Pb de fenetre publicitaire intempestive
Dernière réponse : dans Sécurité
il y a des fenetres de site web qui s'affichent m'invitant à faire des jeux sans invitattion.
besoins d'aide pour m'en debarrasser. cela se produit qd je fais de recherche sur les moteurs de recherche google ou bing.
je suis sur un pc avec xp.
besoins d'aide pour m'en debarrasser. cela se produit qd je fais de recherche sur les moteurs de recherche google ou bing.
je suis sur un pc avec xp.
Autres pages sur : fenetre publicitaire intempestive
Lassé par la pub ? Créez un compte
Bonsoir, commence par faire un scan RSIT:
Télécharge sur le bureau « RSIT »
* Double-clic dessus
(Avec VISTA > clic-droit et > Exécuter en tant qu'administrateur)
* Laisser « 1 month »
* Cliquer sur « Continue »
* À la fin du scan 2 rapports sont créés: « log.txt » et « info.txt »
* Copier/coller les deux rapports dans la réponse
** Note: les rapports se situent aussi dans « C:\rsit\log.txt » et « C:\rsit\info.txt »
Télécharge sur le bureau « RSIT »
* Double-clic dessus
(Avec VISTA > clic-droit et > Exécuter en tant qu'administrateur)
* Laisser « 1 month »
* Cliquer sur « Continue »
* À la fin du scan 2 rapports sont créés: « log.txt » et « info.txt »
* Copier/coller les deux rapports dans la réponse
** Note: les rapports se situent aussi dans « C:\rsit\log.txt » et « C:\rsit\info.txt »
slt , ichigo11, je recommence car j'ai eu un soucis
rapport1
Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2010-01-09 10:59:22
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 158 GB (84%) free of 189 GB
Total RAM: 958 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:59:53, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://adsmarket.every.com/landing/110/test-qi/FR/?ce_c...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler V3.PIF = C:\DOCUME~1\Owner\MENUDM~1\PROGRA~1\DMARRA~1\POWERR~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 12203 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
PowerReg Scheduler V3.exe
PowerReg Scheduler V3.PIF
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 10:59:28 ----D---- C:\WINDOWS\Prefetch
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 10:50:31 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 10:34:11 ----D---- C:\WINDOWS\Temp
2010-01-09 10:30:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 10:30:03 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 07:52:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 07:51:18 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-08 07:46:13 ----D---- C:\WINDOWS
2010-01-06 09:32:25 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:23:02 ----D---- C:\WINDOWS\system32
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:05:00 ----HD---- C:\WINDOWS\msdownld.tmp
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
rapport2
info.txt logfile of random's system information tool 1.06 2010-01-09 10:59:56
======Uninstall list======
-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNNMP.exe /UNINSTALL
-->MsiExec.exe /I{5B782FFA-6A95-480D-8E0A-0954A14693D6}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Photoshop Elements 3.0-->MsiExec.exe /I{851C67EF-068A-4060-9EF5-2E3DDCD68382}
Adobe Reader 8.1.5 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Agathe 1.31.200.14 (build:1.31.200.176)-->"C:\Program Files\Agathe Millénium Gestion\unins000.exe"
AOL (France)-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Creative Photo Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c /remove
Creative WebCam Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c /remove
Creative WebCam Instant Driver (1.03.02.0425)-->C:\WINDOWS\CtDrvIns.exe -uninstall -script PD0620.uns -unsext NT -plugin P0620Pin.dll -pluginres CtCamPin.crl
DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Easy-WebPrint-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Enregistrement du produit WebCam Instant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x40c /remove
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Customer Participation Program 10.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3-->C:\Program Files\HP\Digital Imaging\{AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}\setup\hpzscr01.exe -datfile hposcr28.dat -onestop
HP Imaging Device Functions 10.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 2.5-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 10.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{11B83AD3-7A46-4C2E-A568-9505981D4C6F}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Maj Sesam 1.0-->C:\WINDOWS\unins000.exe
Manuel d'utilisation de Creative WebCam Instant (Français)-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Creative WebCam Instant\Manuel d'utilisation de Creative WebCam Instant\French\CTManual.isu"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
mes données 1.0.0.7-->C:\Program Files\mes données\uninst.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 CD-ROM 2-->MsiExec.exe /I{0004040C-78E1-11D2-B60F-006097C998E7}
Microsoft Office 2000 Premium-->MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""
OLITEC PCI V92 Ready V2 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F30&SUBSYS_205514F1\HXFSETUP.EXE -U -IPSCRCTR5K.INF
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Orange - Logiciels Internet-->C:\Program Files\OrangeHSS\installation\core\Installgui.exe -u
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
SightSpeed (remove only)-->"C:\Program Files\SightSpeed\uninst.exe"
Skype 3.0-->"C:\Program Files\Skype\Phone\unins000.exe"
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SoftK56 Data Fax-->C:\Program Files\CONEXANT\CNXT_MODEM_USB_VID_0572&PID_1300\HXFSETUP.EXE -U -IVID_0572&PID_1300
Sygate Personal Firewall-->MsiExec.exe /I{F34D9A5F-484A-4E31-A9D3-908CB265B289}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Utilitaire Effets vidéos avancés-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c /remove
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Visualiseur 1.00-->"C:\Program Files\CBA\VisuEtat\unins000.exe"
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Junglebook Compatiblity Fix-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{659660d0-edb3-4afb-be92-7ea22a0cae65}.sdb"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XIRING - lecteurs USB-->MsiExec.exe /X{954386A2-B999-4314-A2EC-87AF419E8481}
======Security center information======
AV: AntiVir Desktop (disabled) (outdated)
FW: Sygate Personal Firewall
======System event log======
Computer Name: ETIMAEL
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.
Record Number: 20396
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User:
Computer Name: ETIMAEL
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.
Record Number: 20395
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User: ETIMAEL\Owner
Computer Name: ETIMAEL
Event Code: 7023
Message: Le service Gestion d'applications s'est arrêté avec l'erreur :
Le module spécifié est introuvable.
Record Number: 20394
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: erreur
User:
Computer Name: ETIMAEL
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.
Record Number: 20393
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User:
Computer Name: ETIMAEL
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.
Record Number: 20392
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User: ETIMAEL\Owner
=====Application event log=====
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40296
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123214049.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40295
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123214033.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40294
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174752.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40293
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174752.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40292
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174740.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2c02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
-----------------EOF-----------------
rapport1
Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2010-01-09 10:59:22
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 158 GB (84%) free of 189 GB
Total RAM: 958 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:59:53, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://adsmarket.every.com/landing/110/test-qi/FR/?ce_c...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler V3.PIF = C:\DOCUME~1\Owner\MENUDM~1\PROGRA~1\DMARRA~1\POWERR~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 12203 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
PowerReg Scheduler V3.exe
PowerReg Scheduler V3.PIF
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 10:59:28 ----D---- C:\WINDOWS\Prefetch
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 10:50:31 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 10:34:11 ----D---- C:\WINDOWS\Temp
2010-01-09 10:30:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 10:30:03 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 07:52:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 07:51:18 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-08 07:46:13 ----D---- C:\WINDOWS
2010-01-06 09:32:25 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:23:02 ----D---- C:\WINDOWS\system32
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:05:00 ----HD---- C:\WINDOWS\msdownld.tmp
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
rapport2
info.txt logfile of random's system information tool 1.06 2010-01-09 10:59:56
======Uninstall list======
-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNNMP.exe /UNINSTALL
-->MsiExec.exe /I{5B782FFA-6A95-480D-8E0A-0954A14693D6}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Photoshop Elements 3.0-->MsiExec.exe /I{851C67EF-068A-4060-9EF5-2E3DDCD68382}
Adobe Reader 8.1.5 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Agathe 1.31.200.14 (build:1.31.200.176)-->"C:\Program Files\Agathe Millénium Gestion\unins000.exe"
AOL (France)-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Creative Photo Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c /remove
Creative WebCam Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c /remove
Creative WebCam Instant Driver (1.03.02.0425)-->C:\WINDOWS\CtDrvIns.exe -uninstall -script PD0620.uns -unsext NT -plugin P0620Pin.dll -pluginres CtCamPin.crl
DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Easy-WebPrint-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Enregistrement du produit WebCam Instant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ADC07715-D995-45EE-8810-0F1A733D580D}\SETUP.EXE" -l0x40c /remove
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Customer Participation Program 10.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3-->C:\Program Files\HP\Digital Imaging\{AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}\setup\hpzscr01.exe -datfile hposcr28.dat -onestop
HP Imaging Device Functions 10.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 2.5-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 10.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{11B83AD3-7A46-4C2E-A568-9505981D4C6F}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Maj Sesam 1.0-->C:\WINDOWS\unins000.exe
Manuel d'utilisation de Creative WebCam Instant (Français)-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Creative WebCam Instant\Manuel d'utilisation de Creative WebCam Instant\French\CTManual.isu"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
mes données 1.0.0.7-->C:\Program Files\mes données\uninst.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 CD-ROM 2-->MsiExec.exe /I{0004040C-78E1-11D2-B60F-006097C998E7}
Microsoft Office 2000 Premium-->MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""
OLITEC PCI V92 Ready V2 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F30&SUBSYS_205514F1\HXFSETUP.EXE -U -IPSCRCTR5K.INF
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Orange - Logiciels Internet-->C:\Program Files\OrangeHSS\installation\core\Installgui.exe -u
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
SightSpeed (remove only)-->"C:\Program Files\SightSpeed\uninst.exe"
Skype 3.0-->"C:\Program Files\Skype\Phone\unins000.exe"
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
SoftK56 Data Fax-->C:\Program Files\CONEXANT\CNXT_MODEM_USB_VID_0572&PID_1300\HXFSETUP.EXE -U -IVID_0572&PID_1300
Sygate Personal Firewall-->MsiExec.exe /I{F34D9A5F-484A-4E31-A9D3-908CB265B289}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Utilitaire Effets vidéos avancés-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c /remove
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Visualiseur 1.00-->"C:\Program Files\CBA\VisuEtat\unins000.exe"
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Junglebook Compatiblity Fix-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{659660d0-edb3-4afb-be92-7ea22a0cae65}.sdb"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XIRING - lecteurs USB-->MsiExec.exe /X{954386A2-B999-4314-A2EC-87AF419E8481}
======Security center information======
AV: AntiVir Desktop (disabled) (outdated)
FW: Sygate Personal Firewall
======System event log======
Computer Name: ETIMAEL
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.
Record Number: 20396
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User:
Computer Name: ETIMAEL
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.
Record Number: 20395
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User: ETIMAEL\Owner
Computer Name: ETIMAEL
Event Code: 7023
Message: Le service Gestion d'applications s'est arrêté avec l'erreur :
Le module spécifié est introuvable.
Record Number: 20394
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: erreur
User:
Computer Name: ETIMAEL
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.
