dmw.exe-erreur d'application

Bonjour,
Cela fait plusieurs semaine que mon compte utilisateur ne fonctionne plus, jusqu'ici j'utilisais le compte administrateur qui fonctionne a merveille sans problème... J'ai d'abord essayé de supprimé le compte utilisateur (il n'y en a qu'un), pour en recréer un autre ensuite, mais toujours le même problème, le compte ne démarre pas, voici ce qu'il m'avertis lorsque je clique pour ouvrir le compte:

dmw.exe-erreur d'application
l'application n'a pas réussi à s'initialiser correctement (0xc0000022). cliquez sur OK pour arrêter l'application

et a la suite parés avoir cliquer sur OK

explorer.exe-erreur d'application
............................................................­­...........................................................­.­..(la même chose)

Il apparait alors une fenêtre bleu vierge comme un Windows sans rien d'installé...
j'ai voulu ouvrir le gestionnaire des taches avec les touche Ctrl-Alt-Suppr mais encore le même message d'erreur...
S'il vous plait aidez moi
(je ne suis pas novice)
je suis sous vista...

Configuration: Windows Vista
Firefox 3.0.6

Salut BeDoMaGiC


On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++

alors le info.txt

info.txt logfile of random's system information tool 1.06 2009-08-24 23:51:19

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->MsiExec /X{B83FC356-B7C0-441F-8A4D-D71E088E7974}
32 Bit HP CIO Components Installer-->MsiExec.exe /I{47ECCB1F-2811-49C0-B6A7-26778639ABA0}
7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe"
AbsoluteShield File Shredder-->"C:\Program Files\SysShield Tools\File Shredder\unins000.exe"
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000101}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
Adobe Reader 9.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe"
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
AirPlus G-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2B7E4354-0492-460A-BDB1-1F59EE141025}\setup.exe" -l0x40c -removeonly
Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
AOEMView 2009-->C:\Program Files\AOEMView 2009\Setup\Setup.exe /P {2A4F281E-2161-405B-B090-4487F505BDDE} /M AOEM
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft Codec-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{03146A27-65BB-48E6-9B3E-E071D3E9EC0B}\Setup.exe" -l0x9
Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Ask.com Search Assistant 1.0.1-->C:\Program Files\Ask Search Assistant\uninst.exe
Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
AutoCAD Mechanical 2009-->C:\Program Files\Autodesk\ACADM 2009\Setup\Setup.exe /P {5783F2D7-7005-040C-0002-0060B0CE6BBA} /M ACM
Autodesk Data Management Server 2009-->C:\Program Files\Autodesk\Data Management Server 2009\Setup\setup.exe /p {BB9FF67B-1A16-491B-81C5-272B145FEAB7} /M SERVER
Autodesk Data Management Server 2009-->MsiExec.exe /X{BB9FF67B-1A16-491B-81C5-272B145FEAB7}
Autodesk Design Review 2009-->C:\Program Files\Autodesk\Autodesk Design Review\Setup\Setup.exe /P {450063AA-643B-417C-8CF5-405BA3F4EF40} /M ADR
Autodesk Inventor Professional 2009-->C:\Program Files\Autodesk\Inventor 2009\Setup\Setup.exe /P {7F4DD591-1300-0409-0000-7107D70F3DB4} /M INVENTOR
Autodesk Inventor Professional 2009-->MsiExec.exe /I{7F4DD591-1300-0409-0000-7107D70F3DB4}
Autodesk Vault 2009 (Client)-->C:\Program Files\Autodesk\Vault 2009\Setup\setup.exe /p {B4013E5D-C833-4C8D-A942-AD7BBDFD9389} /M VAULT
Autodesk Vault 2009 (Client)-->MsiExec.exe /X{B4013E5D-C833-4C8D-A942-AD7BBDFD9389}
Avanquest update-->"C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe" -runfromtemp -l0x0009 -removeonly
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
BioShock-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E280923D-C5D9-4728-8C79-AC9A0DC75875}\setup.exe" -l0x40c -removeonly
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch-->C:\Program Files\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CopyTrans Suite désinstallation uniquement-->C:\Program Files\WindSolutions\CopyTrans Suite\CopyTransControlCenter.exe uninstall
Cotation version 1.24-->"C:\Program Files\Cotation\unins000.exe"
DartyBox-->C:\Program Files\InstallShield Installation Information\{5ABD53CC-6182-40DF-9663-EBC9E6F3AE7C}\Setup.exe -runfromtemp -l0x040c -removeonly
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DWG TrueView 2009-->C:\Program Files\DWG TrueView 2009\Setup\Setup.exe /P {5783F2D6-7028-040C-0000-0060B0CE6BBA} /M AOEM
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Eraser 5.8.7-->"C:\Program Files\Eraser\unins000.exe"
EVEREST Ultimate Edition v5.00-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Fable - The Lost Chapters-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
Fallout 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{974C4B12-4D02-4879-85E0-61C95CC63E9E}\setup.exe" -l0x40c -removeonly
Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)-->MsiExec.exe /X{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
FileZilla Client 3.2.3.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe
Freeraser-->C:\Program Files\Codyssey\Freeraser\Uninstall.exe
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
GameSpy Arcade-->C:\PROGRA~1\GameSpy Arcade\UNWISE.EXE C:\PROGRA~1\GameSpy Arcade\INSTALL.LOG
Haihaisoft PDF Reader-->C:\Program Files\Haihaisoft PDF Reader\Uninstall.exe
Hauppauge WinTV 7-->C:\PROGRA~1\INSTAL~1\UNWISE32.EXE C:\PROGRA~1\WinTV\WinTV7\WinTV7.LOG
Hauppauge WinTV Infrared Remote-->C:\PROGRA~1\WinTV\UNir32.EXE C:\PROGRA~1\WinTV\ir32.LOG
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Customer Participation Program 12.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot
HP Imaging Device Functions 12.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart C4500 All-In-One Driver Software12.0 Rel .4-->C:\Program Files\HP\Digital Imaging\{0BC1A5B2-79A1-4716-B3E5-4071E9AB6F43}\setup\hpzscr01.exe -datfile hposcr30.dat -onestop -forcereboot
HP Photosmart Essential 3.5-->C:\Program Files\HP\Digital Imaging\PhotosmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 12.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{7059BDA7-E1DB-442C-B7A1-6144596720A4}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
ISO Recorder-->MsiExec.exe /I{1235083F-52F9-44CC-9DF5-F9B7802BB9B7}
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LG USB Modem Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c -removeonly
LightScribe System Software-->MsiExec.exe /X{8BA510D1-045B-4E1A-AF52-2282BBF69D5D}
LimeWire PRO 5.0.11-->"C:\Program Files\LimeWire\uninstall.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
MessengerDiscovery 2.0.0959-->"C:\Program Files\MessengerDiscovery\unins000.exe"
MessengerDiscovery 2.0.48-->"C:\Program Files\MessengerDiscovery 2\unins000.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{B578C85A-A84C-4230-A177-C5B2AF565B8C}
Microsoft Games for Windows - LIVE-->MsiExec.exe /X{B45FABE7-D101-4D99-A671-E16DA40AF7F0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Groove MUI (French) 2007-->MsiExec.exe /X{90120000-00BA-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Ultimate 2007-->MsiExec.exe /X{91120000-002E-0000-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft SQL Server 2005 Express Edition (AUTODESKVAULT)-->MsiExec.exe /I{480DBB60-F0B6-45F2-B26F-1A2E11197791}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{3F59A7E0-BC01-4435-9E93-C7D7015C21DA}
Microsoft SQL Server 2005-->"c:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
Microsoft SQL Server Native Client-->MsiExec.exe /I{1F24E48F-7692-4E89-8784-68DD4D2712A0}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{A30179B7-997A-4D47-AA43-57AE59A9C78B}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{ac474156-361a-4a7b-8b6e-977781b92565}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
MobileMe Control Panel-->MsiExec.exe /I{C7EEC93A-2A61-4B1E-B696-A264680A889D}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
morphemuleversion-->"C:\Program Files\eMule\unins000.exe"
Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nero 9-->C:\Program Files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A"
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NFO viewer v 2.1-->"C:\Program Files\NFO viewer\unins000.exe"
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{B83FC356-B7C0-441F-8A4D-D71E088E7974}
NVIDIA Stereoscopic 3D Driver-->C:\Windows\system32\nvStInst.exe /uninstall /ask
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Overlord II-->C:\Program Files\InstallShield Installation Information\{E426CEC1-35C5-42BF-913E-6EF8F1211D01}\Setup.exe -runfromtemp -l0x040c -removeonly
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista-->C:\Program Files\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
Revo Uninstaller 1.83-->C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe
Sarkophage 1.5-->"C:\Program Files\Sarkophage\unins000.exe"
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Sony Ericsson Media Manager 1.2-->MsiExec.exe /X{8CD0B297-122D-4718-9CE1-B72E796F7B21}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
The Witcher Enhanced Edition-->"C:\Program Files\InstallShield Installation Information\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}\setup.exe" -runfromtemp -l0x040c -removeonly
TightVNC 1.3.9-->"C:\Program Files\TightVNC\unins000.exe"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb972691)-->msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {AA020E6E-E2FB-45EF-B732-2400E2296742}
Update Service-->C:\Program Files\Sony Ericsson\Update Service\uninst.exe
Videora iPod touch Converter 4.07-->C:\Program Files\Red Kawa\Video Converter App\uninstaller.exe
VirtualDubMOD 1.5.10.3 Fr-->"C:\Program Files\VirtualDubMOD\unins000.exe"
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 1.0.0-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinSCP 4.1.9-->"C:\Program Files\WinSCP\unins000.exe"
WolfoRan Shredder LE-->C:\Program Files\WolfoRan Shredder LE\Uninstal.exe
Xvid 1.2.1 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
YouTube Downloader App 1.02-->C:\Program Files\Regensoft\Downloader App\uninstaller.exe

======Hosts File======

127.255.255.255 serial.alcohol-soft.com

======Security center information======

AS: AVG Anti-Spyware (disabled) (outdated)
AS: Windows Defender

======System event log======

Computer Name: Robin
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0060B348F25C. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 81810
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090824170431.000000-000
Event Type: Avertissement
User:

Computer Name: Robin
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0060B348F25C. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 81813
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090824170433.000000-000
Event Type: Avertissement
User:

Computer Name: Robin
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 81814
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090824170432.662718-000
Event Type: Erreur
User:

Computer Name: Robin
Event Code: 7026
Message: Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
FVXSCSI
Record Number: 81907
Source Name: Service Control Manager
Time Written: 20090824170608.000000-000
Event Type: Erreur
User:

Computer Name: Robin
Event Code: 6037
Message: Le programme lsass.exe, avec l’ID de processus 700, n’a pas pu s’authentifier localement à l’aide du nom de cible host/\\ROBIN. Le nom de cible utilisé n’est pas valide. Un nom de cible doit faire référence à l’un des noms d’ordinateurs locaux, par exemple, le nom d’hôte DNS.

