Virus iexplore.exe

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : Default System BIOS
USER : Thomas ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:5 Go)
D:\ (Local Disk) - NTFS - Total:35 Go (Free:23 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:196 Go (Free:140 Go)
G:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 20/11/2009|20:15 )

--------------------\\ Listing des dossiers dans APPLIC~1

[26/10/2008|21:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[30/10/2008|13:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[30/10/2008|13:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[30/10/2008|11:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[23/05/2009|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
[11/09/2009|18:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[13/04/2009|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[19/03/2009|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[27/03/2009|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Age of Empires 3
[30/10/2008|14:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/10/2008|14:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[20/05/2009|15:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/10/2008|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[30/09/2009|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Blizzard
[22/10/2009|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Blizzard Entertainment
[19/08/2009|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Canneverbe Limited
[03/11/2008|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[16/11/2008|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[18/01/2009|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[06/11/2009|10:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
[27/11/2008|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[27/11/2008|19:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[16/01/2009|20:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[25/09/2009|18:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
[25/09/2009|18:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
[01/02/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[23/01/2009|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[31/10/2008|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[24/01/2009|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/10/2008|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[22/01/2009|19:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC SOFT
[10/08/2009|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[10/08/2009|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle VideoSpin
[08/11/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[07/02/2009|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[07/12/2008|11:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[16/12/2008|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[30/10/2008|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[26/10/2008|20:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[17/07/2009|18:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[26/10/2008|20:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[04/11/2008|20:24] C:\DOCUME~1\Thomas\APPLIC~1\~LM00001.tmp
[04/11/2008|20:25] C:\DOCUME~1\Thomas\APPLIC~1\~LM00002.tmp
[04/11/2008|20:46] C:\DOCUME~1\Thomas\APPLIC~1\~LM00003.tmp
[05/11/2008|21:05] C:\DOCUME~1\Thomas\APPLIC~1\~LM00004.tmp
[05/11/2008|21:06] C:\DOCUME~1\Thomas\APPLIC~1\~LM00005.tmp
[29/11/2008|12:59] C:\DOCUME~1\Thomas\APPLIC~1\~LM00006.tmp
[29/11/2008|13:11] C:\DOCUME~1\Thomas\APPLIC~1\~LM00007.tmp
[29/11/2008|13:51] C:\DOCUME~1\Thomas\APPLIC~1\~LM00008.tmp
[04/10/2009|13:11] C:\DOCUME~1\Thomas\APPLIC~1\AccurateRip
[21/08/2009|13:04] C:\DOCUME~1\Thomas\APPLIC~1\Address Book
[26/08/2009|12:01] C:\DOCUME~1\Thomas\APPLIC~1\Adobe
[11/09/2009|21:29] C:\DOCUME~1\Thomas\APPLIC~1\Apple Computer
[04/10/2009|13:18] C:\DOCUME~1\Thomas\APPLIC~1\Audacity
[07/11/2009|20:52] C:\DOCUME~1\Thomas\APPLIC~1\Azureus
[16/06/2009|19:03] C:\DOCUME~1\Thomas\APPLIC~1\Canneverbe_Limited
[31/10/2008|20:32] C:\DOCUME~1\Thomas\APPLIC~1\DAEMON Tools
[24/02/2009|14:18] C:\DOCUME~1\Thomas\APPLIC~1\Dev-Cpp
