désinstalle Java 6 Update 5.

Mets à jour Java.

Supprime les traces de Norton avec ceci.

Refais un scan RSIT et poste le rapport log.

Logfile of random's system information tool 1.06 (written by random/random)
Run by sophie at 2009-08-05 08:53:37
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 1
System drive C: has 245 GB (84%) free of 292 GB
Total RAM: 2814 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:53:45, on 05/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Micro Application\LauncherMA.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\sophie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WIBYTH1A\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\sophie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Setresolution] C:\ACER\config\1366x768.cmd
O4 - HKLM\..\Run: [MontiorGeo] c:\Acer\MonitorGeo.cmd
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Lanceur.lnk = C:\Program Files\Micro Application\LauncherMA.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8146 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C746095F-22C0-461D-92C6-6A2ED3783CC5}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll [2009-07-29 736240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-05 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-07-29 2583352]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-02 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-02 92704]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-20 6144000]
"eRecoveryService"= []
"UpdateP2GoShortCut"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"UpdatePSTShortCut"=C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [2008-09-24 210216]
"WarReg_PopUp"=C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe [2008-11-04 57344]
"Setresolution"=C:\ACER\config\1366x768.cmd []
"MontiorGeo"=c:\Acer\MonitorGeo.cmd []
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-05-08 2780432]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-07-10 195072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-05 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Users\sophie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lanceur.lnk - C:\Program Files\Micro Application\LauncherMA.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-08-05 08:53:37 ----D---- C:\rsit
2009-08-05 08:46:28 ----A---- C:\Windows\system32\javaws.exe
2009-08-05 08:46:28 ----A---- C:\Windows\system32\javaw.exe
2009-08-05 08:46:28 ----A---- C:\Windows\system32\java.exe
2009-08-05 08:46:28 ----A---- C:\Windows\system32\deploytk.dll
2009-08-04 22:12:09 ----D---- C:\_OTM
2009-08-04 19:46:18 ----A---- C:\Windows\ntbtlog.txt
2009-08-04 08:39:17 ----D---- C:\Users\sophie\AppData\Roaming\YoudaGames
2009-08-03 12:01:41 ----D---- C:\ProgramData\BigFishSavedGames
2009-08-03 09:50:00 ----D---- C:\Program Files\Margrave Manor 2 - Le Bateau Disparu
2009-08-02 18:14:02 ----D---- C:\Users\sophie\AppData\Roaming\Anabel
2009-08-02 17:21:39 ----D---- C:\Program Files\Trend Micro
2009-08-02 10:13:39 ----D---- C:\Users\sophie\AppData\Roaming\Micro Application
2009-08-02 10:13:07 ----D---- C:\ProgramData\Micro Application
2009-08-02 10:04:07 ----D---- C:\Program Files\Micro Application
2009-08-01 22:59:19 ----D---- C:\Users\sophie\AppData\Roaming\cerasus.media
2009-08-01 10:19:11 ----D---- C:\ProgramData\BigFishv1005fr
2009-07-31 20:26:51 ----D---- C:\Users\sophie\AppData\Roaming\BigFishv1005
2009-07-31 14:47:39 ----D---- C:\ProgramData\QuickClick
2009-07-31 14:47:39 ----D---- C:\ProgramData\Product
2009-07-31 13:21:32 ----D---- C:\ProgramData\Alawar Stargaze
2009-07-31 10:49:26 ----D---- C:\Users\sophie\AppData\Roaming\Flood Light Games
2009-07-31 10:49:26 ----D---- C:\ProgramData\Flood Light Games
2009-07-31 08:46:21 ----D---- C:\Users\sophie\AppData\Roaming\FloodLightGames
2009-07-31 08:46:21 ----D---- C:\ProgramData\FloodLightGames
2009-07-30 21:36:24 ----D---- C:\ProgramData\AdventureChronicles1
2009-07-30 21:00:53 ----A---- C:\Windows\wininit.ini
2009-07-30 18:23:16 ----D---- C:\Users\sophie\AppData\Roaming\Abra Academy2
2009-07-30 15:14:30 ----D---- C:\Users\sophie\AppData\Roaming\CyberLink
2009-07-30 13:45:14 ----D---- C:\Program Files\MSXML 4.0
2009-07-30 11:05:52 ----D---- C:\Program Files\bfgclient
2009-07-30 11:04:49 ----D---- C:\BigFishGamesCache
2009-07-30 10:34:42 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-07-30 10:27:13 ----D---- C:\Users\sophie\AppData\Roaming\Skinux
2009-07-30 10:24:58 ----ASH---- C:\Users\sophie\AppData\Roaming\desktop.ini
2009-07-30 10:24:11 ----D---- C:\ProgramData\Apple Computer
2009-07-30 10:24:11 ----D---- C:\Program Files\QuickTime
2009-07-30 10:23:14 ----D---- C:\Users\sophie\AppData\Roaming\Arcsoft
2009-07-30 10:23:11 ----D---- C:\ProgramData\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\Common Files\ArcSoft
2009-07-30 10:22:49 ----D---- C:\Program Files\ArcSoft
