[RESOLU] Pc rame bcp - reboostage frequent car plantage
Forum Sécurité - Virus : [RESOLU] Pc rame bcp - reboostage frequent car plantage
Destrio5 a écrit :
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)
|
voici les deux fichiers (tellement le micro rame pour te dire, j'ai commencé la manip à 18H42 et ce n'est que maintenant que je peux te les poster soit 19H12)
Logfile of random's system information tool 1.06 (written by random/random)
Run by Christiane at 2009-09-04 14:05:32
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 28 GB (72%) free of 38 GB
Total RAM: 223 MB (19% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:07:36, on 04/09/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Christiane\Bureau\RSIT.exe
C:\Program Files\trend micro\HijackThis\Christiane.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - *{08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" /background
O4 - Global Startup: Assistant Smart Wizard NETGEAR pour WG311v3.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O4 - Global Startup: Exif Launcher S.lnk = ?
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/micros [...] 9656557637
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 9656408658
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/ [...] DP-1.1.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.ado [...] nos/gp.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://images.meetic.fr/img/fr/index/logo.gif
O24 - Desktop Component 1: (no name) - http://www.ca-aquitaine.fr/Vitrine [...] -51092.gif
O24 - Desktop Component 2: (no name) - http://i3.woopic.com/I/Header/Logo_txt.gif
O24 - Desktop Component 3: (no name) - http://portails.foncia.fr/location [...] u_haut.gif
--
End of file - 8172 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Schedule Task Weekly.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-08-17 1111320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-07-24 1090816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-19 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-08-19 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-08-19 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-30 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-30 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-07-24 1090816]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-19 256112]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-06-25 98304]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-06-25 503808]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [2003-06-25 49152]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-10-23 233472]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [2003-09-01 176128]
"DeviceDiscovery"=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-05-21 229437]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-30 149280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-08-19 39408]
"msnmsgr"=C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe [2009-02-06 3885408]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Assistant Smart Wizard NETGEAR pour WG311v3.lnk - C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
Exif Launcher S.lnk - C:\Program Files\FinePixViewerS\QuickDCF2.exe
NETGEAR WG111v3 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-08-17 11952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2004-08-05 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\IncrediMail\bin\IMApp.exe"="C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\OLITEC\Moniteur WiFi OLITEC USB\RtWLan.exe"="C:\Program Files\OLITEC\Moniteur WiFi OLITEC USB\RtWLan.exe:*:Enabled:RtWlan"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Avira\AntiVir Desktop\avcenter.exe"="C:\Program Files\Avira\AntiVir Desktop\avcenter.exe:*:Enabled
émarrer AntiVir"
"C:\Program Files\NETGEAR\WG111v3\WG111v3.exe"="C:\Program Files\NETGEAR\WG111v3\WG111v3.exe:*:Enabled:Assistant Smart Wizard NETGEAR pour WG111v3"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
======List of files/folders created in the last 1 months======
2009-08-31 15:50:57 ----D---- C:\Documents and Settings\Christiane\Application Data\Mozilla
2009-08-31 15:49:07 ----D---- C:\Program Files\Mozilla Firefox
2009-08-31 13:35:53 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-31 12:37:36 ----D---- C:\Program Files\VideoLAN
2009-08-30 20:03:48 ----A---- C:\WINDOWS\system32\javaws.exe
2009-08-30 20:03:48 ----A---- C:\WINDOWS\system32\javaw.exe
2009-08-30 20:03:47 ----A---- C:\WINDOWS\system32\java.exe