Record Number: 20393
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User:
Computer Name: ETIMAEL
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.
Record Number: 20392
Source Name: Service Control Manager
Time Written: 20091215235142.000000+060
Event Type: Informations
User: ETIMAEL\Owner
=====Application event log=====
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40296
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123214049.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40295
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123214033.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40294
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174752.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40293
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174752.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ETIMAEL
Event Code: 101
Message:
Record Number: 40292
Source Name: Automatic LiveUpdate Scheduler
Time Written: 20091123174740.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2c02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
-----------------EOF-----------------
Télécharger sur le bureau « OTMoveIt.exe »
* Copier ce texte
* Double-clic sur OTMoveIt.exe
* Dans le cadre de Gauche « Paste Instructions for Items to be Moved » ==> clic-droit ==> coller
* Clic « MoveIt! »
* si redémarrage demandé==> Clic : « YES »
* Un rapport dans ==> C:\_OTMoveIt\MovedFiles\date du jour à copier/coller dans la réponse (format du type => mmjjaaaa_hhmmss.log)
===
Et ensuite:
Télécharger sur le bureau Malwarebyte's Anti-Malware
* Double-clic sur « mbam-setup » pour lancer l'installation
* Installer simplement sans rien modifier
* Quand le programme lancé ==> onglet « Mise à jour » cliquer sur ==> « Recherche de mise à jour »
Onglet « Recherche » ==> cocher « Exécuter un examen complet »
* Clic « Rechercher »
* Cocher tous les disque dur
* Clic « Lancer l'examen »
* En fin de scan , si infection trouvée
==> Clic « Afficher résultat »
* Fermer vos applications en cours
* Vérifier si tout est coché et clic « Supprimer la sélection »
* un rapport s'ouvre le copier et le coller dans la réponse
* Copier ce texte
:Processes
explorer.exe
:Files
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.exe
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.PIF
:Commands
[emptytemp]
[start explorer]
[Reboot]
explorer.exe
:Files
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.exe
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.PIF
:Commands
[emptytemp]
[start explorer]
[Reboot]
* Double-clic sur OTMoveIt.exe
* Dans le cadre de Gauche « Paste Instructions for Items to be Moved » ==> clic-droit ==> coller
* Clic « MoveIt! »
* si redémarrage demandé==> Clic : « YES »
* Un rapport dans ==> C:\_OTMoveIt\MovedFiles\date du jour à copier/coller dans la réponse (format du type => mmjjaaaa_hhmmss.log)
===
Et ensuite:
Télécharger sur le bureau Malwarebyte's Anti-Malware
* Double-clic sur « mbam-setup » pour lancer l'installation
* Installer simplement sans rien modifier
* Quand le programme lancé ==> onglet « Mise à jour » cliquer sur ==> « Recherche de mise à jour »
Onglet « Recherche » ==> cocher « Exécuter un examen complet »
* Clic « Rechercher »
* Cocher tous les disque dur
* Clic « Lancer l'examen »
* En fin de scan , si infection trouvée
==> Clic « Afficher résultat »
* Fermer vos applications en cours
* Vérifier si tout est coché et clic « Supprimer la sélection »
* un rapport s'ouvre le copier et le coller dans la réponse
slt ichiogo11
voila rapport ot
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.exe moved successfully.
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.PIF moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: All UsersApplication Data
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 114889 bytes
User: LocalService
->Temp folder emptied: 115348 bytes
->Temporary Internet Files folder emptied: 806888 bytes
User: NetworkService
->Temp folder emptied: 134170 bytes
->Temporary Internet Files folder emptied: 10106337 bytes
User: Owner
->Temp folder emptied: 1668321 bytes
->Temporary Internet Files folder emptied: 8817951 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 5495434 bytes
->Google Chrome cache emptied: 6447838 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 2676224 bytes
Windows Temp folder emptied: 24773 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23961144 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 16541415 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 73,00 mb
OTM by OldTimer - Version 3.1.4.0 log created on 01092010_120318
Files moved on Reboot...
Registry entries deleted on Reboot...
et celui de mbam
Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3526
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
09/01/2010 13:16:06
mbam-log-2010-01-09 (13-16-06).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 183743
Temps écoulé: 47 minute(s), 20 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
et info sup la source de la pub
<html>
<head>
<title>Légende : La Guerre des Dragons - Jeu gratuit en ligne | jeux RPG en ligne, jeux gratuits en ligne, jeux flash</title>
<META NAME="Keywords" CONTENT="jeu, télécharger les jeux, télécharger gratuitement, flash, jeux flash, jeu online, jeux gratuits, jeu 3D, jeu RPG, jeux en ligne, wow, lineage, jeu en ligne, jeux de navigateur, jeux d'internet, jeux sur le PC, rpg, mmorpg, légende, des légendes, dragons, magmars, arène, aréha, fk, gladiateurs, combats, en ligne">
<META NAME="Description" CONTENT="Site officiel du jeu de rôle gratuit en ligne « Légende : La Guerre des Dragons ». La description du monde MMORPG, les règles du jeu internet, les descriptions des races, professions et des nouveautés du jeu. Possibilité de télécharger gratuitement le flash intégral du client du jeu. Une carte interactive du Monde de Faeo. Forum. Galerie des captures d'écran.">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link rel="alternate" type="application/rss+xml" title="Légende : La Guerre des Dragons - Jeu gratuit en ligne | jeux RPG en ligne, jeux gratuits en ligne, jeux flash" href="/info/news/rss/" />
<link href="style/main.css" rel="stylesheet" type="text/css">
<link rel=stylesheet type="text/css" href="images/locale/fr/alt.css">
<link href="style/face.css" rel="stylesheet" type="text/css">
<link rel="stylesheet" type="text/css" media="screen" href="style/general.css">
<script language="javascript"> AC_FL_RunContent = 0; </script>
<script language="javascript"> DetectFlashVer = 0; </script>
<script language="javaScript" src="js/common.js"></script>
<script language="javaScript" src="js/imghi.js"></script>
<script language="javaScript" src="js/ac_runactivecontent.js"></script>
<style>
p {margin:0 0 0 0}
img {behavior: url("js/pngbehavior.htc");}
td.right{
background:url("images/locale/fr/images/right_top_bg.jpg") no-repeat left top;
}
</style>
<script type="text/javascript">
function select_rating(id) {
document.getElementById("all").style.display = "none";
document.getElementById("kind1").style.display = "none";
document.getElementById("kind2").style.display = "none";
document.getElementById(id).style.display = "block";
}
var ua = navigator.userAgent.toLowerCase();
var isOpera = (ua.indexOf('opera') > -1);
var isIE = (!isOpera && ua.indexOf('msie') > -1);
function getDocumentHeight() {
return Math.max(document.compatMode != 'CSS1Compat' ? document.body.scrollHeight : document.documentElement.scrollHeight, getViewportHeight());
}
function getDocumentWidth() {
return Math.max(document.compatMode != 'CSS1Compat' ? document.body.scrollWidth : document.documentElement.scrollWidth, getViewportWidth());
}
function getViewportHeight() {
return ((document.compatMode || isIE) && !isOpera) ? (document.compatMode == 'CSS1Compat') ? document.documentElement.clientHeight : document.body.clientHeight : (document.parentWindow || document.defaultView).innerHeight;
}
function getViewportWidth() {
return ((document.compatMode || isIE) && !isOpera) ? (document.compatMode == 'CSS1Compat') ? document.documentElement.clientWidth : document.body.clientWidth : (document.parentWindow || document.defaultView).innerWidth;
}
var scrolltop = 0;
var scrollleft = 0;
var screenid = 0;
var screenoldid = 0;
var maxscreen = 6;
function screen_show(id) {
if (id<1||id>maxscreen) return false;
scrolltop = document.body.scrollTop;
scrollleft = document.body.scrollLeft;
screenid = id;
scrollTo(0,0);
gebi("screentable").style.width=getDocumentWidth();
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=15)";
mt.style.MozOpacity=0.15;
mt.style.opacity=0.15;
var mt1 = gebi("right_column");
mt1.style.visibility="hidden";
var mt2 = gebi("text");
mt2.style.visibility="hidden";
screen_load();
gebi("screenshot").style.visibility="visible";
gebi("lockimg").style.height=getDocumentHeight();
gebi("lockimg").style.width=getDocumentWidth();
gebi("lock").style.visibility="visible";
return false;
}
function screen_hide() {
screenoldid = 0;
screenid = 0;
var im = gebi("screenimg");
im.src="/images/d.gif";
var tmpimg = gebi("tmpimg");
tmpimg.src = "/images/d.gif";
gebi("lock").style.visibility="hidden";
gebi("screenshot").style.visibility="hidden";
gebi("screenprev").style.visibility="hidden";
gebi("screennext").style.visibility="hidden";
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=100)";
mt.style.MozOpacity=1;
mt.style.opacity=1;
var mt1 = gebi("right_column");
mt1.style.visibility="visible";
var mt2 = gebi("text");
mt2.style.visibility="visible";
scrollTo(scrollleft,scrolltop);
return false;
}
function screen_next() {
id = screenid+1;
if (id<1||id>maxscreen) return false;
screenid = id;
screen_load();
return false;
}
function screen_prev() {
id = screenid-1;
if (id<1||id>maxscreen) return false;
screenid = id;
screen_load();
return false;
}
function screen_load() {
id = screenid;
if (!id) return false;
if (id==screenoldid) return false;
var tmpimg = gebi("tmpimg");
tmpimg.src = "images/locale/fr/images/screens/screen"+id+".jpg";
var im = gebi("screenimg");
im.src = "images/locale/fr/images/loading.gif";
}
function screen_set() {
id = screenid;
if (!id) return false;
if (id==screenoldid) return false;
var im = gebi("screenimg");
im.src="images/locale/fr/images/screens/screen"+id+".jpg";
if (id==1) gebi("screenprev").style.visibility="hidden"; else gebi("screenprev").style.visibility="visible";
if (id==maxscreen) gebi("screennext").style.visibility="hidden"; else gebi("screennext").style.visibility="visible";
gebi("screenid").innerHTML = screenid;
gebi("maxscreen").innerHTML = maxscreen;
screenoldid = screenid;
return false;
}
function gebi(id) {
return this.document.getElementById(id);
}
function video_show() {
scrolltop = document.body.scrollTop;
scrollleft = document.body.scrollLeft;
scrollTo(0,0);
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=25)";
mt.style.MozOpacity=0.25;
mt.style.opacity=0.25;
var mt1 = gebi("right_column");
mt1.style.visibility="hidden";
var mt2 = gebi("text");
mt2.style.visibility="hidden";
gebi("lockimg").style.height=getDocumentHeight();
gebi("lockimg").style.width=getDocumentWidth();
gebi("lock").style.visibility="visible";
gebi("flashtest").innerHTML='<img src =images/locale/fr/images/flashimg.gif>';
create_video();
vid=document.getElementById("video");
vid.style.left = (getViewportWidth() - 640)/2;
vid.style.top = (getViewportHeight() - 480)/2;
vid.style.visibility="visible";
return false;
}
function create_video() {
var requiredMajorVersion = 9;
// Minor version of Flash required
var requiredMinorVersion = 0;
// Revision of Flash required
var requiredRevision = 60;
var hasRightVersion = DetectFlashVer(requiredMajorVersion, requiredMinorVersion, requiredRevision);
if(hasRightVersion) {
gebi("videoflash").innerHTML=AC_FL_RunContent(
'codebase', 'http://download.macromedia.com/pub/shockwave/cabs/flash...',
'width', '640',
'height', '480',
'src', 'images/swf/WohPlayer.swf',
'quality', 'high',
'pluginspage', 'http://www.macromedia.com/go/getflashplayer',
'align', 'middle',
'play', 'true',
'loop', 'true',
'scale', 'showall',
'wmode', 'window',
'devicefont', 'false',
'id', 'WohPlayer',
'bgcolor', '#ffffff',
'name', 'WohPlayer',
'menu', 'true',
'cancelwrite','true',
'allowScriptAccess','sameDomain',
'allowFullScreen','true',
'movie', 'images/swf/WohPlayer.swf',
'salign', '',
'flashVars', 'video_url=/static/flv/dwarvideo.flv&image_url=/images/locale/fr/images/sheara.jpg&play_on_start=0&show_hints=0&debug=1&metadata=73:640:480'
);
}else { // flash is too old or we can't detect the plugin
var alternateContent = 'Alternate HTML content should be placed here.'