[30/10/2008|20:47] C:\DOCUME~1\Thomas\APPLIC~1\DivX
[17/10/2009|19:53] C:\DOCUME~1\Thomas\APPLIC~1\dvdcss
[26/10/2009|11:50] C:\DOCUME~1\Thomas\APPLIC~1\FileZilla
[30/12/2008|12:40] C:\DOCUME~1\Thomas\APPLIC~1\FindeXer
[12/01/2009|18:24] C:\DOCUME~1\Thomas\APPLIC~1\Google
[11/03/2009|16:31] C:\DOCUME~1\Thomas\APPLIC~1\IBP
[30/10/2008|13:05] C:\DOCUME~1\Thomas\APPLIC~1\Identities
[03/11/2008|19:41] C:\DOCUME~1\Thomas\APPLIC~1\InfraRecorder
[28/08/2009|14:21] C:\DOCUME~1\Thomas\APPLIC~1\InstallShield
[14/11/2008|22:45] C:\DOCUME~1\Thomas\APPLIC~1\Leadertech
[26/10/2009|11:18] C:\DOCUME~1\Thomas\APPLIC~1\LimeWire
[26/08/2009|12:01] C:\DOCUME~1\Thomas\APPLIC~1\Macromedia
[23/01/2009|20:14] C:\DOCUME~1\Thomas\APPLIC~1\Malwarebytes
[25/10/2009|15:45] C:\DOCUME~1\Thomas\APPLIC~1\Microsoft
[17/05/2009|10:20] C:\DOCUME~1\Thomas\APPLIC~1\mIRC
[14/12/2008|18:30] C:\DOCUME~1\Thomas\APPLIC~1\Mozilla
[22/11/2008|18:06] C:\DOCUME~1\Thomas\APPLIC~1\Nvu
[31/10/2008|10:25] C:\DOCUME~1\Thomas\APPLIC~1\OpenOffice.org
[12/08/2009|17:08] C:\DOCUME~1\Thomas\APPLIC~1\Opera
[22/01/2009|20:00] C:\DOCUME~1\Thomas\APPLIC~1\Oxemis
[14/11/2008|22:17] C:\DOCUME~1\Thomas\APPLIC~1\Sonic
[30/10/2008|15:05] C:\DOCUME~1\Thomas\APPLIC~1\Sun
[31/10/2008|16:05] C:\DOCUME~1\Thomas\APPLIC~1\TeamViewer
[14/12/2008|18:30] C:\DOCUME~1\Thomas\APPLIC~1\Thunderbird
[07/02/2009|12:32] C:\DOCUME~1\Thomas\APPLIC~1\TuneUp Software
[06/12/2008|16:07] C:\DOCUME~1\Thomas\APPLIC~1\Ulead Systems
[06/11/2009|13:35] C:\DOCUME~1\Thomas\APPLIC~1\vlc
[11/07/2009|11:55] C:\DOCUME~1\Thomas\APPLIC~1\Vso
[30/10/2008|15:18] C:\DOCUME~1\Thomas\APPLIC~1\WinRAR
[06/11/2009|10:52] C:\DOCUME~1\Thomas\APPLIC~1\wipe debug bows
[31/12/2008|17:15] C:\DOCUME~1\Thomas\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[20/11/2009 20:00][--ah-----] C:\WINDOWS\tasks\A72006739187B6FB.job
[20/11/2009 20:14][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[20/11/2009 08:25][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[20/11/2009 20:00][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[22/10/2009 06:03][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[20/11/2009 08:24][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( A72006739187B6FB.job )=( c:\docume~1\thomas\applic~1\wipede~1\holebytecity.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[19/03/2009|11:45] C:\Program Files\Adobe
[19/09/2009|12:44] C:\Program Files\adslTV
[28/10/2008|12:59] C:\Program Files\Analog Devices
[30/10/2008|14:50] C:\Program Files\Apple Software Update
[24/10/2009|17:11] C:\Program Files\Atelier Web
[20/05/2009|15:39] C:\Program Files\Avira
[24/01/2009|16:35] C:\Program Files\Azureus
[04/06/2009|17:05] C:\Program Files\Bonjour
[28/08/2009|12:30] C:\Program Files\CCleaner
[19/08/2009|16:09] C:\Program Files\CDBurnerXP
[06/11/2009|10:51] C:\Program Files\Circle Developement
[22/11/2008|17:29] C:\Program Files\Club-Internet
[02/05/2009|12:36] C:\Program Files\Common Files
[01/10/2009|19:54] C:\Program Files\CPUID
[01/01/2009|15:05] C:\Program Files\CursorXP
[05/11/2008|19:48] C:\Program Files\DAEMON Tools Lite
[15/11/2008|11:35] C:\Program Files\DAEMON Tools Toolbar
[07/08/2009|17:36] C:\Program Files\DivX
[30/12/2008|17:51] C:\Program Files\Domain Tools
[15/02/2009|14:46] C:\Program Files\EA GAMES
[09/08/2009|12:25] C:\Program Files\eMule
[29/09/2009|19:29] C:\Program Files\Fichiers communs
[30/10/2008|15:52] C:\Program Files\FileSubmit
[20/05/2009|17:41] C:\Program Files\FileZilla FTP Client
[03/01/1980|23:02] C:\Program Files\Google
[09/08/2009|12:25] C:\Program Files\Gpotato.eu
[30/10/2008|13:15] C:\Program Files\Hercules
[04/10/2009|13:11] C:\Program Files\Illustrate
[29/05/2009|21:52] C:\Program Files\Image-Line
[23/01/2009|15:21] C:\Program Files\IncrediMail
[15/11/2009|19:10] C:\Program Files\InstallShield Installation Information
[21/08/2009|13:12] C:\Program Files\Internet Explorer
[11/09/2009|18:25] C:\Program Files\iPod
[11/09/2009|18:27] C:\Program Files\iTunes
[08/09/2009|17:52] C:\Program Files\Java
[15/09/2009|19:51] C:\Program Files\JRE
[28/04/2009|19:24] C:\Program Files\LimeWire
[25/09/2009|18:48] C:\Program Files\Logitech
[26/03/2009|20:42] C:\Program Files\Lokas
[01/02/2009|17:16] C:\Program Files\ma-config.com