2009-07-30 10:21:12 ----D---- C:\Program Files\Common Files\Kodak
2009-07-30 10:21:04 ----D---- C:\Program Files\Common Files\MSSoap
2009-07-30 10:21:03 ----D---- C:\Program Files\Kodak
2009-07-30 10:15:58 ----D---- C:\ProgramData\Kodak
2009-07-29 23:04:15 ----D---- C:\Users\sophie\AppData\Roaming\WildTangent
2009-07-29 22:10:19 ----D---- C:\Users\sophie\AppData\Roaming\Windows Live Writer
2009-07-29 22:03:40 ----D---- C:\ProgramData\Avira
2009-07-29 22:03:40 ----D---- C:\Program Files\Avira
2009-07-29 21:22:44 ----D---- C:\ProgramData\LogiShrd
2009-07-29 21:22:43 ----D---- C:\Program Files\Logitech
2009-07-29 21:20:37 ----D---- C:\Users\sophie\AppData\Roaming\Macromedia
2009-07-29 21:13:03 ----D---- C:\Users\sophie\AppData\Roaming\Adobe
2009-07-29 21:12:56 ----D---- C:\Users\sophie\AppData\Roaming\Google
2009-07-29 20:40:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-07-29 20:40:49 ----A---- C:\Windows\system32\infocardapi.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardres.dll
2009-07-29 20:40:48 ----A---- C:\Windows\system32\icardagt.exe
2009-07-29 20:40:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-07-29 20:40:45 ----A---- C:\Windows\system32\PresentationHost.exe
2009-07-29 20:37:45 ----A---- C:\Windows\system32\dfshim.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\netfxperf.dll
2009-07-29 20:37:43 ----A---- C:\Windows\system32\mscoree.dll
2009-07-29 20:37:35 ----A---- C:\Windows\system32\mscorier.dll
2009-07-29 20:37:33 ----A---- C:\Windows\system32\mscories.dll
2009-07-29 20:37:16 ----D---- C:\Program Files\Common Files\logishrd
2009-07-29 20:33:45 ----A---- C:\Windows\system32\occache.dll
2009-07-29 20:33:45 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 20:33:44 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 20:33:43 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\mstime.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 20:33:42 ----A---- C:\Windows\system32\ieencode.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\rpcss.dll
2009-07-29 20:33:23 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\sdohlp.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasrecst.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iashost.exe
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasdatastore.dll
2009-07-29 20:33:22 ----A---- C:\Windows\system32\iasads.dll
2009-07-29 20:33:20 ----A---- C:\Windows\system32\winhttp.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\wersvc.dll
2009-07-29 20:33:18 ----A---- C:\Windows\system32\Faultrep.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\secur32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\lsasrv.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\kernel32.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\apilogen.dll
2009-07-29 20:33:16 ----A---- C:\Windows\system32\amxread.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\xolehlp.dll
2009-07-29 20:33:15 ----A---- C:\Windows\system32\msdtcprx.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\t2embed.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\fontsub.dll
2009-07-29 20:33:14 ----A---- C:\Windows\system32\atmfd.dll
2009-07-29 20:33:14 ----A---- C:\Windows\explorer.exe
2009-07-29 20:33:13 ----A---- C:\Windows\system32\dciman32.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\wmp.dll
2009-07-29 20:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-07-29 20:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-07-29 20:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-07-29 20:33:09 ----A---- C:\Windows\system32\schannel.dll
2009-07-29 20:33:08 ----A---- C:\Windows\system32\localspl.dll
2009-07-29 20:31:57 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-07-29 20:31:16 ----A---- C:\Windows\system32\rpcrt4.dll
2009-07-29 20:29:57 ----D---- C:\Users\sophie\AppData\Roaming\Identities
2009-07-29 20:28:29 ----HD---- C:\ACERSW
2009-07-29 20:28:12 ----D---- C:\ProgramData\Google
2009-07-29 20:27:54 ----SD---- C:\Users\sophie\AppData\Roaming\Microsoft
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wups2.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wucltux.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuaueng.dll
2009-07-29 20:25:56 ----A---- C:\Windows\system32\wuauclt.exe
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wups.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wudriver.dll
2009-07-29 20:25:47 ----A---- C:\Windows\system32\wuapi.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuwebv.dll
2009-07-29 20:25:42 ----A---- C:\Windows\system32\wuapp.exe
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Modèles
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Menu Démarrer
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Favoris
2009-07-29 20:24:55 ----SHD---- C:\ProgramData\Bureau
2009-07-29 20:24:55 ----SHD---- C:\Program Files\Fichiers communs

