Euh...
Je me suis arretée dès la 1ere étape. Pas de start sur OTC, j'ai tapé analyse et voici le rapport, mais pas de redémarrage ni de correction (que dois je lui demander de corriger ?)
OTL logfile created on: 12/01/2013 11:05:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Isabelle Van Baëten\Bureau\PROTECTION ORDI
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
2,00 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 56,14% Memory free
3,85 Gb Paging File | 2,90 Gb Available in Paging File | 75,31% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 148,80 Gb Total Space | 59,93 Gb Free Space | 40,28% Space Free | Partition Type: NTFS
Drive D: | 301,37 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: IS | User Name: Isabelle Van Baëten | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2013/01/12 10:57:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\PROTECTION ORDI\OTL.exe
PRC - [2013/01/11 01:21:56 | 000,917,552 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012/12/17 13:31:01 | 000,295,072 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012/11/30 12:26:54 | 000,302,961 | ---- | M] () -- C:\Program Files\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe
PRC - [2012/11/29 20:31:04 | 000,038,608 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2012/11/29 17:57:06 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012/10/30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012/10/30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2012/07/03 09:04:54 | 000,252,848 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/02/17 12:03:54 | 000,185,688 | ---- | M] (Panasonic Corporation) -- C:\Program Files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe
PRC - [2009/01/21 12:08:06 | 001,095,560 | ---- | M] (PC Tools) -- C:\Program Files\Spyware Doctor\pctsSvc.exe
PRC - [2009/01/07 11:40:56 | 000,348,752 | ---- | M] (PC Tools) -- C:\Program Files\Spyware Doctor\pctsAuxs.exe
PRC - [2008/12/08 12:33:48 | 001,173,384 | ---- | M] (PC Tools) -- C:\Program Files\Spyware Doctor\pctsTray.exe
PRC - [2008/08/06 20:44:26 | 000,103,936 | ---- | M] (TechCity Solutions France) -- C:\Program Files\BboxUpdate\BTLiveUpdate.exe
PRC - [2008/06/15 14:34:20 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2008/04/14 03:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\system32\bgsvcgen.exe
PRC - [2007/01/15 18:54:48 | 000,054,784 | ---- | M] (Macrovision) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
PRC - [2006/08/25 12:47:12 | 000,356,352 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSHIBA Applet\THotkey.exe
PRC - [2006/06/29 13:39:16 | 000,184,320 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Commandes TOSHIBA\TFncKy.exe
PRC - [2006/05/19 20:13:38 | 000,798,720 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSServ.exe
PRC - [2006/03/16 21:58:50 | 000,974,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
PRC - [2006/03/02 23:50:52 | 000,151,552 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\Toshiba.exe
PRC - [2006/02/07 15:30:40 | 000,035,840 | ---- | M] (TOSHIBA Corp.) -- C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
PRC - [2006/02/02 12:11:38 | 000,073,728 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Tvs\TvsTray.exe
PRC - [2005/10/06 04:20:00 | 000,122,940 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\DLA\DLACTRLW.EXE
PRC - [2005/08/03 15:09:12 | 000,266,240 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\system32\TPSMain.exe
PRC - [2005/08/03 15:08:58 | 000,040,960 | ---- | M] (TOSHIBA Corporation) -- C:\WINDOWS\system32\TPSBattM.exe
PRC - [2005/06/06 23:46:24 | 000,057,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
PRC - [2005/06/02 15:54:34 | 000,086,606 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe
PRC - [2005/05/17 08:24:50 | 000,118,784 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Utilitaire de zoom TOSHIBA\SmoothView.exe
PRC - [2005/05/10 15:04:52 | 000,110,592 | ---- | M] (Musicmatch, Inc.) -- C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
PRC - [2005/05/10 15:04:50 | 000,403,456 | ---- | M] (Musicmatch, Inc.) -- C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
PRC - [2005/05/10 15:04:50 | 000,102,400 | ---- | M] (Musicmatch, Inc.) -- C:\Program Files\Musicmatch\Musicmatch Jukebox\MMDiag.exe
PRC - [2005/04/11 15:08:00 | 000,065,536 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
PRC - [2005/01/18 00:38:38 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2004/08/28 08:37:00 | 000,155,648 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\WINDOWS\system32\RAMASST.exe