[13/11/2009|12:08] C:\Program Files\Malwarebytes' Anti-Malware
[17/04/2009|16:37] C:\Program Files\Media Pocket
[20/12/2008|21:29] C:\Program Files\Messenger
[06/11/2009|10:51] C:\Program Files\Messenger Plus! Live
[04/10/2009|10:04] C:\Program Files\Microsoft
[12/12/2008|21:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[26/10/2008|20:50] C:\Program Files\microsoft frontpage
[22/03/2009|10:29] C:\Program Files\Microsoft Games
[10/09/2009|18:57] C:\Program Files\Microsoft Silverlight
[04/10/2009|10:06] C:\Program Files\Microsoft SQL Server Compact Edition
[30/12/2008|14:21] C:\Program Files\Movie Maker
[20/11/2009|18:52] C:\Program Files\Mozilla Firefox
[23/06/2009|13:49] C:\Program Files\Mozilla Thunderbird
[21/08/2009|13:15] C:\Program Files\MSBuild
[26/10/2008|20:46] C:\Program Files\MSN
[26/10/2008|20:46] C:\Program Files\MSN Gaming Zone
[12/12/2008|21:29] C:\Program Files\MSXML 4.0
[20/12/2008|18:57] C:\Program Files\NetMeeting
[19/02/2009|17:20] C:\Program Files\Network Stumbler
[26/10/2008|20:46] C:\Program Files\Online Services
[15/09/2009|19:51] C:\Program Files\OpenOffice.org 3
[12/08/2009|22:14] C:\Program Files\Outlook Express
[08/11/2008|18:11] C:\Program Files\Outsim
[15/11/2009|19:10] C:\Program Files\PC Inspector File Recovery
[19/08/2009|15:25] C:\Program Files\PhotoFiltre Studio
[10/08/2009|12:03] C:\Program Files\Pinnacle
[25/10/2009|15:49] C:\Program Files\Project64 1.6
[19/09/2009|12:48] C:\Program Files\PulsPlayer
[11/09/2009|18:22] C:\Program Files\QuickTime
[23/01/2009|15:21] C:\Program Files\Ref Hotkey
[21/08/2009|13:15] C:\Program Files\Reference Assemblies
[22/11/2008|17:28] C:\Program Files\RegCleaner
[08/02/2009|12:19] C:\Program Files\RocketDock
[28/12/2008|11:14] C:\Program Files\RPG Maker VX
[02/11/2008|12:09] C:\Program Files\SearchSpy
[26/10/2008|20:48] C:\Program Files\Services en ligne
[26/04/2009|13:02] C:\Program Files\Speeditup Free
[19/08/2009|13:32] C:\Program Files\Spybot - Search & Destroy
[23/05/2009|13:33] C:\Program Files\Stardock
[21/08/2009|12:49] C:\Program Files\Styler
[04/11/2008|17:47] C:\Program Files\T4E
[24/01/2009|15:30] C:\Program Files\Trend Micro
[24/01/2009|15:13] C:\Program Files\Uninstall Information
[21/12/2008|15:02] C:\Program Files\VideoLAN
[07/12/2008|13:14] C:\Program Files\Vietcong
[27/07/2009|15:28] C:\Program Files\VirtualDJ
[18/03/2009|18:34] C:\Program Files\VstPlugins
[27/07/2009|15:26] C:\Program Files\Vuze
[07/02/2009|11:46] C:\Program Files\WinCustomize
[04/10/2009|10:07] C:\Program Files\Windows Live
[21/02/2009|10:46] C:\Program Files\Windows Live SkyDrive
[07/03/2009|15:43] C:\Program Files\Windows Media Connect 2
[07/03/2009|15:43] C:\Program Files\Windows Media Player
[20/12/2008|18:56] C:\Program Files\Windows NT
[02/11/2008|17:59] C:\Program Files\WinRAR
[06/11/2009|10:51] C:\Program Files\wipe debug bows
[02/05/2009|12:36] C:\Program Files\Xara
[26/10/2008|20:50] C:\Program Files\xerox
[11/07/2009|11:36] C:\Program Files\XP LogonUI
[02/05/2009|11:16] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[18/12/2008|17:43] C:\Program Files\Fichiers communs\Adobe
[11/09/2009|18:25] C:\Program Files\Fichiers communs\Apple
[30/09/2009|18:09] C:\Program Files\Fichiers communs\Blizzard Entertainment
[31/12/2008|15:07] C:\Program Files\Fichiers communs\DirectX
[07/08/2009|17:35] C:\Program Files\Fichiers communs\DivX Shared
[16/01/2009|20:14] C:\Program Files\Fichiers communs\InstallShield
[25/09/2009|18:52] C:\Program Files\Fichiers communs\logishrd
[19/09/2009|12:49] C:\Program Files\Fichiers communs\Logitech
[22/11/2008|12:22] C:\Program Files\Fichiers communs\Macrovision Shared
[20/05/2009|15:32] C:\Program Files\Fichiers communs\Microsoft Shared
[26/10/2008|20:47] C:\Program Files\Fichiers communs\MSSoap
[06/12/2008|19:09] C:\Program Files\Fichiers communs\NSV
[26/10/2008|20:47] C:\Program Files\Fichiers communs\Services
[26/10/2008|21:01] C:\Program Files\Fichiers communs\SpeechEngines
[11/07/2009|11:52] C:\Program Files\Fichiers communs\Stardock
[30/12/2008|14:21] C:\Program Files\Fichiers communs\System
[29/12/2008|17:22] C:\Program Files\Fichiers communs\Windows Live
[22/11/2008|17:27] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[10/08/2009|12:03] C:\Program Files\Fichiers communs\Yahoo!