+ 'This content requires the Adobe Flash Player.'
+ '<a href=http://www.macromedia.com/go/getflash/>Get Flash</a>';
document.write(alternateContent); // insert non-flash content
}
}
function video_hide() {
gebi("lock").style.visibility="hidden";
gebi("video").style.visibility="hidden";
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=100)";
mt.style.MozOpacity=1;
mt.style.opacity=1;
var mt1 = gebi("right_column");
mt1.style.visibility="visible";
var mt2 = gebi("text");
mt2.style.visibility="visible";
scrollTo(scrollleft,scrolltop);
gebi("videoflash").innerHTML="";
create_flash();
return false;
}
function create_flash(){
gebi("flashtest").innerHTML=AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','445',
'height','420',
'src','images/locale/fr/test_game.swf',
'movie','images/locale/fr/test_game.swf',
'cancelwrite','true',
'wmode','transparent',
'flashvars',location.search.substring(1),
'pluginspage','http://www.macromedia.com/go/getflashplayer'
);
}
</script></head>
<body class="body_bg lscroll">
<DIV ALIGN=CENTER>
<div id='video' style="position:absolute;width:640px;height:480px;visibility:hidden;z-index:2001;text-align:center;font-size:14px;color:#FFF78E">Regarder la vidéo (<a href="#" onclick="return video_hide();" style="color:#FFF78E; font-weight:bold;font-size:14px">Fermer</a>)<br />
<br />
<table width="640" height="1" border="0" cellspacing="0" cellpadding="0" align="center">
<tr valign="top" height="19"><td width="19"></td><td></td><td width="19"></td></tr>
<tr valign="top">
<td></td>
<td align="center" style="background:#000000 url(images/locale/fr/images/loading.gif) no-repeat center center"><div id="videoflash"></div></td>
<td></td>
</tr>
<tr valign="top" height="19"><td width="19"></td><td></td><td width="19"></td></tr>
</table>
</div>
<div id="lock" style="position: absolute;left:0px;top:0px;z-index:1000;visibility:hidden"><img id="lockimg" src="images/d.gif"></div>
<div id="screenshot" style="position: absolute;left:0px;top:0px;z-index:2000;visibility:hidden;">
<table width="100%" border="0" cellspacing="0" cellpadding="0" id="screentable">
<tr height=50><td colspan=3></td></tr>
<tr valign="top">
<td></td>
<td align="center" style="font-size:12px;color:#FFF78E">Screenshots <b id="screenid">0</b> sur <b id="maxscreen">0</b> (<a href="#" onclick="return screen_hide();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">Fermer</a>)</td>
<td ></td>
</tr>
<tr>
<td id="screenprev" align="right" style="padding-right: 15px"><a href="#" onclick="return screen_prev();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">« précédent</a></td>
<td><div id="tmp" style="position:absolute;visibility:hidden; border:1px"><img id="tmpimg" src="images/d.gif" onLoad="screen_set();"></div></td>
<td id="screennext" align="left" style="padding-left: 15px"><a href="#" onclick="return screen_next();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">Suivant »</a></td>
</tr>
</table>
<table width="1" height="1" border="0" cellspacing="0" cellpadding="0" align="center">
<tr valign="top" height="19">
<td></td></tr>
<tr valign="top">
<td align="center"><a href="#" onclick="return screen_hide();"><img id="screenimg" src="images/d.gif" title="Fermer" style="border:solid 1px black"></a></td>
</tr>
<tr valign="top" height="19">
<td></td>
</tr>
</table>
</div>
<table class=w100 cellspacing=0 name="maintable" id="maintable">
<tr>
<tD class=left> </td>
<td>
<table class=middle cellspacing=0>
<Tr>
<td class=left_column>
<table cellspacing=0>
<tR>
<td>
<script>
AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','283',
'height','340',
'src','images/locale/fr/left_top.swf',
'movie','images/locale/fr/left_top.swf',
'wmode','transparent',
'menu', 'false',
'quality','high',
'pluginspage','http://www.macromedia.com/go/getflashplayer'
)
</script>
</td>
</tr>
<tr>
<td class=login_place>
<form name="enter" method="post" action="login.php"><input type="image" src="images/d.gif" value="" style="height: 1px; visibility: visible; position: absolute;">
<table width="70%" border="0" cellspacing="0" cellpadding="0" class="tbl-mn_margin30">
<tr height="14">
<td width=52><img src="images/locale/fr/images/email.png" width="52" height="13"></td><td class="tbl-mn_loginarea-input-td" style="background: transparent url(../images/tbl-mn_input-bg.gif) no-repeat center center;"><input name="email" value="" class="tbl-mn_loginarea-input" type="text"/></td>
</tr>
<tr height="14">
<td><img src="images/locale/fr/images/passwd.png" width="52" height="13"></td><td class="tbl-mn_loginarea-input-td" style="background: transparent url(../images/tbl-mn_input-bg.gif) no-repeat center center;"><input name="passwd" class="tbl-mn_loginarea-input" type="password"/></td>
</tr>
<tr height="23">
<td> </td><td><img src="/images/d.gif" width="150" height="1"><br></td>
</tr>
<tr height="28" valign="bottom">
<td align="center" colspan=2><a href="#" onClick="document.forms['enter'].submit();"><img border="0" src="images/locale/fr/images/tbl-mn_btn-enter.png" width="148" height="27" /></a></td>
</tr>
<tr height="25">
<td align="center" colspan=2><a id="sndpwd_lnk" href="#" _href="send_password.php" onClick="showMsg(this.getAttribute('_href'),'Rappel du mot de passe');return false;"><img src="images/locale/fr/images/tbl-mn_btn-forget.png" width="101" height="15" border=0/></a></td>
</tr>
<tr>
<td align="left" colspan=2 style="padding: 0 0 0 23;"><div style="position: absolute;"><script>
AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','163',
'height','44',
'src','images/locale/fr/tbl-mn_btn-register.swf',
'movie','images/locale/fr/tbl-mn_btn-register.swf',
'wmode','transparent',
'menu', 'false',
'quality','high',
'flashvars', 'lnk=%2Fregister.php%3Fpartner_counter%3D2',
'pluginspage','http://www.macromedia.com/go/getflashplayer'
);
</script></div></td>
</tr>
</table>
</form>
</td>
</tr>
</table>
<table class=left_table cellspacing=0>
<tr>
<td class="left_table_content tbl-usi_label-center" align=center>
<div class=title>Meilleurs guerriers</div>
<table width="236" border="0" cellspacing="0" cellpadding="0" style="margin-top:10px">
<tr>
<td width=15> </td>
<td class="tbl-usi_bg" valign="top" align="center" style="" nowrap>
<script>
function another_world() {
showMsg('worlds.php', 'Choix du monde');
}
</script>
<div ID="all" style="display: block"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" onClick="showClanInfo(1);return false;" title="Admins"><img src="/images/data/clans/v0.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank4.gif" border=0 width=13 height=13 align="absmiddle" title="Guerrier d’élite"> <a ><b onClick="userToTag('Melka_FR');return false;" title="Message personnel" style="cursor:hand">Melka_FR [4]</b></a> <a href="#" onClick="showUserInfo('Melka_FR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-BoRnFromHell-');return false;" title="Message personnel" style="cursor:hand">-BoRnFromHell- [3]</b></a> <a href="#" onClick="showUserInfo('-BoRnFromHell-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('DeStRuCtoR');return false;" title="Message personnel" style="cursor:hand">DeStRuCtoR [3]</b></a> <a href="#" onClick="showUserInfo('DeStRuCtoR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Trobius');return false;" title="Message personnel" style="cursor:hand">Trobius [4]</b></a> <a href="#" onClick="showUserInfo('Trobius');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('PRAPORSCHIKHOHOL');return false;" title="Message personnel" style="cursor:hand">PRAPORSCHIKHOHOL [2]</b></a> <a href="#" onClick="showUserInfo('PRAPORSCHIKHOHOL');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('FlameBringer');return false;" title="Message personnel" style="cursor:hand">FlameBringer [3]</b></a> <a href="#" onClick="showUserInfo('FlameBringer');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('joah');return false;" title="Message personnel" style="cursor:hand">joah [2]</b></a> <a href="#" onClick="showUserInfo('joah');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Do Urden');return false;" title="Message personnel" style="cursor:hand">Do Urden [4]</b></a> <a href="#" onClick="showUserInfo('Do+Urden');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Pestbeule');return false;" title="Message personnel" style="cursor:hand">Pestbeule [4]</b></a> <a href="#" onClick="showUserInfo('Pestbeule');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Freya');return false;" title="Message personnel" style="cursor:hand">Freya [4]</b></a> <a href="#" onClick="showUserInfo('Freya');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr></table></div><div ID="kind1" style="display: none"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" onClick="showClanInfo(1);return false;" title="Admins"><img src="/images/data/clans/v0.