PRC - [2004/08/28 08:33:00 | 000,110,592 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\WINDOWS\system32\DVDRAMSV.exe
PRC - [2004/08/18 11:37:44 | 000,184,320 | ---- | M] (Agere Systems) -- C:\Program Files\ltmoh\ltmoh.exe
PRC - [2001/11/12 12:31:48 | 000,020,480 | ---- | M] (X10) -- C:\Program Files\Common Files\X10\Common\X10nets.exe
========== Modules (No Company Name) ========== MOD - [2013/01/11 21:08:44 | 002,043,392 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13011101\algo.dll
MOD - [2013/01/11 10:57:18 | 002,043,392 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13011100\algo.dll
MOD - [2013/01/11 01:21:54 | 003,021,872 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012/11/30 12:26:54 | 000,302,961 | ---- | M] () -- C:\Program Files\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe
MOD - [2012/11/29 20:31:04 | 000,038,608 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
MOD - [2012/08/27 21:33:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\zlib1.dll
MOD - [2012/08/27 21:33:08 | 001,242,512 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\libxml2.dll
MOD - [2011/02/04 17:48:30 | 000,291,840 | ---- | M] () -- C:\WINDOWS\system32\sbe.dll
MOD - [2008/12/08 12:33:38 | 000,104,328 | ---- | M] () -- C:\Program Files\Spyware Doctor\NetworkLayer\PCTCFHook.dll
MOD - [2008/06/15 14:34:20 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
MOD - [2008/04/14 03:33:31 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2008/03/25 05:50:40 | 000,355,112 | ---- | M] () -- C:\WINDOWS\system32\msjetoledb40.dll
MOD - [2006/05/01 21:04:00 | 001,466,368 | ---- | M] () -- C:\WINDOWS\system32\nview.dll
MOD - [2006/05/01 21:04:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
MOD - [2006/01/04 17:14:36 | 000,049,152 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Applet\TouchPad_ONOFF.dll
MOD - [2005/11/23 13:55:38 | 000,118,784 | ---- | M] () -- C:\WINDOWS\system32\TCtrlIO.dll
MOD - [2005/05/10 15:04:40 | 000,118,784 | ---- | M] () -- C:\Program Files\Musicmatch\Musicmatch Jukebox\CDDVDAccess.dll
MOD - [2005/04/11 12:31:36 | 000,122,880 | ---- | M] () -- C:\Program Files\Musicmatch\Musicmatch Jukebox\mmgit.dll
========== Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\pctuto_fr_5\suppct_fr_5.exe -- (suppct_fr_5)
SRV - File not found [Auto | Stopped] -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\pctuto_fr_4\suppct_fr_4.exe -- (suppct_fr_4)
SRV - [2013/01/11 01:21:55 | 000,115,760 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/01/10 21:06:57 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/11/30 12:26:52 | 000,285,795 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe -- (HOSTS Anti-PUPs)
SRV - [2012/11/29 20:31:04 | 000,038,608 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2012/11/29 17:57:06 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012/10/30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/05/05 10:56:32 | 000,069,120 | ---- | M] (BOONTY) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)
SRV - [2009/01/21 12:08:06 | 001,095,560 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009/01/07 11:40:56 | 000,348,752 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2008/12/05 15:11:54 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008/06/15 14:34:20 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2007/06/15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\WINDOWS\system32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2007/01/15 18:54:48 | 000,054,784 | ---- | M] (Macrovision) [Auto | Running] -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)
SRV - [2006/02/07 15:30:40 | 000,035,840 | ---- | M] (TOSHIBA Corp.) [Auto | Running] -- C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe -- (TAPPSRV)
SRV - [2005/11/17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2005/06/02 15:54:34 | 000,086,606 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/01/18 00:38:38 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2004/08/28 08:33:00 | 000,110,592 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) [Auto | Running] -- C:\WINDOWS\system32\DVDRAMSV.exe -- (DVD-RAM_Service)
SRV - [2003/07/28 19:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2001/11/12 12:31:48 | 000,020,480 | ---- | M] (X10) [Auto | Running] -- C:\Program Files\Common Files\X10\Common\X10nets.exe -- (x10nets)