======List of files/folders modified in the last 1 months======

2009-08-05 08:53:36 ----D---- C:\Windows\Prefetch
2009-08-05 08:53:35 ----D---- C:\Windows\Temp
2009-08-05 08:49:03 ----HD---- C:\ProgramData
2009-08-05 08:48:11 ----D---- C:\ProgramData\NortonInstaller
2009-08-05 08:46:29 ----SHD---- C:\Windows\Installer
2009-08-05 08:46:28 ----D---- C:\Windows\System32
2009-08-05 08:46:17 ----D---- C:\Program Files\Java
2009-08-05 08:46:08 ----SHD---- C:\System Volume Information
2009-08-05 08:43:35 ----D---- C:\Program Files\Common Files
2009-08-05 08:16:57 ----D---- C:\Windows\inf
2009-08-05 08:16:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-04 19:46:18 ----D---- C:\Windows
2009-08-04 10:16:58 ----RD---- C:\Program Files
2009-08-04 10:16:47 ----AD---- C:\ProgramData\Temp
2009-08-03 13:29:46 ----D---- C:\ProgramData\WildTangent
2009-08-03 13:29:29 ----D---- C:\Program Files\eMachines Games
2009-08-02 10:04:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-02 10:04:06 ----D---- C:\Windows\system32\catroot2
2009-08-01 10:08:58 ----D---- C:\Windows\Debug
2009-07-30 20:25:11 ----D---- C:\Windows\rescache
2009-07-30 19:36:15 ----D---- C:\Windows\system32\WDI
2009-07-30 19:28:52 ----D---- C:\Windows\Tasks
2009-07-30 19:28:52 ----D---- C:\Windows\system32\Tasks
2009-07-30 15:14:30 ----D---- C:\ProgramData\CyberLink
2009-07-30 13:45:28 ----D---- C:\Windows\winsxs
2009-07-30 13:02:44 ----D---- C:\Windows\Logs
2009-07-30 12:25:24 ----D---- C:\Windows\Microsoft.NET
2009-07-30 10:35:37 ----D---- C:\Windows\system32\drivers
2009-07-30 10:35:13 ----D---- C:\ProgramData\Microsoft Help
2009-07-30 10:34:02 ----RSD---- C:\Windows\assembly
2009-07-30 10:32:51 ----RSD---- C:\Windows\Fonts
2009-07-30 10:32:48 ----D---- C:\Program Files\Common Files\microsoft shared
2009-07-30 10:24:22 ----D---- C:\Program Files\Internet Explorer
2009-07-30 10:22:24 ----D---- C:\Windows\system32\catroot
2009-07-30 10:22:02 ----D---- C:\Windows\Help
2009-07-29 22:02:42 ----D---- C:\Program Files\Windows Live
2009-07-29 21:51:48 ----D---- C:\ProgramData\Norton
2009-07-29 21:11:25 ----D---- C:\Windows\system32\LogFiles
2009-07-29 21:06:12 ----D---- C:\Windows\system32\fr-FR
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Media Player
2009-07-29 21:06:11 ----D---- C:\Program Files\Windows Mail
2009-07-29 21:06:10 ----D---- C:\Windows\system32\wbem
2009-07-29 21:06:09 ----D---- C:\Windows\system32\manifeststore
2009-07-29 21:06:09 ----D---- C:\Windows\AppPatch
2009-07-29 21:06:00 ----D---- C:\Windows\system32\XPSViewer
2009-07-29 21:06:00 ----D---- C:\Windows\system32\en-US
2009-07-29 20:37:16 ----D---- C:\Windows\twain_32
2009-07-29 20:37:07 ----D---- C:\Windows\SoftwareDistribution
2009-07-29 20:30:49 ----HD---- C:\ACER
2009-07-29 20:30:08 ----SHD---- C:\$Recycle.Bin
2009-07-29 20:29:24 ----D---- C:\Windows\system32\OEM
2009-07-29 20:28:33 ----D---- C:\Program Files\EMACHINES
2009-07-29 20:28:12 ----D---- C:\Program Files\Google
2009-07-29 20:27:37 ----RD---- C:\Users
2009-07-29 20:24:55 ----D---- C:\Program Files\Windows NT
2009-07-07 08:10:58 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-29 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-06-11 15392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-20 2143136]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2009-04-30 25624]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-03-25 1048480]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-02 7460320]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-05 1203808]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-02-06 109056]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-29 185089]
R2 ETService;Empowering Technology Service; C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [2008-06-11 24576]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-04-30 154136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-02 118784]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
S3 GameConsoleService;GameConsoleService; C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe [2009-07-17 250616]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-23 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-29 138168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-08-05 08:53:46