2009-08-30 19:22:40 ----D---- C:\Documents and Settings\Christiane\Application Data\AVG8
2009-08-28 15:37:32 ----A---- C:\WINDOWS\zip.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\SWSC.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\SWREG.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\sed.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\PEV.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\NIRCMD.exe
2009-08-28 15:37:32 ----A---- C:\WINDOWS\grep.exe
2009-08-28 15:37:19 ----D---- C:\WINDOWS\ERDNT
2009-08-28 15:37:17 ----SD---- C:\ComboFix
2009-08-28 15:37:15 ----A---- C:\WINDOWS\system32\CF28364.exe
2009-08-28 15:28:46 ----D---- C:\Qoobox
2009-08-24 06:22:25 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-24 06:22:25 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-19 20:44:53 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-08-18 18:45:10 ----D---- C:\OEMSettings
2009-08-17 15:49:17 ----D---- C:\Documents and Settings\Christiane\Application Data\Desktopicon
2009-08-17 15:49:11 ----D---- C:\Program Files\Unlocker
2009-08-17 12:06:11 ----HD---- C:\$AVG8.VAULT$
2009-08-17 10:53:36 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2009-08-17 10:52:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2009-08-17 10:52:17 ----D---- C:\Program Files\AVG
2009-08-17 10:52:15 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2009-08-16 19:36:39 ----D---- C:\Documents and Settings\Christiane\Application Data\Google
2009-08-16 19:30:36 ----A---- C:\UsbFix.txt
2009-08-16 19:24:32 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-08-16 19:24:22 ----D---- C:\Program Files\Google
2009-08-16 19:24:12 ----D---- C:\Program Files\Zylom Games
2009-08-16 19:24:12 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
2009-08-16 18:59:44 ----D---- C:\UsbFix
2009-08-16 18:14:23 ----D---- C:\Program Files\trend micro
2009-08-16 18:14:18 ----D---- C:\rsit
2009-08-16 13:28:28 ----D---- C:\WINDOWS\system32\XPSViewer
2009-08-16 13:28:15 ----D---- C:\Program Files\MSBuild
2009-08-16 13:28:08 ----D---- C:\WINDOWS\system32\en-US
2009-08-16 13:27:50 ----D---- C:\Program Files\Reference Assemblies
2009-08-16 13:26:31 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-08-16 13:26:31 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-08-16 13:26:31 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-08-16 13:26:29 ----D---- C:\c6cae2f5d2ae0292f1cf8f566f3916
2009-08-16 13:17:32 ----D---- C:\Program Files\MSXML 6.0
2009-08-16 07:25:38 ----D---- C:\Documents and Settings\Christiane\Application Data\Malwarebytes
2009-08-16 07:25:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-08-15 10:46:42 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-08-15 10:42:26 ----D---- C:\WINDOWS\ServicePackFiles
2009-08-15 10:13:08 ----D---- C:\WINDOWS\Sun
2009-08-15 10:10:39 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-08-15 10:09:52 ----D---- C:\Program Files\Java
2009-08-15 10:08:22 ----D---- C:\Documents and Settings\Christiane\Application Data\Sun
2009-08-15 08:34:31 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-15 08:34:01 ----D---- C:\Program Files\Microsoft Office Outlook Connector
2009-08-15 08:22:12 ----D---- C:\Program Files\Microsoft Sync Framework
2009-08-15 08:20:17 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-08-15 08:19:57 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-08-15 08:18:49 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-08-15 08:17:07 ----D---- C:\Program Files\Microsoft
2009-08-15 08:16:37 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-15 08:15:44 ----D---- C:\Program Files\Windows Live
2009-08-15 07:47:50 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-08-15 07:46:42 ----D---- C:\Program Files\Windows Media Connect 2
2009-08-15 07:46:17 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-08-15 07:44:01 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-08-15 07:42:14 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-08-15 06:55:16 ----D---- C:\Program Files\FinePixViewerS
2009-08-15 06:54:51 ----D---- C:\Documents and Settings\Christiane\Application Data\InstallShield
2009-08-15 06:37:46 ----D---- C:\Documents and Settings\Christiane\Application Data\FUJIFILM
2009-08-15 06:19:28 ----D---- C:\Documents and Settings\Christiane\Application Data\Watchtower
2009-08-14 17:58:53 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-08-14 17:58:53 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-08-14 17:58:53 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-08-14 17:58:44 ----D---- C:\Program Files\Alwil Software