========== Driver Services (SafeList) ========== DRV - [2012/10/30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012/10/30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012/10/30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012/10/30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012/10/30 23:51:57 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012/10/30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012/10/30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/06/24 14:12:28 | 000,020,736 | ---- | M] (ZDC., Inc. (ZDC)) [Kernel | Auto | Running] -- C:\WINDOWS\system32\ZDCndis5.sys -- (ZDCNDIS5)
DRV - [2009/04/03 10:18:26 | 000,130,936 | ---- | M] (PC Tools) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2008/11/03 14:03:21 | 000,081,288 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\iksyssec.sys -- (IKSysSec)
DRV - [2008/11/03 14:03:21 | 000,066,952 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\iksysflt.sys -- (IkSysFlt)
DRV - [2008/11/03 14:03:20 | 000,040,840 | ---- | M] (PCTools Research Pty Ltd.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\ikfilesec.sys -- (IKFileSec)
DRV - [2007/01/15 18:54:46 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS -- (CdaC15BA)
DRV - [2006/05/30 15:42:52 | 000,045,696 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Tvs.sys -- (Tvs)
DRV - [2006/05/05 15:13:52 | 004,271,616 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService)
DRV - [2006/04/02 01:46:28 | 000,471,264 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2006/03/22 07:56:24 | 001,522,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006/02/20 18:17:40 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV - [2005/12/13 17:08:44 | 001,124,097 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005/11/30 18:12:00 | 000,162,560 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2005/11/28 09:45:16 | 000,007,040 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\x10hid.sys -- (X10Hid)
DRV - [2005/10/20 13:03:42 | 000,006,144 | ---- | M] (Toshiba Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NBSMI.sys -- (TVALD)
DRV - [2005/10/06 04:20:00 | 000,094,332 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2005/10/06 04:20:00 | 000,087,036 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2005/10/06 04:20:00 | 000,086,524 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2005/10/06 04:20:00 | 000,025,628 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2005/10/06 04:20:00 | 000,014,684 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2005/10/06 04:20:00 | 000,006,364 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2005/10/06 04:20:00 | 000,002,496 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResN.SYS -- (DLADResN)
DRV - [2005/08/25 11:16:52 | 000,005,628 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2005/08/25 11:16:16 | 000,022,684 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS -- (DLARTL_N)
DRV - [2005/06/02 11:33:00 | 000,102,384 | ---- | M] (Matsushita Electric Industrial Co.,Ltd.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\meiudf.sys -- (meiudf)
DRV - [2004/10/20 14:23:34 | 000,021,344 | R--- | M] (FreeBox SA) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\fbxusb32.sys -- (fbxusb)
DRV - [2004/05/17 14:18:26 | 000,008,573 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TOSRFEC.SYS -- (tosrfec)
DRV - [2003/09/19 00:47:00 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (Pfc)
DRV - [2003/01/29 22:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar =
http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://fr.msn.com/ IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.com/results [...] r:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.com/search?q [...] urceid=ie7 IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" =
http://us.yhs.search.yahoo.com [...] archTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" =
http://us.yhs.search.yahoo.com [...] archTerms} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" =
http://us.yhs.search.yahoo.com [...] archTerms} IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://fr.msn.com/ IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes\${searchCLSID}: "URL" =
http://search.live.com/results [...] r:source?} IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={ [...] ORM=IE8SRC IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.com/search?q [...] 1I7GCNV_fr IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes\{9D56FA3F-AC14-438B-867D-07F018DE133F}: "URL" =
http://search.live.com/results [...] r:source?} IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" =
http://fr.yhs.search.yahoo.com [...] archTerms} IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ========== FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com."