======Uninstall list======

-->"C:\Program Files\eMachines Games\Bejeweled 2 Deluxe\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Cake Mania\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Chicken Invaders 3 - Revenge of the Yolk\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Diner Dash\Uninstall.exe"
-->"C:\Program Files\eMachines Games\eMachines Game Console\Uninstall.exe"
-->"C:\Program Files\eMachines Games\FATE\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Hot Dish\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Penguins!\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Polar Bowler\Uninstall.exe"
-->"C:\Program Files\eMachines Games\Zuma Deluxe\Uninstall.exe"
-->"C:\Program Files\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
3 Days - Zoo Mystery-->"C:\Program Files\eMachines Games\3 Days - Zoo Mystery\Uninstall.exe"
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Agere Systems PCI-SV92EX Soft Modem-->agrsmdel
ArcSoft Print Creations - Album Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1AlbumPage
ArcSoft Print Creations - Funhouse-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Funhouse
ArcSoft Print Creations - Greeting Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1GreetingCard
ArcSoft Print Creations - Photo Book-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1PhotoBook
ArcSoft Print Creations - Photo Calendar-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Calendar
ArcSoft Print Creations - Scrapbook-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1ScrapBook
ArcSoft Print Creations - Slimline Card-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c -1Slimline
ArcSoft Print Creations-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}\setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
CCScore-->MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink DVD Suite-->"C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe" /z-uninstall
CyberLink LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" -uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall
CyberLink PowerDVD-->"C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
eMachines Games-->"C:\Program Files\eMachines Games\Uninstall.exe"
eMachines Recovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
ESSBrwr-->MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
ESSCDBK-->MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
ESScore-->MsiExec.exe /I{42938595-0D83-404D-9F73-F8177FDD531A}
ESSgui-->MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
ESSini-->MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
ESSPCD-->MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
ESSPDock-->MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
ESSTOOLS-->MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
essvatgt-->MsiExec.exe /I{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
fflink-->MsiExec.exe /I{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Incaball-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E9D6B81-2BEB-47DA-AF7B-5E2FDD85A866}\Setup.exe" -l0x40c
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LauncherMA-->MsiExec.exe /X{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
Logiciel Kodak EasyShare-->C:\ProgramData\Kodak\EasyShareSetup\$SETUP_140001_19563a\Setup.exe /APR-REMOVE
Logitech Webcam Software-->MsiExec.exe /I{AC96671C-2001-432C-9826-5266D84EF1DC}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
netbrdg-->MsiExec.exe /I{4537EA4B-F603-4181-89FB-2953FC695AB1}
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
OfotoXMI-->MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
SHASTA-->MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
skin0001-->MsiExec.exe /I{5316DFC9-CE99-4458-9AB3-E8726EDE0210}
SKINXSDK-->MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
staticcr-->MsiExec.exe /I{8943CE61-53BD-475E-90E1-A580869E98A2}
tooltips-->MsiExec.exe /I{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VPRINTOL-->MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
WIRELESS-->MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 33172
Source Name: Service Control Manager
Time Written: 20090804201559.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 33198
Source Name: Service Control Manager
Time Written: 20090804201559.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 33248
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090805061146.096912-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7000
Message: Le service Norton Internet Security n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 33291
Source Name: Service Control Manager
Time Written: 20090805061328.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
SRTSP
SRTSPX
Record Number: 33316
Source Name: Service Control Manager
Time Written: 20090805061328.000000-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: machine
Event Code: 33
Message: La création du contexte d’activation a échoué pour « C:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\WksCal.exe ». Assembly dépendant msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
Record Number: 2693
Source Name: SideBySide
Time Written: 20090805061504.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 33
Message: La création du contexte d’activation a échoué pour « C:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\wksss.exe ». Assembly dépendant msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
Record Number: 2694
Source Name: SideBySide
Time Written: 20090805061504.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 33
Message: La création du contexte d’activation a échoué pour « C:\Windows\Installer\{0214A441-A4AB-43A8-8DEF-2F73C5364673}\WksWP.exe ». Assembly dépendant msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.
Record Number: 2695
Source Name: SideBySide
Time Written: 20090805061504.000000-000
Event Type: Erreur
User:

