mon pc est ralenti resolu

Bonjour
Mon pc tourne au ralenti depuis quelques jours
Kaspersky,spybot et malwarebytes ne trouvent rien
Alors je me toune encore une fois vers vous
Merci

Salut toadadvance


On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++

Salut
Logfile of random's system information tool 1.06 (written by random/random)
Run by patrick at 2009-06-18 09:14:39
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 107 GB (70%) free of 153 GB
Total RAM: 1014 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:14:59, on 18/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\patrick\Bureau\RSIT.exe
C:\Program Files\trend micro\patrick.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O11 - Options group: [searching] Search from the Address bar
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/The%20Clockwork%20Man/Images/stg_drm.ocx
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Insider%20Tales%20-%20The%20Stolen%20Venus/Images/(...)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - http://asp.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CF9B62C-79B8-47FB-98DE-DE2C5B2F76E1}: NameServer = 192.168.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9d622259bd3c) (gupdate1c9d622259bd3c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 7212 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-17 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-23 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-30 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-17 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-02-26 155648]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-04 206088]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-04-02 198160]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2009-04-26 63712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-04-05 68856]
"WOOKIT"=C:\Program Files\Wanadoo\Shell.exe [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2009-04-26 63712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
C:\Documents and Settings\patrick\Bureau\programmes\CCleaner\CCleaner.exe [2009-05-27 1573104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QUAD Scheduler]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QUAD Windows service]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-04-02 198160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT]
C:\PROGRA~1\Wanadoo\Shell.exe [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\Wanadoo\GestMaj.exe [2004-10-14 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
C:\PROGRA~1\Wanadoo\Watch.exe [2004-08-23 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NkbMonitor.exe.lnk]
C:\PROGRA~1\Nikon\PICTUR~1\NKBMON~1.EXE [2005-12-09 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Ralink Wireless Utility.lnk]
C:\WINDOWS\RaUI.exe [2005-07-20 598016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^patrick^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk]
[]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-02-26 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2008-11-11 218376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=FFFFFFFF
"NoDriveTypeAutoRun"=36
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Outil de diagnostic Microsoft DirectX"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2009-06-18 09:14:39 ----D---- C:\rsit
2009-06-17 10:02:44 ----A---- C:\TB.txt
2009-06-17 10:02:10 ----D---- C:\ToolBar SD
2009-06-09 21:38:33 ----D---- C:\Documents and Settings\patrick\Application Data\SerpentOfIsis
2009-05-28 15:10:13 ----D---- C:\Documents and Settings\All Users\Application Data\blg
2009-05-21 08:22:40 ----D---- C:\WINDOWS\ERUNT
2009-05-19 22:12:31 ----A---- C:\TCleaner.txt
2009-05-19 13:04:23 ----D---- C:\Documents and Settings\patrick\Application Data\Zylom
2009-05-19 13:04:23 ----D---- C:\Documents and Settings\patrick\Application Data\Identities
2009-05-19 13:04:14 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
2009-05-19 13:04:06 ----D---- C:\Program Files\Zylom Games

======List of files/folders modified in the last 1 months======

2009-06-18 09:14:59 ----D---- C:\Program Files\Trend Micro
2009-06-18 08:56:58 ----D---- C:\WINDOWS\temp
2009-06-18 08:43:23 ----D---- C:\Program Files\Wanadoo
2009-06-18 08:41:08 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-06-18 08:40:58 ----SD---- C:\WINDOWS\Tasks
2009-06-18 00:16:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-17 19:53:19 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-17 18:54:34 ----D---- C:\WINDOWS\Prefetch
2009-06-17 14:41:26 ----SHD---- C:\WINDOWS\Installer
2009-06-16 22:30:48 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-14 20:41:12 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-14 12:16:46 ----D---- C:\WINDOWS\BDOSCAN8
2009-06-14 09:52:52 ----HD---- C:\Config.Msi
2009-06-13 22:58:35 ----D---- C:\WINDOWS\system32
2009-06-13 22:50:04 ----D---- C:\Program Files\DivX
2009-06-13 22:49:38 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-06-11 21:55:26 ----RD---- C:\Program Files
2009-06-10 21:52:19 ----D---- C:\WINDOWS
2009-06-10 17:55:50 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-10 08:53:59 ----HD---- C:\WINDOWS\inf
2009-06-10 08:52:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-10 08:52:42 ----A---- C:\WINDOWS\imsins.BAK
2009-06-10 08:51:30 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 08:47:12 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-10 08:47:11 ----D---- C:\Program Files\Internet Explorer
2009-06-09 22:38:45 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-06-09 18:07:26 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
2009-06-09 14:57:45 ----D---- C:\Documents and Settings\patrick\Application Data\Artogon
2009-06-09 14:10:09 ----D---- C:\Documents and Settings\patrick\Application Data\PlayFirst
2009-06-09 14:10:09 ----D---- C:\Documents and Settings\All Users\Application Data\PlayFirst
2009-06-09 13:47:08 ----D---- C:\Program Files\bfgclient
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-29 23:54:18 ----D---- C:\Program Files\MSN Games
2009-05-28 15:08:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-05-28 15:08:43 ----D---- C:\WINDOWS\system32\drivers
2009-05-23 20:00:02 ----D---- C:\Program Files\Adventure Chronicles
2009-05-23 19:59:22 ----D---- C:\Program Files\Herods Lost Tomb
2009-05-21 17:00:57 ----D---- C:\Program Files\Lost Realms - Legacy of the Sun Princess
2009-05-21 08:21:55 ----A---- C:\WINDOWS\ntbtlog.txt
2009-05-20 14:06:01 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-05-20 09:13:13 ----D---- C:\WINDOWS\pss