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank4.gif" border=0 width=13 height=13 align="absmiddle" title="Guerrier d’élite"> <a ><b onClick="userToTag('Melka_FR');return false;" title="Message personnel" style="cursor:hand">Melka_FR [4]</b></a> <a href="#" onClick="showUserInfo('Melka_FR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-BoRnFromHell-');return false;" title="Message personnel" style="cursor:hand">-BoRnFromHell- [3]</b></a> <a href="#" onClick="showUserInfo('-BoRnFromHell-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('DeStRuCtoR');return false;" title="Message personnel" style="cursor:hand">DeStRuCtoR [3]</b></a> <a href="#" onClick="showUserInfo('DeStRuCtoR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('joah');return false;" title="Message personnel" style="cursor:hand">joah [2]</b></a> <a href="#" onClick="showUserInfo('joah');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Do Urden');return false;" title="Message personnel" style="cursor:hand">Do Urden [4]</b></a> <a href="#" onClick="showUserInfo('Do+Urden');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-godsmack-');return false;" title="Message personnel" style="cursor:hand">-godsmack- [4]</b></a> <a href="#" onClick="showUserInfo('-godsmack-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('patatoum');return false;" title="Message personnel" style="cursor:hand">patatoum [4]</b></a> <a href="#" onClick="showUserInfo('patatoum');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('tolik');return false;" title="Message personnel" style="cursor:hand">tolik [1]</b></a> <a href="#" onClick="showUserInfo('tolik');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Sunsai');return false;" title="Message personnel" style="cursor:hand">Sunsai [1]</b></a> <a href="#" onClick="showUserInfo('Sunsai');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('nkhkk');return false;" title="Message personnel" style="cursor:hand">nkhkk [1]</b></a> <a href="#" onClick="showUserInfo('nkhkk');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr></table></div><div ID="kind2" style="display: none"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Trobius');return false;" title="Message personnel" style="cursor:hand">Trobius [4]</b></a> <a href="#" onClick="showUserInfo('Trobius');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('PRAPORSCHIKHOHOL');return false;" title="Message personnel" style="cursor:hand">PRAPORSCHIKHOHOL [2]</b></a> <a href="#" onClick="showUserInfo('PRAPORSCHIKHOHOL');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('FlameBringer');return false;" title="Message personnel" style="cursor:hand">FlameBringer [3]</b></a> <a href="#" onClick="showUserInfo('FlameBringer');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Pestbeule');return false;" title="Message personnel" style="cursor:hand">Pestbeule [4]</b></a> <a href="#" onClick="showUserInfo('Pestbeule');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Freya');return false;" title="Message personnel" style="cursor:hand">Freya [4]</b></a> <a href="#" onClick="showUserInfo('Freya');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('ApOcAlyPs');return false;" title="Message personnel" style="cursor:hand">ApOcAlyPs [3]</b></a> <a href="#" onClick="showUserInfo('ApOcAlyPs');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('KilleR');return false;" title="Message personnel" style="cursor:hand">KilleR [3]</b></a> <a href="#" onClick="showUserInfo('KilleR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Phantom Assassin');return false;" title="Message personnel" style="cursor:hand">Phantom Assassin [1]</b></a> <a href="#" onClick="showUserInfo('Phantom+Assassin');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('ACC_WM');return false;" title="Message personnel" style="cursor:hand">ACC_WM [1]</b></a> <a href="#" onClick="showUserInfo('ACC_WM');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Zlo');return false;" title="Message personnel" style="cursor:hand">Zlo [1]</b></a> <a href="#" onClick="showUserInfo('Zlo');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr></table></div> <img src="images/d.gif" height=6><br>
<img ID='all' hi="1" src="images/locale/fr/images/r_all_off.gif" width="69" height="23" onclick="select_rating('all');">
<img ID='hum' hi="1" src="images/locale/fr/images/r_hum_off.gif" width="61" height="23" onclick="select_rating('kind1');">
<img ID='mag' hi="1" src="images/locale/fr/images/r_mag_off.gif" width="76" height="23" onclick="select_rating('kind2');">
</td>
<td > </td>
</tr>
</table>
</td>
</tr>
<tr>
<td class=footer><img src="./images/left_tablebottom.gif"></td>
</tr>
</table>
</td>
<Td >
<table cellspacing=0 class=middler>
<tr>
<td class=content>
<div style="background:url('images/middle_top.jpg') no-repeat top;">
<div style="font-family:Tahoma; font-size:11px; color:#ffdba3; text-align:center; font-weight:bold; padding-top:9px; margin-bottom:4x;">
Combat d'entraînement </div>
<div id="flashtest"></div>
<script>
create_flash();
</script>
</div>
</td>
</tr>
<tr>
<td class=content>
<p class=middle><a href="/">« La Légende de la Guerre des Dragons »</a> est un jeu de rôle en ligne massivement multijoueurs (MMORPG) de la nouvelle génération. Les deux races ennemies des Humains et des Magmars, un monde fantastique énorme, un système de combat unique, des centaines de quêtes et tout ça sur ton navigateur !</p>
</td>
</tr><tr>
<td class=content><a href="/register.php?site_id=1_80_633&p=80&c=47e92&partner_counter=2&ce_cid=002Uq72dpnjt1Esh2e2yF.LMbP000000"><img src="images/locale/fr/images/big_register.gif" width=442 height=173></td>
</tr>
</table>
<table class=cprts cellspacing=0>
<tr><td><img src="./images/cprts_top.gif" width=442 height=16></td></tr>
<tr>
<td class=cprts>
Site officiel du jeu de rôle gratuit en ligne « Légende : La Guerre des Dragons ». La description du monde MMORPG, les règles du jeu internet, les descriptions des races, professions et des nouveautés du jeu. Possibilité de télécharger gratuitement le flash intégral du client du jeu. Une carte interactive du Monde de Faeo. Forum. Galerie des captures d'écran. <table align=center>
<Tr>
<td><a href=http://www.astrumonline.de><img src="./images/astr.gif"></a></td>
<td class=cprts2>
Réalisé par <a class=red href='http://www.astrumonline.de/'>Astrum Online Entertainment</a><br>
©; 2006-2009. <a class=red href='http://it-territory.com/'>IT Territory LLC</a>|
<a class=red href='http://warofdragons.fr/info/info/index.php?obj=cat&id=1...'>Mentions légales</a> </td>
</tr>
</table>
<center>
<a href="/info/news/">Nouveautés</a>
<a href="/info/info/">Le jeu</a>
<a href="/register.php">S'inscrire</a>
<a href="/info/library/">Bibliothèque</a>
<a href="/info/forum/">Forum</a>
<!--<a href="#">Jeux en ligne</a>-->
</center>
</td>
</tr>
<tr><td><img src="./images/cprts_bottom.gif" width=442 height=19></td></tr>
</table>
</td>
<td class=right_column>
<table cellspacing="0" style="background: url(images/locale/fr/images/right_top.jpg)">
<tbody><tr height=310>
<td>
<div id="text" style="position: relative; right: -20px;top: 40px; text-align: right; color: #fff390; font-family: 'Trebuchet MS'; font-size: 12px; z-index: 100;"><span style="font-size: 21px; font-weight: normal; color: #fff390; margin-bottom: 0px; font-family: 'Trebuchet MS';">« La Légende est réelle ! »</span><p>Un système de combat unique en son genre,</p><p>une excellente qualité graphique, un jeu gratuit par navigateur !</div>
<img src="images/locale/fr/images/right_top.jpg" style="position: absolute; z-index: 0; top: 0px;" id="right_column">
</td>
</tr>
</tbody></table>
<table class=right_table cellspacing=0>
<tr>
<td class=right_table_content>
<div class=title>Vidéos et Captures d'écran</div>
<div class=content>
<table align=center cellspacing=0>
<tr>
<td style="vertical-align:middle"><img src="./images/vid_left.gif" ></td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return video_show();" title="Regarder la vidéo ;"><img src="images/locale/fr/images/screenflash.gif"></a></td>
</tr>
</table>
</td>
<td style="vertical-align:middle"><img src="./images/vid_right.gif"></td>
</tr>
</table>
<table align=center cellspacing=3>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(1);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall1.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(2);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall2.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(3);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall3.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(4);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall4.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(5);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall5.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(6);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall6.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</div>
</td>
</tr>
<tr>
<td class=footer><img src="./images/right_tablebottom.gif">
</td>
</tr>
</table>
</td>
</tR>
</table>
</td>
<tD class=right> </td>
</tr>
</table>
<script type="text/javascript">
var gaJsHost = "http" + (("https:" == document.location.protocol) ? "s://ssl." : "://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try{
var pageTracker = _gat._getTracker("UA-12024477-1");
pageTracker._setDomainName("none");
pageTracker._setAllowLinker(true);
pageTracker._initData();
pageTracker._trackPageview();
}
catch (e) {}
</script>
<script type="text/javascript">
d=document;a='r='+escape(top.document.referrer)+'&h='+escape(top.location.href);
if(top.location.href.indexOf('site_id')>0) d.write('<img src="http://astrumads.com/d.php?'+a+'&rand='+Math.random()+'" width="1" height="1">');
</script>
</body></html>
voila rapport ot
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.exe moved successfully.
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage\PowerReg Scheduler V3.PIF moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: All UsersApplication Data
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 114889 bytes
User: LocalService
->Temp folder emptied: 115348 bytes
->Temporary Internet Files folder emptied: 806888 bytes
User: NetworkService
->Temp folder emptied: 134170 bytes
->Temporary Internet Files folder emptied: 10106337 bytes
User: Owner
->Temp folder emptied: 1668321 bytes
->Temporary Internet Files folder emptied: 8817951 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 5495434 bytes
->Google Chrome cache emptied: 6447838 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 2676224 bytes
Windows Temp folder emptied: 24773 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23961144 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 16541415 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 73,00 mb
OTM by OldTimer - Version 3.1.4.0 log created on 01092010_120318
Files moved on Reboot...