Essayez un autre nom de cible.
Record Number: 81948
Source Name: LsaSrv
Time Written: 20090824210323.000000-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: Robin
Event Code: 0
Message: System.AppDomainUnloadedException: Le domaine de l'application dans lequel le thread s'exécutait a été déchargé.

Server stack trace:
à System.Threading.Thread.InternalCrossContextCallback(Context ctx, IntPtr ctxID, Int32 appDomainID, InternalCrossContextDelegate ftnToCall, Object[] args)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.DoTransitionDispatch(Byte[] reqStmBuff, SmuggledMethodCallMessage smuggledMcm, SmuggledMethodReturnMessage& smuggledMrm)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.SyncProcessMessage(IMessage reqMsg)

Exception rethrown at [0]:
à System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
à System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
à Connectivity.EDMWS.AppDomain.HttpListenerApplication.ProcessRequest()
à Connectivity.EDMWS.AppDomain.HttpListenerController.OnStart()
Record Number: 52462911
Source Name: Autodesk Web Server
Time Written: 20090824214918.000000-000
Event Type: Erreur
User:

Computer Name: Robin
Event Code: 1310
Message: Code de l'événement : 3008
Message d'événement : Une erreur de configuration s'est produite.
Heure de l'événement : 24/08/2009 23:50:08
Heure de l'événement (UTC) : 24/08/2009 21:50:08
ID d'événement : f07a8a8ad36f4ddeaf66952c3cb0627e
Séquence d'événements : 1
Occurrence de l'événement : 1
Code de détail de l'événement : 0

Informations d'application :
Domaine d'application : 25f5eda4-283-128956241584514184
Niveau de confiance : Full
Chemin d'accès virtuel de l'application : /AutodeskDM/Services
Chemin d'accès à l'application : C:\Program Files\Autodesk\Data Management Server 2009\Server\Web\Services\
Nom d'ordinateur : ROBIN

Informations sur le processus :
ID de processus : 828
Nom du processus : Connectivity.EDMWS.Server.exe
Nom du compte : AUTORITE NT\SYSTEM

Informations sur l'exception :
Type d'exception : ConfigurationErrorsException
Message d'exception : Une erreur s'est produite lors de l'exécution du gestionnaire de section de configuration pour system.web/identity.

Informations sur la demande :
URL de la demande : http://127.0.0.1/AutodeskDM/Services/JobService.asmx
Chemin d'accès à la demande : /AutodeskDM/Services/JobService.asmx
Adresse d'hôte de l'utilisateur : 127.0.0.1
Utilisateur :
Est authentifié : False
Type d'authentification :
Nom du compte de thread : AUTORITE NT\SYSTEM

Informations sur le thread :
ID de thread : 8
Nom du compte de thread : AUTORITE NT\SYSTEM
Emprunte une identité : False
Trace de la pile : à System.Web.HttpRuntime.FirstRequestInit(HttpContext context)
à System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context)
à System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)


Détails de l'événement personnalisé :

Record Number: 52462912
Source Name: ASP.NET 2.0.50727.0
Time Written: 20090824215008.000000-000
Event Type: Avertissement
User:

Computer Name: Robin
Event Code: 0
Message: System.AppDomainUnloadedException: Le domaine de l'application dans lequel le thread s'exécutait a été déchargé.

Server stack trace:
à System.Threading.Thread.InternalCrossContextCallback(Context ctx, IntPtr ctxID, Int32 appDomainID, InternalCrossContextDelegate ftnToCall, Object[] args)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.DoTransitionDispatch(Byte[] reqStmBuff, SmuggledMethodCallMessage smuggledMcm, SmuggledMethodReturnMessage& smuggledMrm)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.SyncProcessMessage(IMessage reqMsg)

Exception rethrown at [0]:
à System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
à System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
à Connectivity.EDMWS.AppDomain.HttpListenerApplication.ProcessRequest()
à Connectivity.EDMWS.AppDomain.HttpListenerController.OnStart()
Record Number: 52462913
Source Name: Autodesk Web Server
Time Written: 20090824215019.000000-000
Event Type: Erreur
User:

Computer Name: Robin
Event Code: 1310
Message: Code de l'événement : 3008
Message d'événement : Une erreur de configuration s'est produite.
Heure de l'événement : 24/08/2009 23:51:09
Heure de l'événement (UTC) : 24/08/2009 21:51:09
ID d'événement : 93a4e3cca4e34ac58e95326d978f2c99
Séquence d'événements : 1
Occurrence de l'événement : 1
Code de détail de l'événement : 0

Informations d'application :
Domaine d'application : 25f5eda4-284-128956242190730184
Niveau de confiance : Full
Chemin d'accès virtuel de l'application : /AutodeskDM/Services
Chemin d'accès à l'application : C:\Program Files\Autodesk\Data Management Server 2009\Server\Web\Services\
Nom d'ordinateur : ROBIN

Informations sur le processus :
ID de processus : 828
Nom du processus : Connectivity.EDMWS.Server.exe
Nom du compte : AUTORITE NT\SYSTEM

Informations sur l'exception :
Type d'exception : ConfigurationErrorsException
Message d'exception : Une erreur s'est produite lors de l'exécution du gestionnaire de section de configuration pour system.web/identity.