2009-08-14 16:18:45 ----D---- C:\WINDOWS\system32\LogFiles
2009-08-14 16:11:36 ----D---- C:\Program Files\NETGEAR
2009-08-13 14:16:23 ----D---- C:\WINDOWS\pss
2009-08-11 14:13:23 ----D---- C:\Program Files\SuperCopier2
2009-08-08 04:10:39 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-08-08 04:10:39 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-08-07 13:14:04 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-08-07 11:57:37 ----A---- C:\WINDOWS\RTacDbg.txt
2009-08-07 11:53:55 ----D---- C:\WINDOWS\system32\Driver et Moniteur WiFi OLITEC
2009-08-07 11:53:55 ----D---- C:\Program Files\OLITEC
2009-08-07 11:50:52 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
======List of files/folders modified in the last 1 months======
2009-09-04 14:05:32 ----D---- C:\WINDOWS\Prefetch
2009-09-04 14:05:12 ----D---- C:\WINDOWS\Temp
2009-09-04 12:05:50 ----RD---- C:\Program Files
2009-09-04 11:42:45 ----D---- C:\WINDOWS
2009-08-31 17:08:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-31 14:50:47 ----HD---- C:\WINDOWS\inf
2009-08-31 14:34:21 ----D---- C:\WINDOWS\system32
2009-08-31 14:34:20 ----D---- C:\WINDOWS\system32\drivers
2009-08-31 13:39:21 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-31 13:32:52 ----D---- C:\Program Files\Windows Media Player
2009-08-31 13:32:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-31 13:32:37 ----D---- C:\WINDOWS\Help
2009-08-31 13:28:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-31 08:25:02 ----SD---- C:\WINDOWS\Tasks
2009-08-30 20:04:24 ----SHD---- C:\WINDOWS\Installer
2009-08-30 17:31:41 ----D---- C:\WINDOWS\system32\wbem
2009-08-30 17:31:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-28 17:05:25 ----D---- C:\WINDOWS\WinSxS
2009-08-28 16:43:13 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-28 16:42:00 ----D---- C:\Program Files\NewTech Infosystems
2009-08-28 16:41:43 ----D---- C:\WINDOWS\system
2009-08-28 16:38:57 ----D---- C:\Program Files\Fichiers communs
2009-08-28 16:13:09 ----D---- C:\Program Files\Winamp
2009-08-28 16:07:20 ----D---- C:\Program Files\CyberLink
2009-08-28 09:13:16 ----A---- C:\WINDOWS\win.ini
2009-08-24 16:22:34 ----SH---- C:\boot.ini
2009-08-24 16:22:34 ----A---- C:\WINDOWS\system.ini
2009-08-24 15:49:36 ----A---- C:\WINDOWS\winamp.ini
2009-08-24 08:57:20 ----D---- C:\WINDOWS\Debug
2009-08-23 19:49:06 ----RSD---- C:\WINDOWS\assembly
2009-08-23 19:46:15 ----RSD---- C:\WINDOWS\Fonts
2009-08-23 19:44:41 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-08-18 16:45:07 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-17 19:06:52 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-16 19:35:02 ----SHD---- C:\RECYCLER
2009-08-16 13:27:01 ----D---- C:\WINDOWS\system32\spool
2009-08-15 18:38:36 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-15 11:26:21 ----D---- C:\WINDOWS\AppPatch
2009-08-15 10:45:57 ----D---- C:\Program Files\Outlook Express
2009-08-15 09:22:03 ----SD---- C:\Documents and Settings\Christiane\Application Data\Microsoft
2009-08-15 08:34:03 ----D---- C:\Program Files\Fichiers communs\System
2009-08-15 08:33:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-08-15 08:21:54 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-15 08:20:21 ----D---- C:\WINDOWS\system32\DirectX
2009-08-15 06:12:06 ----D---- C:\WINDOWS\system32\config
2009-08-14 18:52:01 ----A---- C:\WINDOWS\Ulead32.ini
2009-08-14 18:28:37 ----A---- C:\WINDOWS\ModemLog_HSP56 MR (SIS).txt
2009-08-14 18:11:41 ----D---- C:\quarantine
2009-08-14 17:22:37 ----D---- C:\Program Files\Logitech
2009-08-14 17:20:23 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-08-14 17:18:13 ----D---- C:\Program Files\Windows Media Connect
2009-08-14 17:15:00 ----D---- C:\Program Files\MSN
2009-08-14 17:02:04 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-08-14 16:10:29 ----D---- C:\WINDOWS\Downloaded Installations
2009-08-14 16:04:00 ----D---- C:\WINDOWS\Registration
2009-08-14 16:01:10 ----D---- C:\Documents and Settings\Christiane\Application Data\skypePM
2009-08-14 16:00:20 ----SHD---- C:\System Volume Information
2009-08-14 16:00:20 ----D---- C:\WINDOWS\system32\Restore
2009-08-12 11:34:24 ----D---- C:\WINDOWS\twain_32
2009-08-12 03:38:50 ----D---- C:\WINDOWS\Minidump
2009-08-08 04:48:36 ----D---- C:\Program Files\Messenger
2009-08-08 04:46:35 ----D---- C:\Program Files\Internet Explorer
2009-08-07 14:23:07 ----A---- C:\WINDOWS\pex.INI
