Service.exe CODE 1073741819

Logfile of random's system information tool 1.06 (written by random/random)
Run by Mr_Domino at 2009-11-06 08:24:32
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 34 GB (36%) free of 95 GB
Total RAM: 2046 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:24:36, on 06/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Mr_Domino\Mes documents\DL\Temporaire\6qz0hdj6.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Mr_Domino\Mes documents\DL\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Trend Micro\HijackThis\Mr_Domino.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Windows Logon Application] C:\WINDOWS\system32\winIogon.exe
O4 - HKLM\..\Run: [Regedit32] C:\WINDOWS\system32\regedit.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [NetworkService] C:\Documents and Settings\NetworkService\NetworkService.exe /i (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [NetworkService] C:\Documents and Settings\NetworkService\NetworkService.exe /i (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - http://upload.facebook.com/control [...] oader5.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/control [...] ader55.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common\Database\bin\fbserver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
End of file - 7591 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-07 7577600]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-06-07 86016]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-05-04 16206848]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-06-11 53248]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2005-07-22 28160]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2006-05-30 630784]
"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2009-02-27 1368064]
"IntelWireless"=C:\Program Files\Fichiers communs\Intel\WirelessCommon\iFrmewrk.exe [2009-02-27 1202448]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe [2004-12-06 36975]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-01-15 37376]
"Windows Logon Application"=C:\WINDOWS\system32\winIogon.exe []
"Regedit32"=C:\WINDOWS\system32\regedit.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lsass]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Microsoft Windows Compatibility]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\lsass]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Microsoft Windows Compatibility]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=36
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
"NoStrCmpLogical"=0
"NoInstrumentation"=0
"NoDriveAutoRun"=FFFFFFFF

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\system\msdct.exe"="C:\WINDOWS\system\msdct.exe:*:WM System Decode Application"
"C:\WINDOWS\wmsys32.exe"="C:\WINDOWS\wmsys32.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\08.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\08.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\71.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\71.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\24.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\24.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\05.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\05.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\46.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\46.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\26.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\26.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\20.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\20.exe:*:Microsoft Windows Compatibility"
"C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\81.exe"="C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\81.exe:*:Microsoft Windows Compatibility"
"C:\WINDOWS\System32\65.scr"="C:\WINDOWS\System32\65.scr:*:WM System Decode Application"
"C:\WINDOWS\system\1sass.exe"="C:\WINDOWS\system\1sass.exe:*:Microsoft Enabled"
"C:\WINDOWS\System32\00.scr"="C:\WINDOWS\System32\00.scr:*:Microsoft Enabled"
"C:\WINDOWS\System32\82.scr"="C:\WINDOWS\System32\82.scr:*:Microsoft Enabled"
"C:\WINDOWS\System32\12.scr"="C:\WINDOWS\System32\12.scr:*:C:\WINDOWS\msdrv32.exe"
"C:\WINDOWS\System32\11.scr"="C:\WINDOWS\System32\11.scr:*:C:\WINDOWS\msdrv32.exe"
"C:\WINDOWS\system32\dizq.exe"="C:\WINDOWS\system32\dizq.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\utvja.exe"="C:\WINDOWS\system32\utvja.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\nlpzdkv.exe"="C:\WINDOWS\system32\nlpzdkv.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ohmpisl.exe"="C:\WINDOWS\system32\ohmpisl.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\xglzxta.exe"="C:\WINDOWS\system32\xglzxta.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\hufiuqen.exe"="C:\WINDOWS\system32\hufiuqen.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\nzgei.exe"="C:\WINDOWS\system32\nzgei.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\xqjjq.exe"="C:\WINDOWS\system32\xqjjq.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\nomxeyfr.exe"="C:\WINDOWS\system32\nomxeyfr.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\szjbad.exe"="C:\WINDOWS\system32\szjbad.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\cftfxj.exe"="C:\WINDOWS\system32\cftfxj.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\idqxna.exe"="C:\WINDOWS\system32\idqxna.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\kwni.exe"="C:\WINDOWS\system32\kwni.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\wgvwsh.exe"="C:\WINDOWS\system32\wgvwsh.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ysvx.exe"="C:\WINDOWS\system32\ysvx.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\rqcyqpt.exe"="C:\WINDOWS\system32\rqcyqpt.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ancs.exe"="C:\WINDOWS\system32\ancs.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\gqxs.exe"="C:\WINDOWS\system32\gqxs.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\yizpaur.exe"="C:\WINDOWS\system32\yizpaur.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\nrsef.exe"="C:\WINDOWS\system32\nrsef.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ciactmj.exe"="C:\WINDOWS\system32\ciactmj.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\xyyeyebr.exe"="C:\WINDOWS\system32\xyyeyebr.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ogavjw.exe"="C:\WINDOWS\system32\ogavjw.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\yrnu.exe"="C:\WINDOWS\system32\yrnu.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\mopg.exe"="C:\WINDOWS\system32\mopg.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\gkjnyrd.exe"="C:\WINDOWS\system32\gkjnyrd.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\unfhfom.exe"="C:\WINDOWS\system32\unfhfom.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\rgqm.exe"="C:\WINDOWS\system32\rgqm.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ktoouwa.exe"="C:\WINDOWS\system32\ktoouwa.exe:*:Enabled:Ultimate Tool"
"C:\WINDOWS\system32\ztdkcoo.exe"="C:\WINDOWS\system32\ztdkcoo.exe:*:Enabled:Ultimate Tool"
"C:\dir.exe"="C:\dir.exe:*:Enabled:Ultimate Tool"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{46bce460-5c35-11de-8888-d89f1895b2b9}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com f:
shell\Open\command - F:\resycled\boot.com f:

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4c1b405d-9b1c-11de-88f5-0016d34189b3}]
shell\AutoRun\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
shell\open\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8ea5d6ba-8b00-11de-88ce-0016d34189b3}]
shell\AutoRun\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
shell\open\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff496e32-6215-11de-88a5-0016d34189b3}]
shell\AutoRun\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
shell\open\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffbc4b09-8e7c-11de-88d8-0016d34189b3}]
shell\AutoRun\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
shell\open\command - F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe


======List of files/folders created in the last 3 months======

2009-11-06 08:24:32 ----D---- C:\rsit
2009-11-05 08:33:26 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2009-11-05 08:33:17 ----D---- C:\Program Files\SUPERAntiSpyware
2009-11-05 08:33:17 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\SUPERAntiSpyware.com
2009-11-05 08:33:04 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-11-05 08:30:53 ----A---- C:\TB.txt
2009-11-05 08:30:38 ----D---- C:\ToolBar SD
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\WS2Fix.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\VCCLSID.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\VACFix.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\swxcacls.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\swsc.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\swreg.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\SrchSTS.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\Process.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\o4Patch.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\IEDFix.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\dumphive.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
2009-11-05 08:30:29 ----A---- C:\WINDOWS\system32\404Fix.exe
2009-11-05 08:18:21 ----A---- C:\WINDOWS\system32\ucyl.exe
2009-11-05 07:59:55 ----A---- C:\WINDOWS\system32\ymvjc.exe
2009-11-05 07:53:43 ----A---- C:\WINDOWS\system32\ydjvik.exe
2009-11-05 07:41:24 ----A---- C:\WINDOWS\system32\mwubr.exe
2009-11-04 22:47:52 ----A---- C:\WINDOWS\system32\igjn.exe
2009-11-04 20:04:20 ----A---- C:\WINDOWS\system32\ouqu.exe
2009-11-04 19:28:23 ----A---- C:\WINDOWS\system32\jhxqo.exe
2009-11-04 08:33:03 ----A---- C:\WINDOWS\system32\olfjfjpp.exe
2009-11-04 08:04:10 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\AccurateRip
2009-11-04 07:37:28 ----A---- C:\WINDOWS\system32\aeegttad.exe
2009-11-03 20:40:08 ----A---- C:\WINDOWS\system32\dturz.exe
2009-11-03 20:20:28 ----A---- C:\WINDOWS\system32\ddfze.exe
2009-11-03 19:34:21 ----A---- C:\WINDOWS\system32\cgtdekb.exe
2009-11-03 19:18:38 ----A---- C:\WINDOWS\system32\crscjeg.exe
2009-11-03 07:35:16 ----A---- C:\WINDOWS\system32\graqgns.exe
2009-11-02 19:19:17 ----D---- C:\Program Files\CCleaner
2009-10-29 18:26:20 ----A---- C:\WINDOWS\system32\mekrigkn.exe
2009-10-26 19:31:22 ----A---- C:\WINDOWS\system32\seswj.exe
2009-10-26 08:01:25 ----A---- C:\WINDOWS\system32\jbrbk.exe
2009-10-21 19:25:19 ----A---- C:\List'em.txt
2009-10-21 19:25:01 ----D---- C:\!KillBox
2009-10-21 19:18:20 ----D---- C:\Program Files\Trend Micro
2009-10-20 19:56:21 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\CyberLink
2009-10-20 19:56:11 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-10-20 19:55:52 ----N---- C:\WINDOWS\system32\msxml3a.dll
2009-10-20 19:55:22 ----D---- C:\Program Files\CyberLink
2009-10-19 20:25:28 ----A---- C:\WINDOWS\wininit.ini