FF - prefs.js..extensions.enabledAddons: facebookappsbookmark%40addonworks.com:1.2.3
FF - prefs.js..extensions.enabledAddons: %7B77b819fa-95ad-4f2c-ac7c-486b356188a9%7D:2.0.20120203
FF - prefs.js..extensions.enabledAddons: %7Be001c731-5e37-4538-a5cb-8168736a2360%7D:0.9.9.119
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:7.0.1474
FF - prefs.js..extensions.enabledAddons: %7BACAA314B-EEBA-48e4-AD47-84E31C44796C%7D:4.2.1.9
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.52
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\Isabelle Van Baëten\Application Data\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010/02/13 18:58:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/11/17 10:19:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2012/12/17 13:32:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2012/12/17 13:32:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/11 01:21:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/01/11 01:21:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012/12/17 13:31:50 | 000,000,000 | ---D | M]
[2010/07/24 22:07:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Extensions
[2010/07/24 22:07:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Extensions\home2@tomtom.com
[2009/11/11 19:28:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Extensions\prism@developer.mozilla.org
[2012/12/18 18:49:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions
[2010/05/18 16:51:42 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/14 17:17:49 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2012/04/02 19:58:16 | 000,000,000 | ---D | M] (IE Tab) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
[2012/06/27 21:16:05 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2009/09/05 16:07:22 | 000,000,000 | ---D | M] (Dictionnaire HunSpell en Français (réforme 1990)) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\fr@dictionaries.addons.mozilla.org
[2012/12/18 18:49:26 | 000,000,000 | ---D | M] ("TimeLineRemove.Com" ) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack
[2012/01/29 10:37:06 | 000,085,228 | ---- | M] () (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\facebookappsbookmark@addonworks.com.xpi
[2012/12/12 19:45:24 | 000,036,098 | ---- | M] () (No name found) -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Mozilla\Firefox\Profiles\e7zkx4vk.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013/01/11 01:21:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/01/11 01:21:37 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ISABELLE VAN BAë TEN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\E7ZKX4VK.DEFAULT\EXTENSIONS\{77B819FA-95AD-4F2C-AC7C-486B356188A9}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ISABELLE VAN BAë TEN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\E7ZKX4VK.DEFAULT\EXTENSIONS\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ISABELLE VAN BAë TEN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\E7ZKX4VK.DEFAULT\EXTENSIONS\{E001C731-5E37-4538-A5CB-8168736A2360}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ISABELLE VAN BAë TEN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\E7ZKX4VK.DEFAULT\EXTENSIONS\FACEBOOKAPPSBOOKMARK@ADDONWORKS.COM.XPI
[2012/11/17 10:19:57 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2013/01/11 01:21:56 | 000,262,704 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/12/17 13:31:11 | 000,124,056 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2003/07/09 00:06:07 | 000,405,558 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\NPSVG6.dll
[2013/01/11 01:21:53 | 000,001,609 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2012/09/09 14:59:28 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/12/08 17:00:47 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2013/01/11 01:21:53 | 000,001,476 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2013/01/11 01:21:53 | 000,001,399 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2012/12/08 17:00:46 | 000,001,169 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
========== Chrome ========== CHR - homepage:
http://www.google.com CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
O1 HOSTS File: ([2012/11/27 12:51:03 | 000,445,303 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 babe.the-killer.bz
O1 - Hosts: 127.0.0.1
www.babe.the-killer.bz O1 - Hosts: 127.0.0.1 babe.k-lined.com
O1 - Hosts: 127.0.0.1
www.babe.k-lined.com O1 - Hosts: 127.0.0.1 did.i-used.cc
O1 - Hosts: 127.0.0.1