Registry entries deleted on Reboot...
et celui de mbam
Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3526
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
09/01/2010 13:16:06
mbam-log-2010-01-09 (13-16-06).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 183743
Temps écoulé: 47 minute(s), 20 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
et info sup la source de la pub
<html>
<head>
<title>Légende : La Guerre des Dragons - Jeu gratuit en ligne | jeux RPG en ligne, jeux gratuits en ligne, jeux flash</title>
<META NAME="Keywords" CONTENT="jeu, télécharger les jeux, télécharger gratuitement, flash, jeux flash, jeu online, jeux gratuits, jeu 3D, jeu RPG, jeux en ligne, wow, lineage, jeu en ligne, jeux de navigateur, jeux d'internet, jeux sur le PC, rpg, mmorpg, légende, des légendes, dragons, magmars, arène, aréha, fk, gladiateurs, combats, en ligne">
<META NAME="Description" CONTENT="Site officiel du jeu de rôle gratuit en ligne « Légende : La Guerre des Dragons ». La description du monde MMORPG, les règles du jeu internet, les descriptions des races, professions et des nouveautés du jeu. Possibilité de télécharger gratuitement le flash intégral du client du jeu. Une carte interactive du Monde de Faeo. Forum. Galerie des captures d'écran.">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link rel="alternate" type="application/rss+xml" title="Légende : La Guerre des Dragons - Jeu gratuit en ligne | jeux RPG en ligne, jeux gratuits en ligne, jeux flash" href="/info/news/rss/" />
<link href="style/main.css" rel="stylesheet" type="text/css">
<link rel=stylesheet type="text/css" href="images/locale/fr/alt.css">
<link href="style/face.css" rel="stylesheet" type="text/css">
<link rel="stylesheet" type="text/css" media="screen" href="style/general.css">
<script language="javascript"> AC_FL_RunContent = 0; </script>
<script language="javascript"> DetectFlashVer = 0; </script>
<script language="javaScript" src="js/common.js"></script>
<script language="javaScript" src="js/imghi.js"></script>
<script language="javaScript" src="js/ac_runactivecontent.js"></script>
<style>
p {margin:0 0 0 0}
img {behavior: url("js/pngbehavior.htc");}
td.right{
background:url("images/locale/fr/images/right_top_bg.jpg") no-repeat left top;
}
</style>
<script type="text/javascript">
function select_rating(id) {
document.getElementById("all").style.display = "none";
document.getElementById("kind1").style.display = "none";
document.getElementById("kind2").style.display = "none";
document.getElementById(id).style.display = "block";
}
var ua = navigator.userAgent.toLowerCase();
var isOpera = (ua.indexOf('opera') > -1);
var isIE = (!isOpera && ua.indexOf('msie') > -1);
function getDocumentHeight() {
return Math.max(document.compatMode != 'CSS1Compat' ? document.body.scrollHeight : document.documentElement.scrollHeight, getViewportHeight());
}
function getDocumentWidth() {
return Math.max(document.compatMode != 'CSS1Compat' ? document.body.scrollWidth : document.documentElement.scrollWidth, getViewportWidth());
}
function getViewportHeight() {
return ((document.compatMode || isIE) && !isOpera) ? (document.compatMode == 'CSS1Compat') ? document.documentElement.clientHeight : document.body.clientHeight : (document.parentWindow || document.defaultView).innerHeight;
}
function getViewportWidth() {
return ((document.compatMode || isIE) && !isOpera) ? (document.compatMode == 'CSS1Compat') ? document.documentElement.clientWidth : document.body.clientWidth : (document.parentWindow || document.defaultView).innerWidth;
}
var scrolltop = 0;
var scrollleft = 0;
var screenid = 0;
var screenoldid = 0;
var maxscreen = 6;
function screen_show(id) {
if (id<1||id>maxscreen) return false;
scrolltop = document.body.scrollTop;
scrollleft = document.body.scrollLeft;
screenid = id;
scrollTo(0,0);
gebi("screentable").style.width=getDocumentWidth();
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=15)";mt.style.MozOpacity=0.15;
mt.style.opacity=0.15;
var mt1 = gebi("right_column");
mt1.style.visibility="hidden";
var mt2 = gebi("text");
mt2.style.visibility="hidden";
screen_load();
gebi("screenshot").style.visibility="visible";
gebi("lockimg").style.height=getDocumentHeight();
gebi("lockimg").style.width=getDocumentWidth();
gebi("lock").style.visibility="visible";
return false;
}
function screen_hide() {
screenoldid = 0;
screenid = 0;
var im = gebi("screenimg");
im.src="/images/d.gif";
var tmpimg = gebi("tmpimg");
tmpimg.src = "/images/d.gif";
gebi("lock").style.visibility="hidden";
gebi("screenshot").style.visibility="hidden";
gebi("screenprev").style.visibility="hidden";
gebi("screennext").style.visibility="hidden";
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=100)";mt.style.MozOpacity=1;
mt.style.opacity=1;
var mt1 = gebi("right_column");
mt1.style.visibility="visible";
var mt2 = gebi("text");
mt2.style.visibility="visible";
scrollTo(scrollleft,scrolltop);
return false;
}
function screen_next() {
id = screenid+1;
if (id<1||id>maxscreen) return false;
screenid = id;
screen_load();
return false;
}
function screen_prev() {
id = screenid-1;
if (id<1||id>maxscreen) return false;
screenid = id;
screen_load();
return false;
}
function screen_load() {
id = screenid;
if (!id) return false;
if (id==screenoldid) return false;
var tmpimg = gebi("tmpimg");
tmpimg.src = "images/locale/fr/images/screens/screen"+id+".jpg";
var im = gebi("screenimg");
im.src = "images/locale/fr/images/loading.gif";
}
function screen_set() {
id = screenid;
if (!id) return false;
if (id==screenoldid) return false;
var im = gebi("screenimg");
im.src="images/locale/fr/images/screens/screen"+id+".jpg";
if (id==1) gebi("screenprev").style.visibility="hidden"; else gebi("screenprev").style.visibility="visible";
if (id==maxscreen) gebi("screennext").style.visibility="hidden"; else gebi("screennext").style.visibility="visible";
gebi("screenid").innerHTML = screenid;
gebi("maxscreen").innerHTML = maxscreen;
screenoldid = screenid;
return false;
}
function gebi(id) {
return this.document.getElementById(id);
}
function video_show() {
scrolltop = document.body.scrollTop;
scrollleft = document.body.scrollLeft;
scrollTo(0,0);
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=25)";mt.style.MozOpacity=0.25;
mt.style.opacity=0.25;
var mt1 = gebi("right_column");
mt1.style.visibility="hidden";
var mt2 = gebi("text");
mt2.style.visibility="hidden";
gebi("lockimg").style.height=getDocumentHeight();
gebi("lockimg").style.width=getDocumentWidth();
gebi("lock").style.visibility="visible";
gebi("flashtest").innerHTML='<img src =images/locale/fr/images/flashimg.gif>';
create_video();
vid=document.getElementById("video");
vid.style.left = (getViewportWidth() - 640)/2;
vid.style.top = (getViewportHeight() - 480)/2;
vid.style.visibility="visible";
return false;
}
function create_video() {
var requiredMajorVersion = 9;
// Minor version of Flash required
var requiredMinorVersion = 0;
// Revision of Flash required
var requiredRevision = 60;
var hasRightVersion = DetectFlashVer(requiredMajorVersion, requiredMinorVersion, requiredRevision);
if(hasRightVersion) {
gebi("videoflash").innerHTML=AC_FL_RunContent(
'codebase', 'http://download.macromedia.com/pub/shockwave/cabs/flash...',
'width', '640',
'height', '480',
'src', 'images/swf/WohPlayer.swf',
'quality', 'high',
'pluginspage', 'http://www.macromedia.com/go/getflashplayer',
'align', 'middle',
'play', 'true',
'loop', 'true',
'scale', 'showall',
'wmode', 'window',
'devicefont', 'false',
'id', 'WohPlayer',
'bgcolor', '#ffffff',
'name', 'WohPlayer',
'menu', 'true',
'cancelwrite','true',
'allowScriptAccess','sameDomain',
'allowFullScreen','true',
'movie', 'images/swf/WohPlayer.swf',
'salign', '',
'flashVars', 'video_url=/static/flv/dwarvideo.flv&image_url=/images/locale/fr/images/sheara.jpg&play_on_start=0&show_hints=0&debug=1&metadata=73:640:480'
);
}else { // flash is too old or we can't detect the plugin
var alternateContent = 'Alternate HTML content should be placed here.'
+ 'This content requires the Adobe Flash Player.'
+ '<a href=http://www.macromedia.com/go/getflash/>Get Flash</a>';
document.write(alternateContent); // insert non-flash content
}
}
function video_hide() {
gebi("lock").style.visibility="hidden";
gebi("video").style.visibility="hidden";
var mt = gebi("maintable");
mt.style.filter="progid
XImageTransform.Microsoft.Alpha(opacity=100)";mt.style.MozOpacity=1;
mt.style.opacity=1;
var mt1 = gebi("right_column");
mt1.style.visibility="visible";
var mt2 = gebi("text");
mt2.style.visibility="visible";
scrollTo(scrollleft,scrolltop);
gebi("videoflash").innerHTML="";
create_flash();
return false;
}
function create_flash(){
gebi("flashtest").innerHTML=AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','445',
'height','420',
'src','images/locale/fr/test_game.swf',
'movie','images/locale/fr/test_game.swf',
'cancelwrite','true',
'wmode','transparent',
'flashvars',location.search.substring(1),
'pluginspage','http://www.macromedia.com/go/getflashplayer'
);
}
</script></head>
<body class="body_bg lscroll">
<DIV ALIGN=CENTER>
<div id='video' style="position:absolute;width:640px;height:480px;visibility:hidden;z-index:2001;text-align:center;font-size:14px;color:#FFF78E">Regarder la vidéo (<a href="#" onclick="return video_hide();" style="color:#FFF78E; font-weight:bold;font-size:14px">Fermer</a>)<br />
<br />
<table width="640" height="1" border="0" cellspacing="0" cellpadding="0" align="center">
<tr valign="top" height="19"><td width="19"></td><td></td><td width="19"></td></tr>
<tr valign="top">
<td></td>
<td align="center" style="background:#000000 url(images/locale/fr/images/loading.gif) no-repeat center center"><div id="videoflash"></div></td>
<td></td>
</tr>
<tr valign="top" height="19"><td width="19"></td><td></td><td width="19"></td></tr>
</table>
</div>
<div id="lock" style="position: absolute;left:0px;top:0px;z-index:1000;visibility:hidden"><img id="lockimg" src="images/d.gif"></div>
<div id="screenshot" style="position: absolute;left:0px;top:0px;z-index:2000;visibility:hidden;">
<table width="100%" border="0" cellspacing="0" cellpadding="0" id="screentable">
<tr height=50><td colspan=3></td></tr>
<tr valign="top">
<td></td>
<td align="center" style="font-size:12px;color:#FFF78E">Screenshots <b id="screenid">0</b> sur <b id="maxscreen">0</b> (<a href="#" onclick="return screen_hide();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">Fermer</a>)</td>
<td ></td>
</tr>
<tr>
<td id="screenprev" align="right" style="padding-right: 15px"><a href="#" onclick="return screen_prev();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">« précédent</a></td>
<td><div id="tmp" style="position:absolute;visibility:hidden; border:1px"><img id="tmpimg" src="images/d.gif" onLoad="screen_set();"></div></td>