2009-08-07 11:51:22 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-07 11:34:01 ----D---- C:\Program Files\Services en ligne
2009-08-05 06:06:31 ----A---- C:\WINDOWS\system32\mswebdvd.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;AMD K7 Processor Driver; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-06-25 32768]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-08-17 335240]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-08-17 27784]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-08-17 108552]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2003-06-24 11008]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-08-07 21035]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1997-12-23 23936]
R2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2007-10-09 38144]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
R2 MarxDev1;MarxDev1; C:\WINDOWS\system32\drivers\MarxDev1.sys [2001-05-28 8864]
R2 MarxDev2;MarxDev2; C:\WINDOWS\system32\drivers\MarxDev2.sys [2001-05-28 8864]
R2 MarxDev3;MarxDev3; C:\WINDOWS\system32\drivers\MarxDev3.sys [2001-05-28 8864]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080]
R3 EKBfltr;ENE Keyboard KB-3886; C:\WINDOWS\system32\DRIVERS\EKBfltr.sys [2004-06-25 7168]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 MMRTKRNL;MMRTKRNL; C:\WINDOWS\system32\drivers\mmrtkrnl.sys [2001-11-05 32960]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-05-13 6912]
R3 Ptserial;W2K Pctel Serial Device Driver; C:\WINDOWS\system32\DRIVERS\ptserial.sys [2005-05-13 324383]
R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver; C:\WINDOWS\system32\DRIVERS\wg111v3.sys [2007-12-28 287232]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2003-06-26 400640]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-06-25 177856]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
S3 AVWLP_USB;WLAN PRISM USB Driver; C:\WINDOWS\system32\DRIVERS\AVWLPUSB.sys [2004-06-25 606720]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys []
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2004-06-25 65280]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-08-17 297752]
R2 FTRTSVC;France Telecom Routing Table Service; C:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-30 153376]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-06-26 31592]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-19 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-24 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
le 2ème
info.txt logfile of random's system information tool 1.06 2009-09-04 14:07:51
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
AVG Free 8.5.1-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
FUJIFILM FinePixViewer S Ver.2.1-->C:\Program Files\InstallShield Installation Information\{88B32652-CAE0-4909-A463-5840D2689D93}\SETUP.EXE -runfromtemp -l0x040c -removeonly
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
getPlus(R)-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
hp deskjet 3500-->msiexec /x{C7EC0699-D82C-4451-B701-C98C330D43AF}
HP Photo and Imaging 2.0 - Deskjet Series-->MsiExec.exe /I{E0828692-FD9D-459F-9312-C645C3CA6650}
hp print screen utility-->C:\Program Files\Hewlett-Packard\hp print screen utility\UnInstall\prnunins.exe
HSP56 Modem Drivers-->ptuninst.exe
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
NETGEAR WG111v3 wireless USB 2.0 adapter-->C:\Program Files\InstallShield Installation Information\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\setup.exe -runfromtemp -l0x040c
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
REALTEK Gigabit Ethenet NIC Driver Setup-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\SETUP.EXE" -l0x40c REMOVE
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SiS 740-->RUNDLL32 setuplib.dll,UnInstall ,315&ISUNINST -f"C:\PROGRA~1\SISCOM~1.19\DeIsL1.isu"&P.U 4 xvga.in&-1
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Ulead Photo Explorer 8.0 SE Basic-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.exe" -l0x40c
Ulead VideoStudio 8.0 SE VCD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Zylom Games Player Plugin-->"C:\Program Files\Zylom Games\UninstallPlugin.exe" --uninstall
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======Security center information======
AV: AVG Anti-Virus Free
======System event log======
Computer Name: RADJOU
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00223FDB4A1C. Il s'est
produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.