Informations sur la demande :
URL de la demande : http://127.0.0.1/AutodeskDM/Services/JobService.asmx
Chemin d'accès à la demande : /AutodeskDM/Services/JobService.asmx
Adresse d'hôte de l'utilisateur : 127.0.0.1
Utilisateur :
Est authentifié : False
Type d'authentification :
Nom du compte de thread : AUTORITE NT\SYSTEM

Informations sur le thread :
ID de thread : 8
Nom du compte de thread : AUTORITE NT\SYSTEM
Emprunte une identité : False
Trace de la pile : à System.Web.HttpRuntime.FirstRequestInit(HttpContext context)
à System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context)
à System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)


Détails de l'événement personnalisé :

Record Number: 52462914
Source Name: ASP.NET 2.0.50727.0
Time Written: 20090824215109.000000-000
Event Type: Avertissement
User:

Computer Name: Robin
Event Code: 0
Message: System.AppDomainUnloadedException: Le domaine de l'application dans lequel le thread s'exécutait a été déchargé.

Server stack trace:
à System.Threading.Thread.InternalCrossContextCallback(Context ctx, IntPtr ctxID, Int32 appDomainID, InternalCrossContextDelegate ftnToCall, Object[] args)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.DoTransitionDispatch(Byte[] reqStmBuff, SmuggledMethodCallMessage smuggledMcm, SmuggledMethodReturnMessage& smuggledMrm)
à System.Runtime.Remoting.Channels.CrossAppDomainSink.SyncProcessMessage(IMessage reqMsg)

Exception re

et le log maintenant

Logfile of random's system information tool 1.06 (written by random/random)
Run by famille at 2009-08-24 23:55:06
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 20 GB (8%) free of 238 GB
Total RAM: 3070 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:55:10, on 24/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\SYSTEM32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\DartyBox_v3\Sagem\AssistantDB\AssistantDB_Sagem.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WinTV\Ir.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\WinTV\WinTV7\WinTVTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\famille\Desktop\Downloads\RSIT.exe
C:\Program Files\trend micro\famille.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.cherche.us/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.cherche.us
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.cherche.us
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dartybox.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.cherche.us
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.cherche.us/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.cherche.us
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [Assistant DartyBox] C:\Program Files\DartyBox_v3\Sagem\AssistantDB\AssistantDB_Sagem.exe -m
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: WinTV Recording Status..lnk = C:\Program Files\WinTV\WinTV7\WinTVTray.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: *.chat-land.org
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: HauppaugeTVServer - Hauppauge Computer Works - C:\Program Files\WinTV\TVServer\HauppaugeTVServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: PoliceService - Unknown owner - C:\Windows\system32\srksrv.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\System32\nvSCPAPISvr.exe

--
End of file - 11928 bytes

======Scheduled tasks folder======

C:\Windows\tasks\NeroLiveEpgUpdate-ROBIN_famille.job
C:\Windows\tasks\User_Feed_Synchronization-{B41A3146-CCBD-4AE9-A880-9A6AAFB800FF}.job
C:\Windows\tasks\Wise Registry Cleaner 4.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2007-08-31 988584]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-03-06 177472]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2008-08-20 150016]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2008-02-22 72192]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-06-10 13785632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-08-03 419088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-02-25 2387968]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-04-18 321344]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe [2009-04-24 203416]
"Assistant DartyBox"=C:\Program Files\DartyBox_v3\Sagem\AssistantDB\AssistantDB_Sagem.exe [2009-04-09 4665856]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
C:\Program Files\Eraser\Eraser.exe [2009-06-10 334224]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AutoStart IR.lnk - C:\Program Files\WinTV\Ir.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
WinTV Recording Status..lnk - C:\Program Files\WinTV\WinTV7\WinTVTray.exe