www.did.i-used.cc O1 - Hosts: 127.0.0.1 coolwwwsearch.com
O1 - Hosts: 127.0.0.1
www.coolwwwsearch.com O1 - Hosts: 127.0.0.1 coolwebsearch.com
O1 - Hosts: 127.0.0.1
www.coolwebsearch.com O1 - Hosts: 127.0.0.1 hi.studioaperto.net
O1 - Hosts: 127.0.0.1
www.hi.studioaperto.net O1 - Hosts: 127.0.0.1 wazzupnet.com
O1 - Hosts: 127.0.0.1
www.wazzupnet.com O1 - Hosts: 127.0.0.1 gueb.com
O1 - Hosts: 127.0.0.1
www.gueb.com O1 - Hosts: 127.0.0.1 kabex.com
O1 - Hosts: 127.0.0.1
www.kabex.com O1 - Hosts: 127.0.0.1 hityou.com
O1 - Hosts: 127.0.0.1
www.hityou.com O1 - Hosts: 127.0.0.1 miosearch.com
O1 - Hosts: 127.0.0.1
www.miosearch.com O1 - Hosts: 127.0.0.1 blue-elefant.com
O1 - Hosts: 127.0.0.1
www.blue-elefant.com O1 - Hosts: 15320 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (dsWebAllowBHO Class) - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll (Microsoft Corporation)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O2 - BHO: (Barre d'outils MSN Search Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll (Microsoft Corporation)
O2 - BHO: (CPub Object) - {C86AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - C:\Program Files\FireTrust\SiteHound\SiteHound.dll (Firetrust Limited.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (SiteHound) - {73F7F495-A325-4C52-BE48-5F97FA511E89} - C:\Program Files\FireTrust\SiteHound\SiteHound.dll (Firetrust Limited.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Barre d'outils MSN Search) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\..\Toolbar\WebBrowser: (Barre d'outils MSN Search) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BboxUpdate] C:\Program Files\BboxUpdate\BTLiveUpdate.exe (TechCity Solutions France)
O4 - HKLM..\Run: [CFSServ.exe] CFSServ.exe -NoClient File not found
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [HOSTS Anti-Adware_PUPs] C:\Program Files\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe ()
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [LtMoh] C:\Program Files\ltmoh\ltmoh.exe (Agere Systems)
O4 - HKLM..\Run: [MimBoot] C:\Program Files\Musicmatch\Musicmatch Jukebox\mimboot.exe (Musicmatch, Inc.)
O4 - HKLM..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe (Musicmatch, Inc.)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVRotateSysTray] C:\WINDOWS\System32\nvsysrot.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" File not found
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\Utilitaire de zoom TOSHIBA\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TFncKy] TFncKy.exe File not found
O4 - HKLM..\Run: [THotkey] C:\Program Files\Toshiba\TOSHIBA Applet\THotkey.exe (TOSHIBA)
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [TPSMain] C:\WINDOWS\System32\TPSMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u File not found
O4 - HKU\S-1-5-21-542156585-4204828846-1178660297-1005..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-542156585-4204828846-1178660297-1005..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe (Matsushita Electric Industrial Co., Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\VideoCam Suite 2.0.lnk = C:\Program Files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe (Panasonic Corporation)
O4 - Startup: C:\Documents and Settings\Isabelle Van Baëten\Menu Démarrer\Programmes\Démarrage\Banshee Screamer Alarm.lnk = C:\Program Files\Banshee Screamer Alarm\alarm.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-542156585-4204828846-1178660297-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &MSN Search - C:\Program Files\MSN Toolbar Suite\msntb.dll (Microsoft Corporation)
O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Isabelle Van Baëten\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Isabelle Van Baëten\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: musicmatch.com ([online] https in Trusted sites)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24}
http://messenger.zone.msn.com/ [...] E_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6 [...] s-i586.cab (Reg Error: Value error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592}
http://messenger.zone.msn.com/ [...] b56649.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
http://messenger.zone.msn.com/ [...] b56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
http://java.sun.com/update/1.5 [...] s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6 [...] s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