.
Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
serveur d'adresse réseau (DHCP).
Record Number: 78179
Source Name: Dhcp
Time Written: 20090816133542.000000-180
Event Type: Avertissement
User:
Computer Name: RADJOU
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{48AF4696-C66E-4B6D-9D78-9E10AAAE1446} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.
Record Number: 78178
Source Name: Tcpip
Time Written: 20090816133542.000000-180
Event Type: Informations
User:
Computer Name: RADJOU
Event Code: 7036
Message: Le service .NET Runtime Optimization Service v2.0.50727_X86 est entré dans l'état : arrêté.
Record Number: 78177
Source Name: Service Control Manager
Time Written: 20090816133539.000000-180
Event Type: Informations
User:
Computer Name: RADJOU
Event Code: 7035
Message: Un contrôle Arrêter a correctement été envoyé au service .NET Runtime Optimization Service v2.0.50727_X86.
Record Number: 78176
Source Name: Service Control Manager
Time Written: 20090816133538.000000-180
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: RADJOU
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir
du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00223FDB4A1C. Il s'est
produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.
.
Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du
serveur d'adresse réseau (DHCP).
Record Number: 78175
Source Name: Dhcp
Time Written: 20090816133535.000000-180
Event Type: Avertissement
User:
=====Application event log=====
Computer Name: CHRISTIA-5D10A8
Event Code: 102
Message: msnmsgr (2684) \\.\C:\Documents and Settings\Christiane\Local Settings\Application Data\Microsoft\Messenger\andree_973@hotmail.com\SharingMetadata\Working\database_3E40_FC52_40FC_11FF\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).
Record Number: 42669
Source Name: ESENT
Time Written: 20090622152357.000000-180
Event Type: Informations
User:
Computer Name: CHRISTIA-5D10A8
Event Code: 100
Message: msnmsgr (2684) Le moteur de base de données 5.01.2600.2780 est démarré.
Record Number: 42668
Source Name: ESENT
Time Written: 20090622152357.000000-180
Event Type: Informations
User:
Computer Name: CHRISTIA-5D10A8
Event Code: 302
Message: msnmsgr (2340) \\.\C:\Documents and Settings\Christiane\Local Settings\Application Data\Microsoft\Messenger\andree_973@hotmail.com\SharingMetadata\Working\database_3E40_FC52_40FC_11FF\dfsr.db: Le moteur de base de données a exécuté la procédure de récupération avec succès.
Record Number: 42667
Source Name: ESENT
Time Written: 20090622100506.000000-180
Event Type: Informations
User:
Computer Name: CHRISTIA-5D10A8
Event Code: 301
Message: msnmsgr (2340) \\.\C:\Documents and Settings\Christiane\Local Settings\Application Data\Microsoft\Messenger\andree_973@hotmail.com\SharingMetadata\Working\database_3E40_FC52_40FC_11FF\dfsr.db: Le moteur de base de données commence la relecture du fichier journal \\.\C:\Documents and Settings\Christiane\Local Settings\Application Data\Microsoft\Messenger\andree_973@hotmail.com\SharingMetadata\Working\database_3E40_FC52_40FC_11FF\fsr.log.
Record Number: 42666
Source Name: ESENT
Time Written: 20090622100505.000000-180
Event Type: Informations
User:
Computer Name: CHRISTIA-5D10A8
Event Code: 300
Message: msnmsgr (2340) \\.\C:\Documents and Settings\Christiane\Local Settings\Application Data\Microsoft\Messenger\andree_973@hotmail.com\SharingMetadata\Working\database_3E40_FC52_40FC_11FF\dfsr.db: Le moteur de base de données initialise la procédure de récupération.
Record Number: 42665
Source Name: ESENT
Time Written: 20090622100505.000000-180
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Fichiers communs\Ulead Systems\DVD
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 6 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=0602
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------