C:\Users\famille\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoStartMenuMFUprogramsList"=1
"NoStartMenuPinnedList"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{400f5529-de71-11dd-99d4-001b11c07826}]
shell\AutoRun\command - J:\FalloutLauncher.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-08-24 23:50:51 ----D---- C:\Program Files\trend micro
2009-08-24 23:50:50 ----D---- C:\rsit
2009-08-24 23:01:03 ----HD---- C:\Program Files\Uninstall Information
2009-08-24 22:49:20 ----D---- C:\Windows\ERDNT
2009-08-24 09:21:55 ----A---- C:\Windows\system32\ShellManager310E2D762.dll
2009-08-20 23:08:46 ----D---- C:\Program Files\VirtualDubMOD
2009-08-20 22:52:10 ----SHD---- C:\Config.Msi
2009-08-18 21:27:37 ----A---- C:\Windows\system32\wdigest.dll
2009-08-18 21:27:37 ----A---- C:\Windows\system32\msv1_0.dll
2009-08-18 21:27:37 ----A---- C:\Windows\system32\kerberos.dll
2009-08-18 21:27:36 ----A---- C:\Windows\system32\secur32.dll
2009-08-18 21:27:36 ----A---- C:\Windows\system32\schannel.dll
2009-08-18 21:27:36 ----A---- C:\Windows\system32\lsass.exe
2009-08-18 21:27:36 ----A---- C:\Windows\system32\lsasrv.dll
2009-08-12 15:00:30 ----A---- C:\Windows\system32\atl.dll
2009-08-12 15:00:27 ----A---- C:\Windows\system32\wkssvc.dll
2009-08-12 15:00:20 ----A---- C:\Windows\system32\wmp.dll
2009-08-12 15:00:19 ----A---- C:\Windows\system32\wmpdxm.dll
2009-08-12 15:00:19 ----A---- C:\Windows\system32\spwmp.dll
2009-08-12 15:00:17 ----A---- C:\Windows\system32\dxmasf.dll
2009-08-12 15:00:16 ----A---- C:\Windows\system32\wmploc.DLL
2009-08-12 15:00:13 ----A---- C:\Windows\system32\avifil32.dll
2009-08-12 15:00:09 ----A---- C:\Windows\system32\mstscax.dll
2009-08-08 21:22:30 ----D---- C:\Program Files\Codyssey
2009-08-07 19:30:45 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-08-01 03:04:08 ----D---- C:\ProgramData\WindowsSearch
2009-07-31 22:48:59 ----D---- C:\Program Files\Eraser
2009-07-31 22:48:59 ----A---- C:\Windows\system32\Erasext.dll
2009-07-31 22:48:59 ----A---- C:\Windows\system32\Eraserl.exe
2009-07-31 22:48:59 ----A---- C:\Windows\system32\Eraser.dll
2009-07-31 21:38:46 ----A---- C:\Windows\system32\TUProgSt.exe
2009-07-31 21:35:40 ----D---- C:\Users\famille\AppData\Roaming\TuneUp Software
2009-07-31 21:35:17 ----D---- C:\ProgramData\TuneUp Software
2009-07-31 21:35:17 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-07-31 21:33:50 ----SHD---- C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
2009-07-31 19:38:42 ----D---- C:\Program Files\WolfoRan Shredder LE
2009-07-31 19:19:50 ----D---- C:\Program Files\SysShield Tools
2009-07-31 19:06:49 ----D---- C:\Program Files\SafeSoft
2009-07-30 20:22:02 ----D---- C:\Program Files\DartyBox_v3
2009-07-30 20:21:52 ----D---- C:\Program Files\CD_DartyBox
2009-07-29 11:33:39 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 11:33:38 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 11:33:38 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 11:33:38 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\occache.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\msfeedssync.exe
2009-07-29 11:33:37 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 11:33:37 ----A---- C:\Windows\system32\ieui.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\iesysprep.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\iesetup.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\iernonce.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\iepeers.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 11:33:37 ----A---- C:\Windows\system32\ie4uinit.exe
2009-07-26 17:46:01 ----D---- C:\Users\famille\AppData\Roaming\IrfanView
2009-07-26 17:46:01 ----D---- C:\Program Files\IrfanView
2009-07-21 02:15:56 ----D---- C:\Darty
2009-07-21 00:42:18 ----D---- C:\Windows\Pixart
2009-07-21 00:42:17 ----D---- C:\Program Files\PC VGA Camera
2009-07-21 00:41:49 ----A---- C:\0x040c.ini
2009-07-19 17:31:38 ----D---- C:\Users\famille\AppData\Roaming\Malwarebytes
2009-07-19 17:31:32 ----D---- C:\ProgramData\Malwarebytes
2009-07-19 17:31:32 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-19 16:46:42 ----D---- C:\ProgramData\Avira
2009-07-19 16:46:42 ----D---- C:\Program Files\Avira
2009-07-19 16:09:57 ----D---- C:\ProgramData\G DATA
2009-07-19 16:09:57 ----D---- C:\Program Files\G DATA
2009-07-18 13:34:16 ----D---- C:\Program Files\VS Revo Group
2009-07-18 13:04:10 ----D---- C:\Program Files\Piratrax
2009-07-18 12:46:15 ----D---- C:\Users\famille\AppData\Roaming\KC Softwares
2009-07-18 12:43:07 ----D---- C:\Program Files\SeekService
2009-07-15 01:30:41 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 01:30:41 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 01:30:41 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 01:30:41 ----A---- C:\Windows\system32\atmfd.dll
2009-07-14 17:17:04 ----A---- C:\Windows\system32\xlivefnt.dll
2009-07-14 17:17:04 ----A---- C:\Windows\system32\xlive.dll