2009-10-19 07:28:00 ----A---- C:\WINDOWS\system32\ztdkcoo.exe
2009-10-19 07:06:05 ----A---- C:\WINDOWS\system32\ktoouwa.exe
2009-10-18 10:24:27 ----A---- C:\WINDOWS\system32\rgqm.exe
2009-10-18 05:21:50 ----A---- C:\WINDOWS\system32\unfhfom.exe
2009-10-18 04:59:24 ----A---- C:\WINDOWS\system32\gkjnyrd.exe
2009-10-17 15:15:10 ----A---- C:\WINDOWS\system32\mopg.exe
2009-10-17 07:12:10 ----A---- C:\WINDOWS\system32\yrnu.exe
2009-10-16 20:39:22 ----A---- C:\WINDOWS\system32\ogavjw.exe
2009-10-12 20:50:01 ----D---- C:\Program Files\Google
2009-10-12 20:50:01 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\Google
2009-10-11 17:21:09 ----D---- C:\Program Files\PhotoFiltre Studio
2009-09-24 16:55:01 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\Help
2009-09-07 18:17:51 ----D---- C:\Program Files\Navirad
2009-09-07 18:17:51 ----A---- C:\WINDOWS\system32\Naviradsys.bat
2009-09-07 18:17:51 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2009-09-07 18:17:51 ----A---- C:\WINDOWS\system32\MFCO42D.DLL
2009-09-07 18:17:51 ----A---- C:\WINDOWS\system32\MFC42D.DLL
2009-09-06 17:07:55 ----A---- C:\WINDOWS\system32\xyyeyebr.exe
2009-09-05 23:21:06 ----A---- C:\WINDOWS\system32\ciactmj.exe
2009-09-05 08:09:47 ----A---- C:\WINDOWS\system32\nrsef.exe
2009-09-04 19:48:19 ----A---- C:\WINDOWS\system32\yizpaur.exe
2009-08-24 07:39:30 ----A---- C:\WINDOWS\system32\gqxs.exe
2009-08-23 21:40:43 ----A---- C:\WINDOWS\system32\ancs.exe
2009-08-23 18:32:50 ----A---- C:\WINDOWS\system32\rqcyqpt.exe
2009-08-23 11:20:09 ----A---- C:\WINDOWS\system32\ysvx.exe
2009-08-23 10:13:27 ----A---- C:\WINDOWS\Videodeluxe.INI
2009-08-23 10:09:25 ----A---- C:\WINDOWS\system32\msxml4r.dll
2009-08-23 10:09:25 ----A---- C:\WINDOWS\system32\msxml4a.dll
2009-08-23 10:09:25 ----A---- C:\WINDOWS\system32\msxml4.dll
2009-08-23 10:09:21 ----D---- C:\Documents and Settings\All Users\Application Data\MAGIX
2009-08-23 10:09:20 ----D---- C:\Program Files\Common
2009-08-23 10:06:22 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2009-08-23 10:06:22 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\TTIC32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\TTI32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\STRING32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\MXRestore.exe
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\mgxcdr.txt
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\DLLTPO32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\DLLRES32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\DLLRD32.dll
2009-08-23 10:04:58 ----A---- C:\WINDOWS\system32\DLLPTL32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLPRJ32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLPRF32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLPNT32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLMSC32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLIX.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLISO32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLIO32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLIMG32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLDRV32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLDIR32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLDEV32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLCPY32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLCDF32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLCDA32.dll
2009-08-23 10:04:57 ----A---- C:\WINDOWS\system32\DLLAV32.dll
2009-08-23 10:04:26 ----D---- C:\Program Files\Fichiers communs\MAGIX Shared
2009-08-23 09:57:45 ----A---- C:\WINDOWS\system32\ROBOEX32.DLL
2009-08-23 09:57:45 ----A---- C:\WINDOWS\system32\INETWH32.dll
2009-08-23 09:57:45 ----A---- C:\WINDOWS\system32\HtmlWH.dll