<td id="screennext" align="left" style="padding-left: 15px"><a href="#" onclick="return screen_next();" style="color:#FFF78E; font-size: 12px; font-weight:bold;">Suivant »</a></td>
</tr>
</table>
<table width="1" height="1" border="0" cellspacing="0" cellpadding="0" align="center">
<tr valign="top" height="19">
<td></td></tr>
<tr valign="top">
<td align="center"><a href="#" onclick="return screen_hide();"><img id="screenimg" src="images/d.gif" title="Fermer" style="border:solid 1px black"></a></td>
</tr>
<tr valign="top" height="19">
<td></td>
</tr>
</table>
</div>
<table class=w100 cellspacing=0 name="maintable" id="maintable">
<tr>
<tD class=left> </td>
<td>
<table class=middle cellspacing=0>
<Tr>
<td class=left_column>
<table cellspacing=0>
<tR>
<td>
<script>
AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','283',
'height','340',
'src','images/locale/fr/left_top.swf',
'movie','images/locale/fr/left_top.swf',
'wmode','transparent',
'menu', 'false',
'quality','high',
'pluginspage','http://www.macromedia.com/go/getflashplayer'
)
</script>
</td>
</tr>
<tr>
<td class=login_place>
<form name="enter" method="post" action="login.php"><input type="image" src="images/d.gif" value="" style="height: 1px; visibility: visible; position: absolute;">
<table width="70%" border="0" cellspacing="0" cellpadding="0" class="tbl-mn_margin30">
<tr height="14">
<td width=52><img src="images/locale/fr/images/email.png" width="52" height="13"></td><td class="tbl-mn_loginarea-input-td" style="background: transparent url(../images/tbl-mn_input-bg.gif) no-repeat center center;"><input name="email" value="" class="tbl-mn_loginarea-input" type="text"/></td>
</tr>
<tr height="14">
<td><img src="images/locale/fr/images/passwd.png" width="52" height="13"></td><td class="tbl-mn_loginarea-input-td" style="background: transparent url(../images/tbl-mn_input-bg.gif) no-repeat center center;"><input name="passwd" class="tbl-mn_loginarea-input" type="password"/></td>
</tr>
<tr height="23">
<td> </td><td><img src="/images/d.gif" width="150" height="1"><br></td>
</tr>
<tr height="28" valign="bottom">
<td align="center" colspan=2><a href="#" onClick="document.forms['enter'].submit();"><img border="0" src="images/locale/fr/images/tbl-mn_btn-enter.png" width="148" height="27" /></a></td>
</tr>
<tr height="25">
<td align="center" colspan=2><a id="sndpwd_lnk" href="#" _href="send_password.php" onClick="showMsg(this.getAttribute('_href'),'Rappel du mot de passe');return false;"><img src="images/locale/fr/images/tbl-mn_btn-forget.png" width="101" height="15" border=0/></a></td>
</tr>
<tr>
<td align="left" colspan=2 style="padding: 0 0 0 23;"><div style="position: absolute;"><script>
AC_FL_RunContent(
'codebase','http://fpdownload.macromedia.com/pub/shockwave/cabs/fla...',
'width','163',
'height','44',
'src','images/locale/fr/tbl-mn_btn-register.swf',
'movie','images/locale/fr/tbl-mn_btn-register.swf',
'wmode','transparent',
'menu', 'false',
'quality','high',
'flashvars', 'lnk=%2Fregister.php%3Fpartner_counter%3D2',
'pluginspage','http://www.macromedia.com/go/getflashplayer'
);
</script></div></td>
</tr>
</table>
</form>
</td>
</tr>
</table>
<table class=left_table cellspacing=0>
<tr>
<td class="left_table_content tbl-usi_label-center" align=center>
<div class=title>Meilleurs guerriers</div>
<table width="236" border="0" cellspacing="0" cellpadding="0" style="margin-top:10px">
<tr>
<td width=15> </td>
<td class="tbl-usi_bg" valign="top" align="center" style="" nowrap>
<script>
function another_world() {
showMsg('worlds.php', 'Choix du monde');
}
</script>
<div ID="all" style="display: block"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" onClick="showClanInfo(1);return false;" title="Admins"><img src="/images/data/clans/v0.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank4.gif" border=0 width=13 height=13 align="absmiddle" title="Guerrier d’élite"> <a ><b onClick="userToTag('Melka_FR');return false;" title="Message personnel" style="cursor:hand">Melka_FR [4]</b></a> <a href="#" onClick="showUserInfo('Melka_FR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-BoRnFromHell-');return false;" title="Message personnel" style="cursor:hand">-BoRnFromHell- [3]</b></a> <a href="#" onClick="showUserInfo('-BoRnFromHell-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('DeStRuCtoR');return false;" title="Message personnel" style="cursor:hand">DeStRuCtoR [3]</b></a> <a href="#" onClick="showUserInfo('DeStRuCtoR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Trobius');return false;" title="Message personnel" style="cursor:hand">Trobius [4]</b></a> <a href="#" onClick="showUserInfo('Trobius');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('PRAPORSCHIKHOHOL');return false;" title="Message personnel" style="cursor:hand">PRAPORSCHIKHOHOL [2]</b></a> <a href="#" onClick="showUserInfo('PRAPORSCHIKHOHOL');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('FlameBringer');return false;" title="Message personnel" style="cursor:hand">FlameBringer [3]</b></a> <a href="#" onClick="showUserInfo('FlameBringer');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('joah');return false;" title="Message personnel" style="cursor:hand">joah [2]</b></a> <a href="#" onClick="showUserInfo('joah');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Do Urden');return false;" title="Message personnel" style="cursor:hand">Do Urden [4]</b></a> <a href="#" onClick="showUserInfo('Do+Urden');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Pestbeule');return false;" title="Message personnel" style="cursor:hand">Pestbeule [4]</b></a> <a href="#" onClick="showUserInfo('Pestbeule');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Freya');return false;" title="Message personnel" style="cursor:hand">Freya [4]</b></a> <a href="#" onClick="showUserInfo('Freya');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr></table></div><div ID="kind1" style="display: none"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" onClick="showClanInfo(1);return false;" title="Admins"><img src="/images/data/clans/v0.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank4.gif" border=0 width=13 height=13 align="absmiddle" title="Guerrier d’élite"> <a ><b onClick="userToTag('Melka_FR');return false;" title="Message personnel" style="cursor:hand">Melka_FR [4]</b></a> <a href="#" onClick="showUserInfo('Melka_FR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-BoRnFromHell-');return false;" title="Message personnel" style="cursor:hand">-BoRnFromHell- [3]</b></a> <a href="#" onClick="showUserInfo('-BoRnFromHell-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('DeStRuCtoR');return false;" title="Message personnel" style="cursor:hand">DeStRuCtoR [3]</b></a> <a href="#" onClick="showUserInfo('DeStRuCtoR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('joah');return false;" title="Message personnel" style="cursor:hand">joah [2]</b></a> <a href="#" onClick="showUserInfo('joah');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Do Urden');return false;" title="Message personnel" style="cursor:hand">Do Urden [4]</b></a> <a href="#" onClick="showUserInfo('Do+Urden');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('-godsmack-');return false;" title="Message personnel" style="cursor:hand">-godsmack- [4]</b></a> <a href="#" onClick="showUserInfo('-godsmack-');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><a href="#" target="_blank" title="Mentor"><img src="/images/mentor.gif" border=0 width=13 height=13 align="absmiddle"></a> <img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('patatoum');return false;" title="Message personnel" style="cursor:hand">patatoum [4]</b></a> <a href="#" onClick="showUserInfo('patatoum');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('tolik');return false;" title="Message personnel" style="cursor:hand">tolik [1]</b></a> <a href="#" onClick="showUserInfo('tolik');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Sunsai');return false;" title="Message personnel" style="cursor:hand">Sunsai [1]</b></a> <a href="#" onClick="showUserInfo('Sunsai');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('nkhkk');return false;" title="Message personnel" style="cursor:hand">nkhkk [1]</b></a> <a href="#" onClick="showUserInfo('nkhkk');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_human.gif" width=14 height=15 alt="Humains"></td></tr></table></div><div ID="kind2" style="display: none"><table class="coll w100 p2v brd2-all" border=0><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Trobius');return false;" title="Message personnel" style="cursor:hand">Trobius [4]</b></a> <a href="#" onClick="showUserInfo('Trobius');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('PRAPORSCHIKHOHOL');return false;" title="Message personnel" style="cursor:hand">PRAPORSCHIKHOHOL [2]</b></a> <a href="#" onClick="showUserInfo('PRAPORSCHIKHOHOL');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('FlameBringer');return false;" title="Message personnel" style="cursor:hand">FlameBringer [3]</b></a> <a href="#" onClick="showUserInfo('FlameBringer');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Pestbeule');return false;" title="Message personnel" style="cursor:hand">Pestbeule [4]</b></a> <a href="#" onClick="showUserInfo('Pestbeule');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Freya');return false;" title="Message personnel" style="cursor:hand">Freya [4]</b></a> <a href="#" onClick="showUserInfo('Freya');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('ApOcAlyPs');return false;" title="Message personnel" style="cursor:hand">ApOcAlyPs [3]</b></a> <a href="#" onClick="showUserInfo('ApOcAlyPs');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('KilleR');return false;" title="Message personnel" style="cursor:hand">KilleR [3]</b></a> <a href="#" onClick="showUserInfo('KilleR');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Phantom Assassin');return false;" title="Message personnel" style="cursor:hand">Phantom Assassin [1]</b></a> <a href="#" onClick="showUserInfo('Phantom+Assassin');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class="bg_l"><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('ACC_WM');return false;" title="Message personnel" style="cursor:hand">ACC_WM [1]</b></a> <a href="#" onClick="showUserInfo('ACC_WM');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr><tr class=""><td class="brd2-top brd2-bt b" nowrap><img src="/images/ranks/rank0.gif" border=0 width=13 height=13 align="absmiddle" title="Recrue"> <a ><b onClick="userToTag('Zlo');return false;" title="Message personnel" style="cursor:hand">Zlo [1]</b></a> <a href="#" onClick="showUserInfo('Zlo');return false;" title="Information concernant le personnage"><img src="/images/player_info.gif" border=0 width=10 height=10 align="absmiddle"></a></td><td class="brd2-top brd2-bt" width=14><img src="images/ico_magmar.gif" width=14 height=15 alt="Magmars"></td></tr></table></div> <img src="images/d.gif" height=6><br>