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-02-04 226832]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-04-04 20747]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-02-26 5700096]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12288]
R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RT61;Ralink Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2005-07-01 339072]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-23 6912]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 catchme;catchme; \??\C:\DOCUME~1\patrick\LOCALS~1\Temp\catchme.sys []
S3 FXDrv32;FXDrv32; \??\D:\FXDrv32.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-12-14 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-12-14 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-12-14 21744]
S3 mbr;mbr; \??\C:\DOCUME~1\patrick\LOCALS~1\Temp\mbr.sys []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 TSP;TSP; \??\C:\WINDOWS\system32\drivers\klif.sys []
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73600]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-04 206088]
R2 FTRTSVC;France Telecom Routing Table Service; C:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960]
R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S2 gupdate1c9d622259bd3c;Service Google Update (gupdate1c9d622259bd3c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-16 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-30 182768]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 71096]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-06-18 09:15:01

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Adventure Chronicles - The Search for Lost Treasure 1.00-->C:\Program Files\Games\Adventure Chronicles - The Search for Lost Treasure\Uninstall.exe
Adventure Chronicles-->"C:\Program Files\Adventure Chronicles\ReflexiveArcade\unins000.exe"
Alabama Smith in Escape from Pompeii-->C:\Program Files\Alabama Smith in Escape from Pompeii\uninstall.exe
Ancient Secrets-->C:\Program Files\Ancient Secrets\uninstall.exe
Animal Agents-->MsiExec.exe /I{9E15F9B9-9CD5-4017-BE8C-648C622E2405}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft Panorama Maker 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5F68DC8-0278-4AD8-B413-861509B5F25B}\Setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
CCleaner (remove only)-->"C:\Documents and Settings\patrick\Bureau\programmes\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
DeepBurner v1.9.0.228-->"C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log" -u
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Elizabeth Find, MD - Diagnosis Mystery-->C:\Program Files\Elizabeth Find, MD - Diagnosis Mystery\uninstall.exe
Escape Rosecliff Island-->C:\Program Files\Escape Rosecliff Island\uninstall.exe
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
GetDataBack for NTFS-->"C:\Program Files\Runtime Software\GetDataBack for NTFS\Uninstall.exe" "C:\Program Files\Runtime Software\GetDataBack for NTFS\install.log" -u
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Haunted Hotel-->MsiExec.exe /I{A8206965-E60A-40F8-8827-E0F98328903F}
Herods Lost Tomb 1.0.0.8-->C:\Program Files\Herods Lost Tomb\Uninstall.exe
Hidden Expedition Titanic (remove only)-->C:\Program Files\Hidden Expedition Titanic\Uninstall.exe
Hidden Mysteries Civil War-->C:\PROGRA~1\GAMEMI~1\HIDDEN~1\UNWISE.EXE C:\PROGRA~1\GAMEMI~1\HIDDEN~1\INSTALL.LOG
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Liong - The Lost Amulets-->C:\Program Files\Liong - The Lost Amulets\uninstall.exe
Little Shop - Memories 1.052-->C:\Program Files\Games\Little Shop - Memories\Uninstall.exe
Little Shop - Memories-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\littleshopmemories.rguninst" "AddRemove"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Masters of Mystery - Crime of Fashion-->C:\Program Files\Masters of Mystery - Crime of Fashion\uninstall.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Mystery Legends - Sleepy Hollow Cracked by Cryptic-->"C:\Program Files\Mystery Legends - Sleepy Hollow\unins000.exe"
Mystery PI - The New York Fortune 1.00-->C:\Program Files\Mystery PI - The New York Fortune\Uninstall.exe
Mystery PI - The New York Fortune-->"C:\Program Files\Mystery PI - The New York Fortune\ReflexiveArcade\unins000.exe"
Mystery Stories - Berlin Nights-->C:\Program Files\Mystery Stories - Berlin Nights\uninstall.exe
Nancy Drew(R) - Dossier(TM) - Lights, Camera, Curses!-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\nancydrewrdossiertmlightscameracurses.rguninst" "AddRemove"