2009-08-23 09:57:13 ----D---- C:\Program Files\MAGIX VDP 2007
2009-08-23 09:56:43 ----D---- C:\WINDOWS\system32\MAGIX
2009-08-23 09:56:43 ----A---- C:\WINDOWS\system32\mgxoschk.dll
2009-08-23 09:56:43 ----A---- C:\WINDOWS\mgxoschk.ini
2009-08-22 21:35:20 ----A---- C:\WINDOWS\system32\wgvwsh.exe
2009-08-22 09:40:49 ----A---- C:\WINDOWS\system32\kwni.exe
2009-08-22 06:02:53 ----A---- C:\WINDOWS\system32\idqxna.exe
2009-08-21 18:08:24 ----A---- C:\WINDOWS\system32\cftfxj.exe
2009-08-21 05:50:08 ----A---- C:\WINDOWS\system32\szjbad.exe
2009-08-20 22:06:48 ----D---- C:\WINDOWS\system32\appmgmt
2009-08-20 18:37:24 ----A---- C:\WINDOWS\system32\nomxeyfr.exe
2009-08-20 16:42:03 ----A---- C:\WINDOWS\system32\xqjjq.exe
2009-08-20 11:38:47 ----A---- C:\WINDOWS\system32\nzgei.exe
2009-08-20 07:47:34 ----A---- C:\WINDOWS\system32\hufiuqen.exe
2009-08-18 21:30:50 ----A---- C:\WINDOWS\system32\xglzxta.exe
2009-08-18 14:44:17 ----A---- C:\WINDOWS\system32\ohmpisl.exe
2009-08-18 07:44:41 ----A---- C:\WINDOWS\system32\bpsuuql.exe
2009-08-18 06:58:26 ----A---- C:\WINDOWS\system32\dbhrpsyy.exe
2009-08-18 06:58:25 ----A---- C:\WINDOWS\system32\nlpzdkv.exe
2009-08-17 20:32:10 ----A---- C:\WINDOWS\system32\oiinxax.exe
2009-08-17 20:10:56 ----A---- C:\WINDOWS\system32\jnfrl.exe
2009-08-17 19:49:48 ----A---- C:\WINDOWS\system32\yjeewgb.exe
2009-08-17 19:45:20 ----D---- C:\Garmin
2009-08-17 17:41:23 ----A---- C:\WINDOWS\system32\cbhkmb.exe
2009-08-17 16:57:29 ----A---- C:\WINDOWS\system32\qewqq.exe
2009-08-17 16:11:50 ----A---- C:\WINDOWS\system32\nzwtq.exe
2009-08-17 15:09:13 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\Download Manager
2009-08-17 13:49:57 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\Ahead
2009-08-17 13:38:34 ----A---- C:\WINDOWS\system32\itzuzetq.exe
2009-08-17 11:12:09 ----A---- C:\WINDOWS\system32\onxhmi.exe
2009-08-17 10:49:57 ----A---- C:\WINDOWS\system32\cvztp.exe
2009-08-17 10:28:49 ----A---- C:\WINDOWS\system32\qedjt.exe
2009-08-17 10:07:21 ----A---- C:\WINDOWS\system32\olfwx.exe
2009-08-17 09:17:45 ----A---- C:\WINDOWS\system32\fmkkffn.exe
2009-08-17 07:44:49 ----A---- C:\WINDOWS\system32\iutkngsv.exe
2009-08-17 07:00:58 ----A---- C:\WINDOWS\system32\mkymb.exe
2009-08-17 06:36:52 ----A---- C:\WINDOWS\system32\eubcwp.exe
2009-08-17 06:12:47 ----A---- C:\WINDOWS\system32\ymqz.exe
2009-08-17 06:12:47 ----A---- C:\WINDOWS\system32\utvja.exe
2009-08-16 23:07:16 ----A---- C:\WINDOWS\system32\mkkmz.exe
2009-08-16 22:46:10 ----A---- C:\WINDOWS\system32\okedeobd.exe
2009-08-16 22:25:05 ----A---- C:\WINDOWS\system32\dizq.exe
2009-08-16 22:25:05 ----A---- C:\WINDOWS\system32\cviq.exe
2009-08-08 13:51:59 ----A---- C:\WINDOWS\system32\sqsa.exe
2009-08-08 13:09:51 ----A---- C:\WINDOWS\system32\wyqmc.exe
2009-08-08 12:17:26 ----A---- C:\WINDOWS\system32\sxjheta.exe
2009-08-08 10:10:49 ----A---- C:\WINDOWS\system32\znplciz.exe
2009-08-08 08:46:26 ----A---- C:\WINDOWS\system32\pyvjbgll.exe
2009-08-08 07:58:18 ----A---- C:\WINDOWS\system32\idkrnla.exe
2009-08-08 06:25:02 ----A---- C:\WINDOWS\system32\mwggats.exe
2009-08-07 21:18:34 ----A---- C:\WINDOWS\system32\cbkqc.exe
2009-08-07 20:54:29 ----A---- C:\WINDOWS\system32\jhmv.exe
2009-08-07 19:26:52 ----A---- C:\WINDOWS\system32\jtqtg.exe
2009-08-07 18:59:47 ----A---- C:\WINDOWS\system32\odqdhosn.exe
2009-08-07 18:35:33 ----A---- C:\WINDOWS\system32\evqxgi.exe
2009-08-07 18:11:30 ----A---- C:\WINDOWS\system32\ompoozy.exe
2009-08-07 17:44:15 ----A---- C:\WINDOWS\system32\dqsqb.exe
2009-08-07 17:22:10 ----A---- C:\WINDOWS\system32\ewkvq.exe
2009-08-07 17:01:06 ----A---- C:\WINDOWS\system32\kaeu.exe
2009-08-07 16:38:59 ----A---- C:\WINDOWS\system32\wkptg.exe