Computer Name: machine
Event Code: 10010
Message: Impossible de redémarrer l’application « C:\Program Files\Internet Explorer\iexplore.exe » (pid 4140) - Le SID de l’application ne correspond pas à celui du conducteur..
Record Number: 2700
Source Name: Microsoft-Windows-RestartManager
Time Written: 20090805064222.769321-000
Event Type: Avertissement
User: machine\sophie

Computer Name: machine
Event Code: 10010
Message: Impossible de redémarrer l’application « C:\Program Files\Internet Explorer\iexplore.exe » (pid 4140) - Le SID de l’application ne correspond pas à celui du conducteur..
Record Number: 2709
Source Name: Microsoft-Windows-RestartManager
Time Written: 20090805064326.150321-000
Event Type: Avertissement
User: machine\sophie

=====Security event log=====

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3938
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090805065345.419321-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3939
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090805065345.448321-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3940
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090805065345.476321-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3941
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090805065345.506321-000
Event Type: Échec de l'audit
User:

Computer Name: machine
Event Code: 5038
Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 3942
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090805065345.536321-000
Event Type: Échec de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

-----------------EOF-----------------

Double-clique sur l'icône d'AntiVir (Parapluie) dans la barre des tâches.

Dans AntiVir, choisis Outils puis Configuration.

Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.

Fais un scan complet, clique sur Tout réparer si AntiVir trouve quelque chose et poste le rapport.

Tutoriel : Scanner le(s) disque(s) dur(s)

Avira AntiVir Personal
Date de création du fichier de rapport : mercredi 5 août 2009 14:48

La recherche porte sur 1594475 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série : 0000149996-ADJIE-0000001
Plateforme : Windows Vista
Version de Windows : (Service Pack 1) [6.0.6001]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur : MACHINE

Informations de version :
BUILD.DAT : 9.0.0.66 17958 Bytes 17/06/2009 14:44:00
AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 12:20:54
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 20:43:50
ANTIVIR2.VDF : 7.1.5.60 2235904 Bytes 03/08/2009 07:45:52
ANTIVIR3.VDF : 7.1.5.75 109568 Bytes 05/08/2009 12:04:55
Version du moteur : 8.2.0.240
AEVDF.DLL : 8.1.1.1 106868 Bytes 29/07/2009 20:43:51
AESCRIPT.DLL : 8.1.2.22 450938 Bytes 30/07/2009 20:04:16
AESCN.DLL : 8.1.2.4 127348 Bytes 29/07/2009 20:43:51
AERDL.DLL : 8.1.2.4 430452 Bytes 29/07/2009 20:43:51
AEPACK.DLL : 8.1.3.18 401783 Bytes 29/07/2009 20:43:50
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 29/07/2009 20:43:50
AEHEUR.DLL : 8.1.0.147 1884536 Bytes 29/07/2009 20:43:50
AEHELP.DLL : 8.1.5.3 233846 Bytes 29/07/2009 20:43:50
AEGEN.DLL : 8.1.1.54 356723 Bytes 04/08/2009 07:46:01
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
AECORE.DLL : 8.1.7.6 184694 Bytes 29/07/2009 20:43:50
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 29/07/2009 20:43:50
RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: C:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:,
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen
Catégories de dangers divergentes.............: +GAME,