--------------------\\ Process

( 42 Processes )

IEXPLORE.EXE ~ [PID:3748]
IEXPLORE.EXE ~ [PID:3904]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf\Cake Slow.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Htm Support Bait Deaf\Cake Slow.exe
C:\DOCUME~1\Thomas\APPLIC~1\wipede~1
C:\DOCUME~1\Thomas\APPLIC~1\wipede~1\BINDTONSBIASSIXTH.exe
C:\DOCUME~1\Thomas\APPLIC~1\wipede~1\holebytecity.exe
C:\DOCUME~1\Thomas\APPLIC~1\wipede~1\ScrCreative.exe
C:\DOCUME~1\Thomas\APPLIC~1\wipede~1\ubmjmifi.exe
C:\Program Files\wipede~1
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\Thomas\Cookies\thomas@advertstream[1].txt
C:\DOCUME~1\Thomas\Cookies\thomas@ads.adserver5[1].txt
C:\DOCUME~1\Thomas\Cookies\thomas@fr.partypoker[1].txt
C:\DOCUME~1\Thomas\Cookies\thomas@partypoker[2].txt
C:\DOCUME~1\Thomas\Cookies\thomas@888[1].txt
C:\WINDOWS\Tasks\A72006739187B6FB.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"way logo"="C:\\DOCUME~1\\Thomas\\APPLIC~1\\WIPEDE~1\\ScrCreative.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-20 20:16:48
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 67