NAVIGON Fresh 1.5.0-->C:\Program Files\NAVIGON\NAVIGON Fresh\uninst.exe
Nikon FotoShare-->C:\Program Files\Nikon\FotoShare\Uninstal.exe C:\PROGRA~1\Nikon\FOTOSH~1\INSTALL.LOG
Nikon Message Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\Setup.exe" -l0x40c UNINSTALL
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de connexion Wanadoo-->C:\PROGRA~1\Wanadoo\MessageDesinstallation.exe Wanadoo
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PC Inspector smart recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9A87D86-FDFD-418B-BF96-EF09320973B3}\Setup.exe" -l0x40c
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
PictureProject-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF3999BE-1A7B-4738-88AA-97BF14094A4A}\Setup.exe" -l0x40c UNINSTALL
Ralink Wireless LAN Card-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe" -l0x9 -removeonly
RealArcade-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\RealArcade.rguninst" "AddRemove"
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Righteous Kill beta-->C:\Program Files\Realarcade\Righteous Kill\uninstall.exe C:\Program Files\Realarcade\Righteous Kill\uninstall.log
Samantha Swift and the Hidden Roses of Athena-->"C:\WINDOWS\Samantha Swift and the Hidden Roses of Athena\uninstall.exe" "/U:C:\Program Files\Samantha Swift and the Hidden Roses of Athena\Uninstall\uninstall.xml"
Secured eMule-->C:\PROGRA~1\SECURE~1\UNWISE.EXE C:\PROGRA~1\SECURE~1\INSTALL.LOG
SPRILL-->C:\Program Files\SPRILL\Uninstal.exe
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
The Hidden Prophecies of Nostradamus -->C:\Program Files\The Hidden Prophecies of Nostradamus\uninstall.exe
The Hidden Prophecies of Nostradamus 1.00-->C:\Program Files\Games\The Hidden Prophecies of Nostradamus\Uninstall.exe
The Mystery of the Crystal Portal-->"C:\WINDOWS\\The Mystery of the Crystal Portal\\uninstall.exe" "/U:C:\WINDOWS\\The Mystery of the Crystal Portal\uninstall.xml"
The Mystery of the Crystal Portal-->"C:\WINDOWS\The Mystery of the Crystal Portal\uninstall.exe" "/U:C:\Program Files\The Mystery of the Crystal Portal\Uninstall\uninstall.xml"
The Secret of Margrave Manor-->"C:\WINDOWS\The Secret of Margrave Manor\uninstall.exe" "/U:C:\Program Files\The Secret of Margrave Manor\Uninstall\uninstall.xml"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wanadoo Messager-->C:\PROGRA~1\WANADO~1\UNWISE.EXE C:\PROGRA~1\WANADO~1\INSTALL.LOG
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinZip 11.1-->MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

=====HijackThis Backups=====

O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) [2008-10-09]
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) [2008-10-09]
O2 - BHO: {0c149ed0-a5a8-ad8b-58d4-cd575f5b11f6} - {6f11b5f5-75dc-4d85-b8da-8a5a0de941c0} - (no file) [2008-10-09]
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (file missing) [2008-10-09]
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (file missing) [2008-10-09]
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\patrick\LOCALS~1\Temp\cce1F.html [2008-10-29]
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\patrick\LOCALS~1\Temp\cce1E.html [2008-10-29]
O3 - Toolbar: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - (no file) [2008-10-29]

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: Kaspersky Internet Security
FW: Kaspersky Internet Security

======System event log======

Computer Name: BARBEREA-B7D20B
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service Messenger Sharing Folders USN Journal Reader.

Record Number: 35150
Source Name: Service Control Manager
Time Written: 20090510083027.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BARBEREA-B7D20B
Event Code: 7036
Message: Le service Service Messenger Sharing Folders USN Journal Reader est entré dans l'état : en cours d'exécution.

Record Number: 35149
Source Name: Service Control Manager
Time Written: 20090510083027.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 7036
Message: Le service Service de transfert intelligent en arrière-plan est entré dans l'état : en cours d'exécution.

Record Number: 35148
Source Name: Service Control Manager
Time Written: 20090510083024.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de transfert intelligent en arrière-plan.

Record Number: 35147
Source Name: Service Control Manager
Time Written: 20090510083023.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BARBEREA-B7D20B
Event Code: 7036
Message: Le service Google Software Updater est entré dans l'état : arrêté.