2009-07-14 17:15:00 ----A---- C:\Windows\system32\xlive.dll.cat
2009-07-11 21:33:52 ----D---- C:\Users\famille\AppData\Roaming\IObit
2009-07-11 20:19:20 ----D---- C:\Program Files\CCleaner
2009-07-09 17:14:11 ----D---- C:\Program Files\Codemasters
2009-07-09 16:21:39 ----A---- C:\Windows\system32\Wait.exe
2009-07-09 16:15:31 ----D---- C:\Hauppauge
2009-07-09 15:40:16 ----D---- C:\ProgramData\ArcSoft
2009-07-09 15:40:16 ----D---- C:\Program Files\Common Files\ArcSoft
2009-07-09 15:40:16 ----A---- C:\Windows\system32\unicows.dll
2009-07-09 15:39:55 ----D---- C:\Windows\system32\Hauppauge
2009-07-09 15:39:30 ----A---- C:\Windows\ODBCINST.INI
2009-07-09 15:39:27 ----D---- C:\Program Files\WinTV
2009-07-09 15:39:11 ----A---- C:\Windows\system32\hcwutl32.dll
2009-07-09 15:39:11 ----A---- C:\Windows\system32\hcwpnp32.dll
2009-07-09 15:39:11 ----A---- C:\Windows\system32\hcwi2c32.dll
2009-07-09 15:38:58 ----A---- C:\Windows\HCWPNP.INI
2009-07-08 01:55:28 ----D---- C:\Users\famille\AppData\Roaming\vlc
2009-07-07 11:43:50 ----A---- C:\Windows\system32\WdfCoInstaller01007.dll
2009-07-07 11:38:09 ----D---- C:\Users\famille\AppData\Roaming\Sony
2009-07-07 11:38:09 ----D---- C:\ProgramData\Sony
2009-07-07 11:35:12 ----D---- C:\Program Files\Common Files\Sony Shared
2009-07-07 11:35:04 ----D---- C:\Program Files\Sony
2009-07-07 10:52:23 ----D---- C:\Program Files\Avanquest update
2009-07-07 10:51:18 ----D---- C:\ProgramData\BVRP Software
2009-07-07 10:43:10 ----D---- C:\ProgramData\Sony Ericsson
2009-07-07 10:43:10 ----D---- C:\Program Files\Sony Ericsson
2009-07-01 00:50:30 ----D---- C:\tmp
2009-06-18 18:58:10 ----D---- C:\ProgramData\HPSSUPPLY
2009-06-13 05:24:50 ----A---- C:\Windows\system32\EncDec.dll
2009-06-13 05:24:49 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvwgf2um.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvudisp.exe
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvoglv32.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvcuvid.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvcuvenc.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvcuda.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvcod155.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvcod.dll
2009-06-10 08:35:02 ----A---- C:\Windows\system32\nvsvsr.dll
2009-06-10 08:35:02 ----A---- C:\Windows\system32\nvcpluir.dll
2009-06-10 08:35:02 ----A---- C:\Windows\system32\nvcplui.exe
2009-06-10 08:35:00 ----A---- C:\Windows\system32\nvsvs.dll
2009-06-10 08:34:52 ----A---- C:\Windows\system32\nvwssr.dll
2009-06-10 08:34:52 ----A---- C:\Windows\system32\nvwss.dll
2009-06-10 08:34:50 ----A---- C:\Windows\system32\nvvitvsr.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvvsvc.exe
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvvitvs.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvmoblsr.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvmobls.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvmccssr.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvmccss.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvgamesr.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvgames.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvdispsr.dll
2009-06-10 08:34:48 ----A---- C:\Windows\system32\nvdisps.dll
2009-06-10 08:34:46 ----A---- C:\Windows\system32\nvsvcr.dll
2009-06-10 08:34:46 ----A---- C:\Windows\system32\nvsvc.dll
2009-06-10 08:34:46 ----A---- C:\Windows\system32\nvshext.dll
2009-06-10 08:34:46 ----A---- C:\Windows\system32\nvmctray.dll
2009-06-10 08:34:46 ----A---- C:\Windows\system32\nvcpl.dll
2009-06-10 06:33:20 ----A---- C:\Windows\system32\nvStInst.exe
2009-06-10 06:33:18 ----A---- C:\Windows\system32\nvstlink.exe
2009-06-10 06:33:08 ----A---- C:\Windows\system32\nvstwiz.exe
2009-06-10 06:33:06 ----A---- C:\Windows\system32\nvStereoApiI.dll
2009-06-10 06:33:04 ----A---- C:\Windows\system32\nvStereoApiI64.dll
2009-06-10 06:33:00 ----A---- C:\Windows\system32\nvSCPAPISvr.exe
2009-06-10 06:32:54 ----A---- C:\Windows\system32\nvSCPAPI.dll
2009-06-10 06:32:48 ----A---- C:\Windows\system32\nvSCPAPI64.dll
2009-06-10 06:32:40 ----A---- C:\Windows\system32\nvstres.dll
2009-06-10 06:31:56 ----A---- C:\Windows\system32\nvstreg.exe
2009-06-10 06:31:46 ----A---- C:\Windows\system32\nvsttest.exe
2009-06-10 06:31:12 ----A---- C:\Windows\system32\nvstview.exe
2009-06-10 06:31:04 ----A---- C:\Windows\system32\nvimage.dll
2009-06-09 20:39:32 ----A---- C:\Windows\system32\localspl.dll
2009-06-09 20:38:07 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-03 15:31:00 ----D---- C:\Users\famille\AppData\Roaming\play2p
2009-06-03 15:28:53 ----D---- C:\Program Files\InstallJammer Registry
2009-06-03 13:07:08 ----A---- C:\Windows\ODBC.INI
2009-06-03 13:06:59 ----D---- C:\Program Files\RomStation
2009-06-02 21:01:53 ----D---- C:\Program Files\WinSCP
2009-05-27 23:44:05 ----D---- C:\Program Files\Regensoft
2009-05-27 15:02:19 ----D---- C:\Program Files\TightVNC