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Thomas\Application Data\Azureus\torrents\Adobe After Effects CS3 + Crack [[TRACKER-SURFER.FR (french)]] [mininova].torrent


[F:73][D:6]-> C:\DOCUME~1\Thomas\LOCALS~1\Temp
[F:97][D:0]-> C:\DOCUME~1\Thomas\Cookies
[F:2699][D:5]-> C:\DOCUME~1\Thomas\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 20/11/2009|20:18 - Option : [1]

--------------------\\ Fin du rapport a 20:18:46

Logfile of random's system information tool 1.06 (written by random/random)
Run by Thomas at 2009-11-20 20:49:24
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 6 GB (8%) free of 76 GB
Total RAM: 503 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:49:44, on 20/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Thomas\Mes documents\Téléchargements\RSIT.exe
C:\Documents and Settings\Thomas\Mes documents\Téléchargements\Thomas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: WiFi Station.lnk = ?
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate1c9eceaf8bc3fc7) (gupdate1c9eceaf8bc3fc7) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6626 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Club-Internet_McciTrayApp]
C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe [2005-06-02 543232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2007-01-13 163840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2007-01-13 131072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2005-08-11 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-09-08 305440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate]
C:\Program Files\Logitech\Video\ManifestEngine.exe boot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair]
C:\Program Files\Logitech\Video\ISStart.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
C:\Program Files\Logitech\Video\LogiTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogonStudio]
C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe [2002-09-03 987187]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
C:\WINDOWS\system32\LVCOMSX.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\WINDOWS\system32\igfxpers.exe [2007-01-13 135168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Docteur Club Internet.lnk]
C:\PROGRA~1\CLUB-I~1\DRCLUB~1\bin\matcli.exe -boot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TuneUp.Defrag"=3

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-01-13 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\IncrediMail\bin\ImApp.exe"="C:\Program Files\IncrediMail\bin\ImApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\FileZilla FTP Client\filezilla.exe"="C:\Program Files\FileZilla FTP Client\filezilla.exe:*:Enabled:FileZilla FTP Client"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Adobe\Adobe Flash CS3\Flash.exe"="C:\Program Files\Adobe\Adobe Flash CS3\Flash.exe:*:Enabled:Adobe Flash CS3"
"C:\Program Files\Microsoft Games\Age of Empires III\age3.exe"="C:\Program Files\Microsoft Games\Age of Empires III\age3.exe:*:Enabled:Age of Empires 3"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled innacle VideoSpin"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"F:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe"="F:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{33664aac-301e-11de-ba4d-0008d33a756a}]
shell\AutoRun\command - H:\Memorybar.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{728215e2-a397-11dd-96c0-806d6172696f}]
shell\AutoRun\command - setupSNK.exe


======File associations======

.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2009-11-20 20:49:24 ----DC---- C:\rsit
2009-11-20 20:15:01 ----AC---- C:\lopR.txt
2009-11-20 20:14:35 ----DC---- C:\Lop SD
2009-11-15 19:10:19 ----D---- C:\Program Files\PC Inspector File Recovery
2009-11-13 12:07:58 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-31 11:55:57 ----D---- C:\ubuntu
2009-10-25 15:44:56 ----D---- C:\Program Files\Project64 1.6
2009-10-24 17:11:14 ----D---- C:\Program Files\Atelier Web
2009-10-22 14:46:03 ----D---- C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment

======List of files/folders modified in the last 1 months======

2009-11-20 20:49:28 ----D---- C:\WINDOWS\Prefetch
2009-11-20 20:27:34 ----RD---- C:\Program Files
2009-11-20 20:27:33 ----SD---- C:\WINDOWS\Tasks
2009-11-20 18:52:20 ----D---- C:\Program Files\Mozilla Firefox
2009-11-20 18:17:09 ----D---- C:\WINDOWS\Temp
2009-11-20 08:29:17 ----D---- C:\WINDOWS\system32
2009-11-20 08:29:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-20 08:25:16 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-19 21:41:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-15 19:10:17 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-13 12:08:03 ----D---- C:\WINDOWS\system32\drivers
2009-11-12 07:25:58 ----D---- C:\WINDOWS
2009-11-08 14:13:23 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-07 20:52:37 ----D---- C:\Documents and Settings\Thomas\Application Data\Azureus
2009-11-06 13:35:57 ----D---- C:\Documents and Settings\Thomas\Application Data\vlc
2009-11-06 10:51:29 ----D---- C:\Program Files\Messenger Plus! Live
2009-11-02 16:09:39 ----SHD---- C:\WINDOWS\Installer
2009-10-31 12:00:00 ----RASHC---- C:\boot.ini
2009-10-26 11:50:04 ----D---- C:\Documents and Settings\Thomas\Application Data\FileZilla
2009-10-26 11:18:43 ----D---- C:\Documents and Settings\Thomas\Application Data\LimeWire
2009-10-25 18:08:55 ----A---- C:\WINDOWS\system32\logonuiX.exe
2009-10-25 18:07:33 ----A---- C:\WINDOWS\LogonStudio.ini
2009-10-25 15:45:09 ----DC---- C:\Config.Msi
2009-10-25 15:45:08 ----SD---- C:\Documents and Settings\Thomas\Application Data\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-07-14 28520]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-10-29 21419]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-08-18 55656]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2003-10-23 100384]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-09-10 176640]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-01-13 5672032]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2007-10-12 490776]
R3 RT73;Hercules Wireless USB Dongle Driver ; C:\WINDOWS\system32\DRIVERS\rt73.sys [2006-12-21 429440]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-04-15 612416]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 alyuxdxb;alyuxdxb; C:\WINDOWS\system32\drivers\alyuxdxb.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Thomas\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DSDrv4;DSDrv4; \??\C:\PROGRA~1\K!TV\Plugins\S_Bt8x8\DSDrv4.sys []
S3 ggsemc;Sony Ericsson USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2006-03-01 8704]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
S3 mirrorv3;mirrorv3; C:\WINDOWS\system32\DRIVERS\rminiv3.sys [2006-11-01 3328]
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\NSNDIS5.SYS []
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-04-16 47360]
S3 PEEK5;PEEK5 Protocol Driver; \??\C:\DOCUME~1\Thomas\MESDOC~1\TLCHAR~1\PIRATE~1\Tools\WINAIR~1\WINAIR~1\WINAIR~1\PEEK5.SYS []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-14 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-18 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-07-13 71096]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-09-08 545568]
S2 gupdate1c9eceaf8bc3fc7;Service Google Update (gupdate1c9eceaf8bc3fc7); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-14 133104]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-11-22 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-05-23 361216]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-11-20 20:49:50