<img ID='all' hi="1" src="images/locale/fr/images/r_all_off.gif" width="69" height="23" onclick="select_rating('all');">
<img ID='hum' hi="1" src="images/locale/fr/images/r_hum_off.gif" width="61" height="23" onclick="select_rating('kind1');">
<img ID='mag' hi="1" src="images/locale/fr/images/r_mag_off.gif" width="76" height="23" onclick="select_rating('kind2');">
</td>
<td > </td>
</tr>
</table>
</td>
</tr>
<tr>
<td class=footer><img src="./images/left_tablebottom.gif"></td>
</tr>
</table>
</td>
<Td >
<table cellspacing=0 class=middler>
<tr>
<td class=content>
<div style="background:url('images/middle_top.jpg') no-repeat top;">
<div style="font-family:Tahoma; font-size:11px; color:#ffdba3; text-align:center; font-weight:bold; padding-top:9px; margin-bottom:4x;">
Combat d'entraînement </div>
<div id="flashtest"></div>
<script>
create_flash();
</script>
</div>
</td>
</tr>
<tr>
<td class=content>
<p class=middle><a href="/">« La Légende de la Guerre des Dragons »</a> est un jeu de rôle en ligne massivement multijoueurs (MMORPG) de la nouvelle génération. Les deux races ennemies des Humains et des Magmars, un monde fantastique énorme, un système de combat unique, des centaines de quêtes et tout ça sur ton navigateur !</p>
</td>
</tr><tr>
<td class=content><a href="/register.php?site_id=1_80_633&p=80&c=47e92&partner_counter=2&ce_cid=002Uq72dpnjt1Esh2e2yF.LMbP000000"><img src="images/locale/fr/images/big_register.gif" width=442 height=173></td>
</tr>
</table>
<table class=cprts cellspacing=0>
<tr><td><img src="./images/cprts_top.gif" width=442 height=16></td></tr>
<tr>
<td class=cprts>
Site officiel du jeu de rôle gratuit en ligne « Légende : La Guerre des Dragons ». La description du monde MMORPG, les règles du jeu internet, les descriptions des races, professions et des nouveautés du jeu. Possibilité de télécharger gratuitement le flash intégral du client du jeu. Une carte interactive du Monde de Faeo. Forum. Galerie des captures d'écran. <table align=center>
<Tr>
<td><a href=http://www.astrumonline.de><img src="./images/astr.gif"></a></td>
<td class=cprts2>
Réalisé par <a class=red href='http://www.astrumonline.de/'>Astrum Online Entertainment</a><br>
©; 2006-2009. <a class=red href='http://it-territory.com/'>IT Territory LLC</a>|
<a class=red href='http://warofdragons.fr/info/info/index.php?obj=cat&id=1...'>Mentions légales</a> </td>
</tr>
</table>
<center>
<a href="/info/news/">Nouveautés</a>
<a href="/info/info/">Le jeu</a>
<a href="/register.php">S'inscrire</a>
<a href="/info/library/">Bibliothèque</a>
<a href="/info/forum/">Forum</a>
<!--<a href="#">Jeux en ligne</a>-->
</center>
</td>
</tr>
<tr><td><img src="./images/cprts_bottom.gif" width=442 height=19></td></tr>
</table>
</td>
<td class=right_column>
<table cellspacing="0" style="background: url(images/locale/fr/images/right_top.jpg)">
<tbody><tr height=310>
<td>
<div id="text" style="position: relative; right: -20px;top: 40px; text-align: right; color: #fff390; font-family: 'Trebuchet MS'; font-size: 12px; z-index: 100;"><span style="font-size: 21px; font-weight: normal; color: #fff390; margin-bottom: 0px; font-family: 'Trebuchet MS';">« La Légende est réelle ! »</span><p>Un système de combat unique en son genre,</p><p>une excellente qualité graphique, un jeu gratuit par navigateur !</div>
<img src="images/locale/fr/images/right_top.jpg" style="position: absolute; z-index: 0; top: 0px;" id="right_column">
</td>
</tr>
</tbody></table>
<table class=right_table cellspacing=0>
<tr>
<td class=right_table_content>
<div class=title>Vidéos et Captures d'écran</div>
<div class=content>
<table align=center cellspacing=0>
<tr>
<td style="vertical-align:middle"><img src="./images/vid_left.gif" ></td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return video_show();" title="Regarder la vidéo ;"><img src="images/locale/fr/images/screenflash.gif"></a></td>
</tr>
</table>
</td>
<td style="vertical-align:middle"><img src="./images/vid_right.gif"></td>
</tr>
</table>
<table align=center cellspacing=3>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(1);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall1.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(2);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall2.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(3);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall3.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(4);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall4.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(5);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall5.jpg"></a>
</td>
</tr>
</table>
</td>
<td>
<table class=screenborder1 cellspacing=1>
<tr>
<Td class=screenborder2>
<a href="#" onclick="return screen_show(6);" title="Regarder les captures d'écran ;"><img src="images/locale/fr/images/screens/screensmall6.jpg"></a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</div>
</td>
</tr>
<tr>
<td class=footer><img src="./images/right_tablebottom.gif">
</td>
</tr>
</table>
</td>
</tR>
</table>
</td>
<tD class=right> </td>
</tr>
</table>
<script type="text/javascript">
var gaJsHost = "http" + (("https:" == document.location.protocol) ? "s://ssl." : "://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try{
var pageTracker = _gat._getTracker("UA-12024477-1");
pageTracker._setDomainName("none");
pageTracker._setAllowLinker(true);
pageTracker._initData();
pageTracker._trackPageview();
}
catch (e) {}
</script>
<script type="text/javascript">
d=document;a='r='+escape(top.document.referrer)+'&h='+escape(top.location.href);
if(top.location.href.indexOf('site_id')>0) d.write('<img src="http://astrumads.com/d.php?'+a+'&rand='+Math.random()+'" width="1" height="1">');
</script>
</body></html>
Je vois que tu as installé LOP S&D, le scan a trouvé quelque chose?
Et ensuite:
* Lance => C:\Program Files\trend micro\Owner.exe
* « Do a system scan only »
* Coche les lignes suivantes:
* « Fix checked »
* Oui
===
Redémarre et refais un RSIT
Et ensuite:
* Lance => C:\Program Files\trend micro\Owner.exe
* « Do a system scan only »
* Coche les lignes suivantes:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://adsmarket.every.com/landing [...] ruc8000000
* « Fix checked »
* Oui
===
Redémarre et refais un RSIT
Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2010-01-09 17:22:40
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 159 GB (84%) free of 189 GB
Total RAM: 958 MB (54% free)
voila le dernier raport rsit, tout semble entrer dans l'ordre.
j'attends qq minutes pour essayer des recherche
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22:58, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11758 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 12:03:18 ----D---- C:\_OTM
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 17:20:53 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 17:20:40 ----D---- C:\WINDOWS\Temp
2010-01-09 17:20:36 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 17:19:44 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 17:18:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 17:15:26 ----D---- C:\WINDOWS\Prefetch
2010-01-09 12:13:33 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 12:03:25 ----D---- C:\WINDOWS\system32
2010-01-09 12:03:25 ----D---- C:\WINDOWS
2010-01-09 11:46:44 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Run by Owner at 2010-01-09 17:22:40
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 159 GB (84%) free of 189 GB
Total RAM: 958 MB (54% free)
voila le dernier raport rsit, tout semble entrer dans l'ordre.
j'attends qq minutes pour essayer des recherche
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22:58, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11758 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 12:03:18 ----D---- C:\_OTM
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 17:20:53 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 17:20:40 ----D---- C:\WINDOWS\Temp
2010-01-09 17:20:36 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 17:19:44 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 17:18:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 17:15:26 ----D---- C:\WINDOWS\Prefetch
2010-01-09 12:13:33 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 12:03:25 ----D---- C:\WINDOWS\system32
2010-01-09 12:03:25 ----D---- C:\WINDOWS
2010-01-09 11:46:44 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
le rapport de lop
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22:58, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11758 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22:58, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11758 bytes
désolé j'ai dû me tromper et
je n'ai pas de chance qd je lance une recherche dans la barre d'outil et je clique l'objet de ma recherche, c'est la pub qui s'affiche.
ex: qd je cherche "PMU" dans la barre de recherche de Internet explorer, c'est la pub qui s'installe avant le site du PMU.
Et le en raison d’un problème non identifié , Windows ne peut pas afficher les paramètres du pare feu Windows
le rapport
Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2010-01-09 18:19:05
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 159 GB (84%) free of 189 GB
Total RAM: 958 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:19:24, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11742 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 12:03:18 ----D---- C:\_OTM
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 18:15:43 ----D---- C:\WINDOWS\Temp
2010-01-09 18:12:33 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 18:11:56 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 18:09:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 17:27:59 ----D---- C:\WINDOWS\Prefetch
2010-01-09 17:19:44 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 12:13:33 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 12:03:25 ----D---- C:\WINDOWS\system32
2010-01-09 12:03:25 ----D---- C:\WINDOWS
2010-01-09 11:46:44 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
je n'ai pas de chance qd je lance une recherche dans la barre d'outil et je clique l'objet de ma recherche, c'est la pub qui s'affiche.
ex: qd je cherche "PMU" dans la barre de recherche de Internet explorer, c'est la pub qui s'installe avant le site du PMU.