http://java.sun.com/update/1.6 [...] s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6 [...] s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia. [...] wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{31D22B13-EC4A-4953-8A24-565BD9DEAFC2}: DhcpNameServer = 212.27.54.252 212.27.53.252
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{726CDD7A-8E56-4B38-ADAE-8CA303B6A56C}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/15 13:41:19 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2000/07/17 16:31:33 | 000,000,564 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{66854e78-9766-11df-b5cb-00a0d1643e00}\Shell\AutoRun\command - "" = E:\InstallTomTomHOME.exe
O33 - MountPoints2\{ff8aa6f0-772e-11dc-913d-0019d2166e1e}\Shell\AutoRun\command - "" = E:\start.exe
O33 - MountPoints2\{ff8aa6f0-772e-11dc-913d-0019d2166e1e}\Shell\iledefrance\command - "" = E:\start.exe
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\adobe\command - "" = D:\GOODIES\AR405FRE.EXE -- [2000/07/17 16:59:14 | 005,982,872 | R--- | M] (InstallShield Software Corporation)
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\aocsetup.exe -- [2001/08/25 19:24:08 | 000,553,017 | R--- | M] (Microsoft Corporation)
O33 - MountPoints2\D\Shell\log\command - "" = D:\goodies\machine\machine.exe -- [2000/05/25 03:20:02 | 000,253,952 | R--- | M] (Microsoft Corporation)
O33 - MountPoints2\D\Shell\machine\command - "" = D:\GOODIES\MACHINE\MACHINE.EXE -- [2000/05/25 03:20:02 | 000,253,952 | R--- | M] (Microsoft Corporation)
O33 - MountPoints2\D\Shell\setup\command - "" = D:\aocsetup.exe -- [2001/08/25 19:24:08 | 000,553,017 | R--- | M] (Microsoft Corporation)
O33 - MountPoints2\D\Shell\zone\command - "" = D:\GOODIES\MSZONE\ZONEA660.EXE -- [2000/04/06 00:44:16 | 006,928,087 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ========== [2013/01/11 22:10:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\GRAS SAVOYE
[2013/01/11 13:50:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\Malwarebytes
[2013/01/11 13:49:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware
[2013/01/11 13:49:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2013/01/11 13:49:43 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013/01/11 13:49:43 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/01/11 01:21:34 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/01/10 20:51:27 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2013/01/10 19:27:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2013/01/09 17:43:26 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Isabelle Van Baëten\Recent
[2012/12/25 18:05:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isabelle Van Baëten\Mes documents\AFER
[2012/12/17 13:33:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\RealNetworks
[2012/12/17 13:32:39 | 000,000,000 | ---D | C] -- C:\Program Files\RealNetworks
[2012/12/17 13:32:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\RealNetworks
[2012/12/17 13:32:07 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\xing shared
[2012/12/17 13:31:50 | 000,201,424 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2012/12/17 13:31:06 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2012/12/17 13:31:06 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2012/12/17 13:31:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RealNetworks
[2011/04/04 17:45:31 | 002,944,904 | ---- | C] (Ask) -- C:\Program Files\Fichiers communs\AskToolbarInstaller.exe
========== Files - Modified Within 30 Days ========== [2013/01/12 11:06:00 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/01/12 10:57:00 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/01/12 10:19:00 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/01/12 09:55:10 | 000,045,378 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013/01/12 09:55:05 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/12 09:55:04 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2013/01/12 09:55:03 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2013/01/12 09:54:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/01/12 09:54:54 | 2145,439,744 | -HS- | M] () -- C:\hiberfil.sys
[2013/01/11 22:07:47 | 000,230,944 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\formulaire demande paje.pdf
[2013/01/11 22:05:23 | 000,422,434 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\AffichageResultats aide garde 4j.pdf
[2013/01/11 21:57:09 | 000,422,434 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\AffichageResultats AIDES GARDE 3JOURS.pdf