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe BridgeTalk Plugin CS3-->MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Creative Suite 3 Web Premium-->MsiExec.exe /I{69B6B4A5-1C4D-4F16-BB11-A4EB9A439116}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe Dreamweaver CS3-->MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Extension Manager CS3-->MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}
Adobe Flash CS3-->MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Video Encoder-->MsiExec.exe /I{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->MsiExec.exe /I{C1FA4B3B-1625-4922-9C9D-780E8FCE161A}
Adobe Reader 9.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Setup-->MsiExec.exe /I{BE136F60-5D0F-4663-8B32-938A3EFD3FCB}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WAS CS3-->MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AHV content for Acrobat and Flash-->MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
Ajouter ou supprimer Adobe Creative Suite 3 Web Premium-->C:\Program Files\Fichiers communs\Adobe\Installers\e7f691c6f2bf7b70c25ea19f3d73b6e\Setup.exe
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AW IP Locator-->"C:\Program Files\Atelier Web\AWIPLoc\unins000.exe"
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.50" /clone_wait /hide_progress
CPUID CPU-Z 1.52.2-->"C:\Program Files\CPUID\CPU-Z\unins000.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
FileZilla Client 3.2.4.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe
FL Studio 8-->C:\Program Files\Image-Line\FL Studio 8\uninstall.exe
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
HijackThis 2.0.2-->"C:\Documents and Settings\Thomas\Mes documents\Téléchargements\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
Ivalice Launcher Version 11-->"F:\Program Files\World of Warcraft\World of Warcraft\unins000.exe"
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 5.1.2-->"C:\Program Files\LimeWire\uninstall.exe"
Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
LogonStudio-->C:\PROGRA~1\WINCUS~1\LOGONS~1\UNWISE.EXE C:\PROGRA~1\WINCUS~1\LOGONS~1\INSTALL.LOG
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0-->MsiExec.exe /I{428102E6-8A39-48B9-8389-847F5A44A600}
MSXML 4.0-->MsiExec.exe /I{54BB0384-1C33-488F-A95B-877E480D3EDC}
Need for Speed Underground 2-->C:\Program Files\EA GAMES\Need for Speed Underground 2\EAUninstall.exe
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
Pinnacle VideoSpin-->MsiExec.exe /I{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}
Project64 1.6-->MsiExec.exe /X{9559F7CA-5E34-4237-A2D9-D856464AD727}
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
RocketDock 1.3.5-->"C:\Program Files\RocketDock\unins000.exe"
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe"
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Techno4ever Player-->C:\Program Files\T4E\Player\T4E_Uninstaller.exe
Ubuntu-->C:\ubuntu\uninstall-wubi.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
Visual C++ 8.0 CRT (x86) WinSXS MSM-->MsiExec.exe /I{98CB24AD-52FB-DB5F-FF1F-C8B3B9A1E18E}
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vuze-->C:\Program Files\Vuze\uninstall.exe
WiFi Station-->C:\Program Files\InstallShield Installation Information\{DECE22F4-EEDD-4615-BC56-2F4827FAD64B}\setup.exe -runfromtemp -l0x040c -removeonly
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft\Uninstall.exe
Xara3D6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3783869-5D14-4838-A042-910DF816D070}\setup.exe" -l0x9

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: C-C08A9E6BF21A4
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

Record Number: 23644
Source Name: Service Control Manager
Time Written: 20090924180803.000000+120
Event Type: Informations
User:

Computer Name: C-C08A9E6BF21A4
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 23643
Source Name: Service Control Manager
Time Written: 20090924180803.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: C-C08A9E6BF21A4
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : en cours d'exécution.

Record Number: 23642
Source Name: Service Control Manager
Time Written: 20090924180803.000000+120
Event Type: Informations
User:

Computer Name: C-C08A9E6BF21A4
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Carte de performance WMI.

Record Number: 23641
Source Name: Service Control Manager
Time Written: 20090924180803.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: C-C08A9E6BF21A4
Event Code: 7036
Message: Le service Service de transfert intelligent en arrière-plan est entré dans l'état : en cours d'exécution.

Record Number: 23640
Source Name: Service Control Manager
Time Written: 20090924180802.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: C-C08A9E6BF21A4
Event Code: 1
Message:
Record Number: 3900
Source Name: Bonjour Service
Time Written: 20090614104806.000000+120
Event Type: Informations
User:

Computer Name: C-C08A9E6BF21A4
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\System Volume Information\_restore{6F0C4E7D-50F6-4F4C-BA04-A430AFC0FB29}\RP170\A0051414.exe
un code suspect avec la désignation 'ADSPY/BetterInternet.YC'!

Record Number: 3899
Source Name: Avira AntiVir
Time Written: 20090613223333.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: C-C08A9E6BF21A4
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\System Volume Information\_restore{6F0C4E7D-50F6-4F4C-BA04-A430AFC0FB29}\RP170\A0051414.exe
un code suspect avec la désignation 'ADSPY/BetterInternet.YC'!

Record Number: 3898
Source Name: Avira AntiVir
Time Written: 20090613212750.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: C-C08A9E6BF21A4
Event Code: 1002
Message: Application bloquée SpybotSD.exe, version 1.6.2.46, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 3897
Source Name: Application Hang
Time Written: 20090613185850.000000+120
Event Type: erreur
User:

Computer Name: C-C08A9E6BF21A4
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\System Volume Information\_restore{6F0C4E7D-50F6-4F4C-BA04-A430AFC0FB29}\RP170\A0051414.exe
un code suspect avec la désignation 'ADSPY/BetterInternet.YC'!

Record Number: 3896
Source Name: Avira AntiVir
Time Written: 20090613150248.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Fichiers communs\DivX Shared\;C:\Program Files\Pinnacle\Shared Files\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------