======List of files/folders modified in the last 3 months======

2009-08-24 23:54:22 ----D---- C:\Windows\Prefetch
2009-08-24 23:53:57 ----D---- C:\Windows\Temp
2009-08-24 23:51:22 ----D---- C:\Users\famille\AppData\Roaming\DNA
2009-08-24 23:50:51 ----D---- C:\Program Files
2009-08-24 23:18:09 ----D---- C:\Windows\system32\drivers
2009-08-24 23:03:53 ----RD---- C:\Users
2009-08-24 23:01:22 ----SHD---- C:\$Recycle.Bin
2009-08-24 22:49:20 ----D---- C:\Windows
2009-08-24 20:46:52 ----SHD---- C:\System Volume Information
2009-08-24 19:11:48 ----D---- C:\Program Files\Mozilla Firefox
2009-08-24 19:10:52 ----D---- C:\Program Files\DNA
2009-08-24 19:04:35 ----D---- C:\ProgramData\NVIDIA
2009-08-24 18:47:56 ----HD---- C:\Windows\system32\GroupPolicyUsers
2009-08-24 13:51:00 ----D---- C:\Users\famille\AppData\Roaming\BitTorrent
2009-08-24 09:23:21 ----SHD---- C:\Windows\Installer
2009-08-24 09:23:21 ----A---- C:\Windows\system32\MsiExec.exe.log
2009-08-24 09:22:58 ----RSD---- C:\Windows\assembly
2009-08-24 09:22:57 ----D---- C:\Program Files\Common Files\Nero
2009-08-24 09:22:55 ----D---- C:\ProgramData\Nero
2009-08-24 09:22:50 ----D---- C:\Windows\System32
2009-08-22 23:16:32 ----A---- C:\Windows\system32\PnkBstrB.exe
2009-08-22 19:54:06 ----A---- C:\Windows\NeroDigital.ini
2009-08-22 18:44:39 ----D---- C:\Users\famille\AppData\Roaming\dvdcss
2009-08-22 15:42:30 ----D---- C:\Windows\inf
2009-08-22 15:42:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-20 22:52:20 ----D---- C:\Windows\Tasks
2009-08-20 00:09:43 ----D---- C:\Windows\Debug
2009-08-18 21:30:15 ----D---- C:\Windows\winsxs
2009-08-18 21:26:41 ----D---- C:\Windows\system32\catroot2
2009-08-18 21:26:41 ----D---- C:\Windows\system32\catroot
2009-08-13 02:06:00 ----D---- C:\ProgramData\Microsoft Help
2009-08-13 02:05:27 ----D---- C:\Program Files\Windows Media Player
2009-08-13 02:05:13 ----D---- C:\Program Files\Windows Mail
2009-08-10 15:20:12 ----D---- C:\Windows\system32\wbem
2009-08-10 15:13:14 ----D---- C:\Windows\system32\Tasks
2009-08-10 15:13:14 ----D---- C:\Windows\system32\spool
2009-08-10 15:13:14 ----D---- C:\Windows\registration
2009-08-10 15:13:14 ----D---- C:\ProgramData\HP Product Assistant
2009-08-01 19:50:25 ----HD---- C:\ProgramData
2009-07-31 22:10:51 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-31 21:46:31 ----D---- C:\Windows\system32\config
2009-07-31 21:13:18 ----D---- C:\Users\famille\AppData\Roaming\LimeWire
2009-07-30 20:21:54 ----D---- C:\Program Files\Assistant Dartybox
2009-07-30 13:53:17 ----D---- C:\Windows\system32\migration
2009-07-30 13:53:16 ----D---- C:\Program Files\Internet Explorer
2009-07-30 02:49:14 ----A---- C:\Windows\system32\mrt.exe
2009-07-29 19:19:07 ----A---- C:\Windows\system32\PnkBstrA.exe
2009-07-29 17:08:25 ----DC---- C:\Windows\system32\DRVSTORE
2009-07-29 17:08:19 ----D---- C:\Program Files\Windows Live
2009-07-21 00:42:32 ----D---- C:\Program Files\InstallShield Installation Information
2009-07-21 00:42:32 ----A---- C:\Windows\win.ini
2009-07-21 00:42:18 ----D---- C:\Windows\twain_32
2009-07-20 15:47:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-07-20 15:46:50 ----D---- C:\Program Files\AGEIA Technologies
2009-07-20 15:44:56 ----D---- C:\NVIDIA
2009-07-19 17:37:44 ----D---- C:\Windows\SoftwareProtection
2009-07-19 16:30:48 ----D---- C:\Program Files\Common Files
2009-07-16 23:42:07 ----D---- C:\Program Files\GameSpy Arcade
2009-07-15 15:13:19 ----D---- C:\Program Files\Messenger Plus! Live
2009-07-12 00:39:12 ----D---- C:\Program Files\eMule
2009-07-11 21:55:22 ----D---- C:\Program Files\MessengerDiscovery 2
2009-07-11 21:51:38 ----D---- C:\Program Files\Windows Sidebar
2009-07-11 21:51:27 ----D---- C:\Program Files\Windows NT
2009-07-11 21:51:20 ----D---- C:\Program Files\QuickTime
2009-07-11 21:51:14 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-07-11 21:51:07 ----D---- C:\Program Files\DivX
2009-07-11 21:51:07 ----D---- C:\Program Files\Common Files\microsoft shared
2009-07-11 21:33:52 ----D---- C:\Program Files\IObit
2009-07-11 20:57:22 ----SHD---- C:\Boot
2009-07-11 20:21:04 ----D---- C:\Windows\Minidump
2009-07-10 01:03:52 ----A---- C:\Windows\Irremote.ini
2009-07-09 15:40:07 ----D---- C:\Program Files\Common Files\InstallShield
2009-07-07 12:04:45 ----D---- C:\Windows\ModemLogs
2009-07-03 19:56:30 ----D---- C:\Users\famille\AppData\Roaming\MessengerDiscovery 2
2009-07-01 19:49:25 ----D---- C:\Windows\Microsoft.NET
2009-06-28 01:47:45 ----D---- C:\Program Files\Windows Live Safety Center
2009-06-19 10:13:40 ----D---- C:\Users\famille\AppData\Roaming\Adobe