[2013/01/11 13:08:00 | 000,000,492 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2013/01/11 13:05:00 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2013/01/11 01:08:00 | 000,000,492 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2013/01/10 21:06:55 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/01/10 21:06:55 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/01/10 19:47:54 | 000,000,237 | RHS- | M] () -- C:\boot.ini
[2013/01/10 19:08:00 | 000,000,492 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2013/01/10 00:27:25 | 000,546,314 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2013/01/10 00:27:25 | 000,472,286 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/01/10 00:27:25 | 000,101,314 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2013/01/10 00:27:25 | 000,084,454 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/01/10 00:17:04 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/01/09 17:50:17 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/01/09 17:49:34 | 000,003,120 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2013/01/09 14:11:20 | 000,000,314 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2013/01/09 13:08:00 | 000,000,492 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2013/01/07 23:13:28 | 000,000,314 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2013/01/07 23:10:51 | 000,225,629 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_2310.jpg
[2013/01/06 17:13:50 | 000,886,072 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Mes documents\Tarifs_Res_Colis_fm 5.pdf
[2013/01/05 18:29:49 | 000,107,008 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/01/02 16:13:03 | 000,059,058 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_ORLpdf.pdf
[2013/01/02 16:12:26 | 000,059,058 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_ pdf.pdf
[2013/01/02 16:11:55 | 000,059,064 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne PED_pdf.pdf
[2013/01/02 16:11:24 | 000,059,287 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_RADpdf.pdf
[2013/01/02 16:10:42 | 000,059,283 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_pdf.pdf
[2012/12/31 17:36:11 | 000,000,492 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Mes documents\spider.sav
[2012/12/29 22:06:23 | 001,915,149 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3273.jpg
[2012/12/29 22:06:15 | 001,881,869 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3272.jpg
[2012/12/29 22:05:55 | 001,541,476 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3271.jpg
[2012/12/29 22:05:45 | 001,604,963 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3266.jpg
[2012/12/29 22:05:16 | 001,988,253 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3263.jpg
[2012/12/29 22:05:13 | 002,127,253 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3262.jpg
[2012/12/29 22:04:48 | 001,721,629 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3274.jpg
[2012/12/28 16:47:11 | 000,344,550 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de Projet1.jpg
[2012/12/28 16:46:58 | 000,328,455 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de P1140776.JPG
[2012/12/28 16:46:50 | 000,539,131 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de IMG_0478.JPG
[2012/12/28 16:46:29 | 000,401,677 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de IMG_0465.JPG
[2012/12/25 18:06:55 | 000,000,356 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Raccourci vers Mes documents.lnk
[2012/12/21 19:33:33 | 000,257,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/12/21 17:07:21 | 000,001,563 | ---- | M] () -- C:\WINDOWS\pstudio.ini
[2012/12/21 17:07:21 | 000,000,028 | ---- | M] () -- C:\WINDOWS\album.ini
[2012/12/20 15:36:33 | 000,474,202 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\fichedescriptiveformulaire_5891.pdf
[2012/12/17 19:32:03 | 002,605,652 | ---- | M] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\plaquette.pdf
[2012/12/17 13:32:53 | 000,000,801 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\RealPlayer.lnk
[2012/12/17 13:31:50 | 000,201,424 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2012/12/17 13:31:06 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2012/12/17 13:31:06 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2012/12/17 13:31:04 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\WINDOWS\System32\pncrt.dll
[2012/12/16 13:23:59 | 000,290,560 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\dllcache\atmfd.dll
[2012/12/16 13:23:59 | 000,290,560 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\atmfd.dll