Et le en raison d’un problème non identifié , Windows ne peut pas afficher les paramètres du pare feu Windows
le rapport
Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2010-01-09 18:19:05
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 159 GB (84%) free of 189 GB
Total RAM: 958 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:19:24, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Apps\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Owner\Bureau\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader4.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.orderingmemory.com/controls/cpcScanner.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/SFUploader/SpeedUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Apps\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9b9d9766cd7fa) (gupdate1c9b9d9766cd7fa) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
--
End of file - 11742 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{AE6D0F6D-F910-4853-B901-BA89FBF0B0FE}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2003-04-28 360448]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
- []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-05-17 77824]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
"PD0620 STISvc"=P0620Pin.dll,RunDLL32EP 513 []
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-09-13 185632]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2007-03-16 63712]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SmcService"=C:\PROGRA~1\Sygate\SPF\smc.exe [2004-10-15 2577632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Creative WebCam Tray"=C:\Program Files\Creative\Shared Files\CamTray.exe [2005-03-29 258048]
"NBJ"=C:\Program Files\Ahead\Nero BackItUp\NBJ.exe [2005-02-10 1937408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2009-10-09 25623336]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
C:\Documents and Settings\Owner\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Owner\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-01-09 12:03:18 ----D---- C:\_OTM
2010-01-09 10:59:22 ----D---- C:\rsit
2010-01-09 00:30:30 ----A---- C:\lopR.txt
2010-01-09 00:29:39 ----D---- C:\Lop SD
2010-01-05 18:16:33 ----RASHD---- C:\autorun.inf
2010-01-04 15:56:55 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-30 21:53:28 ----D---- C:\Program Files\trend micro
2009-12-30 18:45:48 ----D---- C:\Documents and Settings\Owner\Application Data\Malwarebytes
2009-12-30 18:45:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-30 18:45:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-30 06:49:17 ----D---- C:\WINDOWS\pss
2009-12-23 13:23:02 ----A---- C:\WINDOWS\system32\SSSensor.dll
2009-12-23 13:22:52 ----D---- C:\Program Files\Sygate
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-16 08:01:04 ----HDC---- C:\WINDOWS\ie8
2009-12-16 00:21:39 ----D---- C:\Program Files\Avira
2009-12-16 00:21:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-12-15 23:37:26 ----D---- C:\Program Files\CCleaner
2009-12-15 22:39:59 ----D---- C:\Program Files\TrendMicro
2009-12-15 21:46:53 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-12-15 21:46:51 ----D---- C:\Documents and Settings\Owner\Application Data\AVS4YOU
2009-12-15 21:46:20 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-12-10 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 06:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 06:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 06:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-09 18:15:43 ----D---- C:\WINDOWS\Temp
2010-01-09 18:12:33 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-09 18:11:56 ----D---- C:\Documents and Settings\Owner\Application Data\Skype
2010-01-09 18:09:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-09 17:27:59 ----D---- C:\WINDOWS\Prefetch
2010-01-09 17:19:44 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-01-09 12:13:33 ----D---- C:\WINDOWS\system32\drivers
2010-01-09 12:03:25 ----D---- C:\WINDOWS\system32
2010-01-09 12:03:25 ----D---- C:\WINDOWS
2010-01-09 11:46:44 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-09 10:56:44 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-09 01:06:21 ----SD---- C:\WINDOWS\Tasks
2010-01-09 00:57:41 ----D---- C:\Program Files
2010-01-08 17:22:29 ----D---- C:\Program Files\Agathe Millénium Gestion
2010-01-05 18:16:29 ----SHD---- C:\RECYCLER
2010-01-05 18:09:28 ----D---- C:\Documents and Settings\Owner\Application Data\UseNeXT
2010-01-04 23:15:30 ----SHD---- C:\WINDOWS\Installer
2010-01-04 16:45:13 ----D---- C:\WINDOWS\system32\Restore
2010-01-04 16:45:13 ----D---- C:\System Volume Information
2010-01-04 15:56:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-04 15:56:55 ----HD---- C:\WINDOWS\inf
2010-01-04 10:22:36 ----HD---- C:\Config.Msi
2010-01-02 16:29:48 ----A---- C:\WINDOWS\system.ini
2010-01-01 17:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-30 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-30 07:10:32 ----H---- C:\boot.ini
2009-12-30 07:10:32 ----A---- C:\WINDOWS\win.ini
2009-12-29 11:43:34 ----D---- C:\WINDOWS\network diagnostic
2009-12-28 22:47:54 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-12-26 15:56:32 ----D---- C:\Program Files\Piolet
2009-12-23 13:22:20 ----D---- C:\Program Files\Fichiers communs
2009-12-23 13:13:51 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2009-12-21 16:20:21 ----D---- C:\WINDOWS\system32\config
2009-12-21 16:19:52 ----D---- C:\WINDOWS\system32\wbem
2009-12-21 16:19:52 ----D---- C:\WINDOWS\Registration
2009-12-21 16:10:05 ----D---- C:\WINDOWS\Debug
2009-12-20 22:37:46 ----D---- C:\WINDOWS\system32\FxsTmp
2009-12-16 08:39:19 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-16 08:39:14 ----D---- C:\WINDOWS\ie8updates
2009-12-16 08:05:51 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-16 08:05:50 ----D---- C:\WINDOWS\Help
2009-12-16 08:05:50 ----D---- C:\Program Files\Internet Explorer
2009-12-16 08:02:48 ----D---- C:\WINDOWS\media
2009-12-16 06:40:43 ----D---- C:\WINDOWS\WinSxS
2009-12-15 23:47:41 ----D---- C:\WINDOWS\Minidump
2009-12-15 21:46:25 ----RSD---- C:\WINDOWS\Fonts
2009-12-15 21:46:19 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-15 20:50:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-10 11:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-12-10 07:49:07 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 06:47:05 ----HD---- C:\WINDOWS\$hf_mig$
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-12-16 28520]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-16 56816]
R2 Fallback;Fallback; C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-09-29 13059]
R2 SoftFax;SoftFax; C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\system32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-10-15 14568]
R2 wg4n;SyGate for NT, wg4n; C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [2004-10-15 14568]
R2 wg5n;SyGate for NT, wg5n; C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [2004-10-15 14568]
R2 wg6n;SyGate for NT, wg6n; C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [2004-10-15 14568]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-05-18 2319680]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-04-06 173696]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 basic2;basic2; C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-09-29 1036928]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 hsf_msft;hsf_msft; C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2005-09-29 219136]
S3 HSFHWCD2;HSFHWCD2; C:\WINDOWS\system32\DRIVERS\HSFHWCD2.sys [2002-07-15 169700]
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PD0620VID;Creative WebCam Instant; C:\WINDOWS\system32\DRIVERS\P0620Vid.sys [2005-04-25 91864]
S3 Rksample;Rksample; C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-09-29 702592]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 vsdatant;vsdatant; C:\WINDOWS\system32\drivers\vsdatant.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-12-16 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-12-16 185089]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Apps\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
R2 CLSched;CyberLink Task Scheduler (CTS); c:\Apps\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Sygate Personal Firewall; C:\Program Files\Sygate\SPF\smc.exe [2004-10-15 2577632]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c9b9d9766cd7fa;Service Google Update (gupdate1c9b9d9766cd7fa); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Citation :
je n'ai pas de chance qd je lance une recherche dans la barre d'outil et je clique l'objet de ma recherche, c'est la pub qui s'affiche.Juste quand tu passe par la barre d'outil? Et si tu passes par google directement, tu as aussi ce souci?
1/ Pour supprimer les utilitaires téléchargés:
* Télécharge ToolsCleaner2 sur ton bureau
* Double-clique sur « Toolscleaner.exe »
* Clique sur « restauration » pour créer un point de restauration.
* Puis clique sur « recherche »
* Quand la recherche sera terminée, clique sur « suppression ».
* A la fin (il y aura des indications dans le cadre en-dessous), clique sur « quitter » et poste le rapport qui se trouve dans « C:\Tcleaner.txt »
* Clique droit sur son icône => « supprimer »
2/ Pour supprimer les fichiers temporaires (à utiliser régulièrement!):
Télécharge sur le bureau « ATF-Cleaner »
* Double-clic dessus
* Sous l'onglet « Main », choisis« Select All »
* Clique sur le bouton « Empty Selected »
* Patiente le temps du nettoyage, puis « Ok »
** Note: Le prochain démarrage du PC sera un peu plus long, le prefetch ayant été vidé
-----
3/ Désactiver et réactiver la restauration système:
- sous xp:
* Clique-Droit sur Poste de Travail
* Clique « Propriétés »
* Clique « Restauration du système »
* Cocher : « Désactiver la restauration système sur tous les lecteurs »
* Valider en cliquant sur « OK »
-> Redémarrer le pc
* Et même manoeuvre en décochant pour rétablir la restauration
* Puis Menu Démarrer ==> Tous les programmes ==> Accessoires ==> Outils système ==> Restauration système
* Clique « Créer un nouveau point de restauration »
** note => le nom donné n’a aucune importance
- sous vista:
* Clique sur Démarrer
* Clique-droit sur « Ordinateur »
* Clique « Propriétés »
* Clique « Protection du système »
* Décocher : « C »
* Valider en cliquant sur « OK »
-> Redémarrer le pc
* Et même manoeuvre en recochant pour rétablir la restauration
* Puis de même et cliquer « créer » pour établir un nouveau point de restauration
-----
4/ Garder malwarebytes' et penser à faire des scans réguliers avec ce dernier!
=> Tuto malwarebytes'
-----
5/ Un dossier sur les infections à lire si ça t'interesse => Lien
-----
6/ Problème résolu?
Alors penser à mettre le sujet en résolu en éditant ton titre!
* Télécharge ToolsCleaner2 sur ton bureau
* Double-clique sur « Toolscleaner.exe »
* Clique sur « restauration » pour créer un point de restauration.
* Puis clique sur « recherche »
* Quand la recherche sera terminée, clique sur « suppression ».
* A la fin (il y aura des indications dans le cadre en-dessous), clique sur « quitter » et poste le rapport qui se trouve dans « C:\Tcleaner.txt »
* Clique droit sur son icône => « supprimer »
2/ Pour supprimer les fichiers temporaires (à utiliser régulièrement!):
Télécharge sur le bureau « ATF-Cleaner »
* Double-clic dessus
* Sous l'onglet « Main », choisis« Select All »
* Clique sur le bouton « Empty Selected »
* Patiente le temps du nettoyage, puis « Ok »
** Note: Le prochain démarrage du PC sera un peu plus long, le prefetch ayant été vidé
-----
3/ Désactiver et réactiver la restauration système:
- sous xp:
* Clique-Droit sur Poste de Travail
* Clique « Propriétés »
* Clique « Restauration du système »
* Cocher : « Désactiver la restauration système sur tous les lecteurs »
* Valider en cliquant sur « OK »
-> Redémarrer le pc
* Et même manoeuvre en décochant pour rétablir la restauration
* Puis Menu Démarrer ==> Tous les programmes ==> Accessoires ==> Outils système ==> Restauration système
* Clique « Créer un nouveau point de restauration »
** note => le nom donné n’a aucune importance
- sous vista:
* Clique sur Démarrer
* Clique-droit sur « Ordinateur »
* Clique « Propriétés »
* Clique « Protection du système »
* Décocher : « C »
* Valider en cliquant sur « OK »
-> Redémarrer le pc
* Et même manoeuvre en recochant pour rétablir la restauration
* Puis de même et cliquer « créer » pour établir un nouveau point de restauration
-----
4/ Garder malwarebytes' et penser à faire des scans réguliers avec ce dernier!
=> Tuto malwarebytes'
-----
5/ Un dossier sur les infections à lire si ça t'interesse => Lien
-----
6/ Problème résolu?
Alors penser à mettre le sujet en résolu en éditant ton titre!
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]
--> Recherche:
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\_OTM: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Owner\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Owner\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Owner\Recent\HijackThis.lnk: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
---------------------------------
--> Suppression:
C:\Documents and Settings\Owner\Bureau\OTM.exe: supprimé !
C:\Documents and Settings\Owner\Recent\HijackThis.lnk: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\Owner\Bureau\Rsit.exe: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\_OTM: supprimé !
C:\Rsit: supprimé !
--> Recherche:
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\_OTM: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Owner\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Owner\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Owner\Recent\HijackThis.lnk: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
---------------------------------
--> Suppression:
C:\Documents and Settings\Owner\Bureau\OTM.exe: supprimé !
C:\Documents and Settings\Owner\Recent\HijackThis.lnk: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\Owner\Bureau\Rsit.exe: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\_OTM: supprimé !
C:\Rsit: supprimé !
Lassé par la pub ? Créez un compte
- Contenus similaires :
- Forumproblème de fenêtre publicitaire intempestives
- Forum[ RESOLU] Fenêtre publicitaire intempestives et ralentissement du PC
- ForumFenêtres publicitaire intempestives sur Explorer
- ForumFenêtres publicitaire intempestives
- ForumOuverture intempestive de fenetres publicitaires [RESOLU]
- solutionsRésoluRESOLU debarasser fenetre publicitaire sur mon ordi
- Forumouverture intempestive de fenêtres publicitaires
- Forum[Résolu]Page publicitaire intempestive
- ForumFenetre porno et publicitaire qui s'ouvre automatiquement [Résolu]
- ForumComment enlever les fenetre publicitaire sur ma page facebook
- Voir plus