2009-06-18 18:58:46 ----D---- C:\Users\famille\AppData\Roaming\HP
2009-06-14 02:23:15 ----D---- C:\Windows\ehome
2009-06-13 00:10:36 ----D---- C:\Users\famille\AppData\Roaming\Bioshock
2009-06-13 00:05:16 ----D---- C:\ProgramData\Media Center Programs
2009-06-13 00:04:51 ----D---- C:\Program Files\Activision
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvd3dum.dll
2009-06-10 18:33:00 ----A---- C:\Windows\system32\nvapi.dll
2009-06-04 16:39:54 ----A---- C:\Windows\system32\NVUNINST.EXE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-19 28520]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-05-03 279712]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-18 55656]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-05-03 25888]
R3 athrusb;Atheros Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrusb.sys [2008-07-29 904192]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\drivers\GEARAspiWDM.sys [2009-03-19 23400]
R3 hcw95bda;Hauppauge MOD7700 Tuner Driver; C:\Windows\System32\Drivers\hcw95bda.sys [2008-09-09 562176]
R3 hcw95rc;Hauppauge MOD7700 IR Driver; C:\Windows\system32\DRIVERS\hcw95rc.sys [2008-09-09 15616]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-04-23 1769952]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2009-08-03 38160]
R3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-06-10 9899296]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-03-05 76288]
S3 a1k8mjqs;a1k8mjqs; C:\Windows\system32\drivers\a1k8mjqs.sys []
S3 a7zkempa;a7zkempa; C:\Windows\system32\drivers\a7zkempa.sys []
S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 fcdabus;fcdabus; C:\Windows\system32\DRIVERS\fcdabus.sys []
S3 fsRamDsk;RamDisk Drive Service; C:\Windows\system32\DRIVERS\fsRamDsk.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2009-07-07 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2009-07-07 25512]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RT73;D-Link USB Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\Dr71WU.sys [2005-11-03 245504]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\Windows\system32\DRIVERS\s1018bus.sys [2008-11-04 86696]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1018mdfl.sys [2008-11-04 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1018mdm.sys [2008-11-04 114472]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1018mgmt.sys [2008-11-04 108200]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1018obex.sys [2008-11-04 104616]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-03-06 36864]
S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-05-12 611664]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-19 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-18 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]
R2 Autodesk Data Management Job Dispatch;Autodesk Data Management Job Dispatch; C:\Program Files\Autodesk\Data Management Server 2009\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe [2008-02-18 32768]
R2 Autodesk EDM Server;Autodesk EDM Server; C:\Program Files\Autodesk\Data Management Server 2009\Server\Webserver\Connectivity.EDMWS.Server.exe [2008-02-18 57344]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 HauppaugeTVServer;HauppaugeTVServer; C:\Program Files\WinTV\TVServer\HauppaugeTVServer.exe [2009-06-05 434176]
R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-02-25 73728]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-24 29263712]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-06-10 211488]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-07-29 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-08-22 189104]
R2 PoliceService;PoliceService; C:\Windows\system32\srksrv.exe [2006-06-03 453120]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;Enregistreur VSS SQL Server; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Windows\System32\nvSCPAPISvr.exe [2009-06-10 232960]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-02-21 72704]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-12-26 79360]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408]

-----------------EOF-----------------

Salut BeDoMaGiC

Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

Déconnecte-toi et ferme toutes applications en cours

Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).

Double-clique sur l'icône AD-Remover située sur ton Bureau.

Au menu principal, choisis l'option L.

Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

Aide : http://commentcestfait.forumactif.net/tutos-securite-f31/tutorielad-remover-t(...)


@++