[2012/12/14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
========== Files Created - No Company Name ========== [2013/01/11 22:07:47 | 000,230,944 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\formulaire demande paje.pdf
[2013/01/11 22:05:23 | 000,422,434 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\AffichageResultats aide garde 4j.pdf
[2013/01/11 21:57:09 | 000,422,434 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\AffichageResultats AIDES GARDE 3JOURS.pdf
[2013/01/10 19:42:33 | 2145,439,744 | -HS- | C] () -- C:\hiberfil.sys
[2013/01/09 15:14:48 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/01/07 23:10:47 | 000,225,629 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_2310.jpg
[2013/01/06 17:13:34 | 000,886,072 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Mes documents\Tarifs_Res_Colis_fm 5.pdf
[2013/01/02 16:13:03 | 000,059,058 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_ORLpdf.pdf
[2013/01/02 16:12:26 | 000,059,058 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_ pdf.pdf
[2013/01/02 16:11:55 | 000,059,064 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne PED_pdf.pdf
[2013/01/02 16:11:24 | 000,059,287 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_RADpdf.pdf
[2013/01/02 16:10:42 | 000,059,283 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\releve_en_ligne_pdf.pdf
[2012/12/29 22:06:21 | 001,915,149 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3273.jpg
[2012/12/29 22:06:14 | 001,881,869 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3272.jpg
[2012/12/29 22:05:53 | 001,541,476 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3271.jpg
[2012/12/29 22:05:44 | 001,604,963 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3266.jpg
[2012/12/29 22:05:04 | 001,988,253 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3263.jpg
[2012/12/29 22:04:53 | 002,127,253 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3262.jpg
[2012/12/29 22:04:44 | 001,721,629 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\IMG_3274.jpg
[2012/12/28 16:47:11 | 000,344,550 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de Projet1.jpg
[2012/12/28 16:46:58 | 000,328,455 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de P1140776.JPG
[2012/12/28 16:46:49 | 000,539,131 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de IMG_0478.JPG
[2012/12/28 16:46:26 | 000,401,677 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Resize of Copie de IMG_0465.JPG
[2012/12/25 18:06:55 | 000,000,356 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\Raccourci vers Mes documents.lnk
[2012/12/20 15:36:33 | 000,474,202 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\fichedescriptiveformulaire_5891.pdf
[2012/12/17 19:31:55 | 002,605,652 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Bureau\plaquette.pdf
[2012/12/17 13:33:45 | 000,000,306 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2012/12/17 13:33:44 | 000,000,314 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-542156585-4204828846-1178660297-1005.job
[2012/12/17 13:32:53 | 000,000,801 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\RealPlayer.lnk
[2012/12/14 09:46:11 | 000,001,002 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/11/29 22:21:15 | 000,002,460 | ---- | C] () -- C:\WINDOWS\System32\ASOROSet.bin
[2012/11/20 19:19:41 | 000,004,310 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\recently-used.xbel
[2012/06/23 16:47:01 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\TosBthSupport.dll
[2012/05/18 19:37:28 | 001,167,360 | ---- | C] () -- C:\WINDOWS\System32\acAuth.dll
[2012/05/18 19:37:15 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2007/09/08 10:10:15 | 001,440,054 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Application Data\ZBWallpaper.bmp
[2007/01/06 18:31:09 | 000,107,008 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/01/04 22:40:34 | 000,000,142 | ---- | C] () -- C:\Documents and Settings\Isabelle Van Baëten\Local Settings\Application Data\fusioncache.dat
========== ZeroAccess Check ========== [2006/09/15 13:37:31 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/14 03:33:41 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 11:53:55 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 03:33:48 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Alternate Data Streams ========== @Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >
Avant de reprendre la suite de tes conseils, qu'est ce que je fais de ça stp?