======List of files/folders modified in the last 3 months======

2009-11-06 08:24:35 ----D---- C:\WINDOWS\Prefetch
2009-11-06 08:20:50 ----D---- C:\Program Files\Mozilla Firefox
2009-11-06 08:13:50 ----D---- C:\WINDOWS\system32
2009-11-06 08:13:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-06 08:08:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-05 22:23:29 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-05 08:34:33 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-05 08:33:24 ----SHD---- C:\WINDOWS\Installer
2009-11-05 08:33:17 ----RD---- C:\Program Files
2009-11-05 08:33:04 ----D---- C:\Program Files\Fichiers communs
2009-11-04 08:04:11 ----D---- C:\WINDOWS
2009-11-02 19:25:56 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-02 19:25:36 ----D---- C:\WINDOWS\Temp
2009-11-02 19:25:36 ----D---- C:\WINDOWS\Debug
2009-11-02 08:24:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-10-29 18:03:27 ----SD---- C:\Documents and Settings\Mr_Domino\Application Data\Microsoft
2009-10-28 07:03:04 ----D---- C:\Program Files\eMule
2009-10-20 19:55:22 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-20 06:56:53 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-10-19 19:29:19 ----D---- C:\WINDOWS\system32\drivers
2009-09-24 16:55:01 ----D---- C:\Program Files\WinRAR
2009-09-07 18:18:22 ----HD---- C:\WINDOWS\inf
2009-08-23 10:06:34 ----RSD---- C:\WINDOWS\Fonts
2009-08-20 22:08:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-08-18 15:34:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-17 13:30:33 ----D---- C:\Documents and Settings\Mr_Domino\Application Data\dBpoweramp

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R2 ACEDRV07;ACEDRV07; \??\C:\WINDOWS\system32\drivers\ACEDRV07.sys []
R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-13 11904]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-05-09 60800]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-10-26 142720]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2006-01-20 17408]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-24 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-04 4271616]
R3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2005-07-22 55040]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2005-07-22 26112]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2005-07-22 68864]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-03-04 4202496]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-05-09 61824]
R3 NSCIRDA;Pilote de périphérique infrarouge NSC; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2004-08-03 28672]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-07 3675136]
R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-06-23 162176]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 ethkubbc;ethkubbc; C:\WINDOWS\system32\drivers\ethkubbc.sys [2009-10-29 137312]
S3 fgpyqfod;fgpyqfod; \??\C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\fgpyqfod.sys []
S3 grmnusb;grmnusb; C:\WINDOWS\system32\drivers\grmnusb.sys [2007-03-08 8320]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2006-04-17 48896]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\MR_DOM~1\LOCALS~1\Temp\mc21.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-02-27 870672]
R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2004-08-19 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-07 143426]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe [2009-02-27 473360]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2009-02-27 909312]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UMWdf;Infrastructure de pilote-mode utilisateur Windows; C:\WINDOWS\system32\wdfmgr.exe [2005-01-27 38912]

-----------------EOF-----------------