Début de la recherche : mercredi 5 août 2009 14:48

La recherche d'objets cachés commence.
'85327' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FlashUtil9f.exe' - '1' module(s) sont contrôlés
Processus de recherche 'iexplore.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ieuser.exe' - '1' module(s) sont contrôlés
Processus de recherche 'conime.exe' - '1' module(s) sont contrôlés
Processus de recherche 'taskeng.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wlcomm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'COCIManager.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleDesktop.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmpnetwk.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmpnscfg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LauncherMA.exe' - '1' module(s) sont contrôlés
Processus de recherche 'EasyShare.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ACDaemon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LWS.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PDVDServ.exe' - '1' module(s) sont contrôlés
Processus de recherche 'RtHDVCpl.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleDesktop.exe' - '1' module(s) sont contrôlés
Processus de recherche 'MSASCui.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'dwm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'taskeng.exe' - '1' module(s) sont contrôlés
Processus de recherche 'taskeng.exe' - '1' module(s) sont contrôlés
Processus de recherche 'WUDFHost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SearchIndexer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'RichVideo.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LVPrcSrv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ETService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ACService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SLsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'audiodg.exe' - '0' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'nvvsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wininit.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'60' processus ont été contrôlés avec '60' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD1
[INFO] Aucun virus trouvé !
[INFO] Veuillez relancer la recherche avec les droits d'administrateur
Secteur d'amorçage maître HD2
[INFO] Aucun virus trouvé !
[INFO] Veuillez relancer la recherche avec les droits d'administrateur

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '44' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\' <OS>
C:\hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.


Fin de la recherche : mercredi 5 août 2009 15:21
Temps nécessaire: 33:15 Minute(s)

La recherche a été effectuée intégralement

17492 Les répertoires ont été contrôlés
291233 Des fichiers ont été contrôlés
0 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
0 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
291231 Fichiers non infectés
1757 Les archives ont été contrôlées
2 Avertissements
2 Consignes
85327 Des objets ont été contrôlés lors du Rootkitscan
0 Des objets cachés ont été trouvés

Plus de souci ?

ok
merci bcq

Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.

Double-clique sur le fichier téléchargé pour lancer le processus d'installation.

Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.

Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.

Sélectionne Exécuter un examen rapide.

Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

Citation :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.

Ferme tes navigateurs.

Si des malwares ont été détectés, clique sur Afficher les résultats.

Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

Malwarebytes' Anti-Malware 1.40
Version de la base de données: 2563
Windows 6.0.6001 Service Pack 1

05/08/2009 15:50:06
mbam-log-2009-08-05 (15-50-06).txt

Type de recherche: Examen rapide
Eléments examinés: 78964
Temps écoulé: 2 minute(s), 35 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\kt_bho.KettleBho (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

1/

Désinstalle HijackThis.

Télécharge ToolsCleaner2 sur ton Bureau.

Clique droit sur ToolsCleaner2.exe et choisis Exécuter en tant qu'administrateur.

Clique sur Recherche et laisse le scan agir.

Clique sur Suppression pour finaliser.

Tu peux, si tu le souhaites, te servir des Options Facultatives.

Clique sur Quitter pour obtenir le rapport.

Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


2/

Télécharge et installe CCleaner Slim.

Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....

Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


3/

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


==Prévention==

Pour supprimer les popups d'AntiVir : Lien

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer.

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

--> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :

Clique, dans ton premier message, sur le bouton Editer .

Ajoute la mention [Résolu] devant le titre.

Clique ensuite sur Valider votre message.


Sois plus vigilant(e) sur Internet  

[ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\$Recycle.Bin\S-1-5-21-3687570650-1333141937-3082946051-1000\$RVBD0ON\HijackThis.exe: trouvé !
C:\$Recycle.Bin\S-1-5-21-3687570650-1333141937-3082946051-1000\$RVBD0ON\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\$Recycle.Bin\S-1-5-21-3687570650-1333141937-3082946051-1000\$RVBD0ON\HijackThis.exe: supprimé !
C:\$Recycle.Bin\S-1-5-21-3687570650-1333141937-3082946051-1000\$RVBD0ON\hijackthis.log: supprimé !

Supprime ToolsCleaner  

Salut,

@ nabil_11 :

Créer ton propre sujet pour obtenir de l'aide