Record Number: 35146
Source Name: Service Control Manager
Time Written: 20090510082913.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: BARBEREA-B7D20B
Event Code: 0
Message:
Record Number: 4257
Source Name: gusvc
Time Written: 20090514093213.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 4256
Source Name: SecurityCenter
Time Written: 20090514093147.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 0
Message:
Record Number: 4255
Source Name: gusvc
Time Written: 20090514093112.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 701
Message: msnmsgr (3580) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\patrick\Local Settings\Application Data\Microsoft\Messenger\malibarbereau@msn.com\SharingMetadata\Working\database_EA9C_FF47_9CFF_CB7\dfsr.db'.

Record Number: 4254
Source Name: ESENT
Time Written: 20090514010000.000000+120
Event Type: Informations
User:

Computer Name: BARBEREA-B7D20B
Event Code: 700
Message: msnmsgr (3580) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\patrick\Local Settings\Application Data\Microsoft\Messenger\malibarbereau@msn.com\SharingMetadata\Working\database_EA9C_FF47_9CFF_CB7\dfsr.db'.

Record Number: 4253
Source Name: ESENT
Time Written: 20090514010000.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\Fichiers communs\DivX Shared\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------
A++++++++++++

Salut toadadvance


Rien de suspect, télécharge GenProc (de narco4 et jean-chretien1) sur ton bureau.

http://www.genproc.com/GenProc.exe

- Double clique sur GenProc.exe télécharger

- Poste le contenu du rapport qui s'ouvre.

Tutoriel : http://www.genproc.com/tutorial_genproc/tutorial_genproc.html


@++

Salut
Voici le rapport Genproc.J'ai fait nod32qui m'a détecté et supprimé 2 infections
Rapport GenProc 2.591 [1] - 18/06/2009 à 13:56:52
@ Windows XP Service Pack 3 - Mode normal
@ Internet Explorer (7.0.5730.11) [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 http://www.eset-nod32.fr/scanner.html (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 13:57:57 ~~
ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
esets_scanner_update returned -1 esets_gle=53251
# version=6
# IEXPLORE.EXE=7.00.6000.16850 (vista_gdr.090423-0018)
# OnlineScanner.ocx=1.0.0.5863
# api_version=3.0.2
# EOSSerial=6007209e9b791440b7eb911e37494c53
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2009-06-18 05:27:14
# local_time=2009-06-18 07:27:14 (+0100, Paris, Madrid)
# country="France"
# lang=1036
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=1281 37 100 100 75361208125000
# scanned=39504
# found=2
# cleaned=2
# scan_time=2168
C:\Documents and Settings\patrick\Mes documents\Pat et Mali\testdisk-6.10-WIP\win\Documents and Settings\barbereau patrick\Bureau\testdisk-6.9.win\testdisk-6.9\win\plugins\recup_dir.3\f999679.exe une variante de Win32/Spy.Agent.PZ cheval de troie (nettoyé par suppression - mis en quarantaine) 00000000000000000000000000000000
C:\Documents and Settings\patrick\Mes documents\Pat et Mali\testdisk-6.10-WIP\win\Documents and Settings\barbereau patrick\Bureau\testdisk-6.9.win\testdisk-6.9\win\recup_dir.3\f999679.exe une variante de Win32/Spy.Agent.PZ cheval de troie (nettoyé par suppression - mis en quarantaine) 00000000000000000000000000000000
A+++++++++++++

Salut toadadvance


Faire un ménage des fichiers inutiles et de la base de registre :
http://www.malekal.com/tutorial_CCleaner.html

Dis moi si encore un souci?


@++

Salut
Voilà qui est fait
Mais ça rame toujours
A+++++

Salut toadadvance


Télécharge GenProc (de narco4 et jean-chretien1) sur ton bureau.

http://www.genproc.com/GenProc.exe

- Double clique sur GenProc.exe télécharger

- Poste le contenu du rapport qui s'ouvre.

Tutoriel : http://www.genproc.com/tutorial_genproc/tutorial_genproc.html


@++

Salut



GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :



Poste un rapport NanoScan


----------------------------------------------------------------------
Sites officiels GenProc : alt-shift-return.org et GenProc.com
----------------------------------------------------------------------
;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-06-19 16:31:36
PROTECTIONS: 1
MALWARE: 8
SUSPECTS: 4
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Kaspersky Internet Security 8.0.0.506 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@247realmedia[2].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@xiti[2].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@ad.yieldmanager[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@bs.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@weborama[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\patrick\Cookies\patrick@smartadserver[2].txt
02652859 Trj/MultiDropper.RJJ Virus/Trojan No 1 Yes No C:\Documents and Settings\patrick\Mes documents\wrar371_aff200066032-002.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location 
;===================================================================================================================================================================================
No C:\Documents and Settings\patrick\Application Data\Real\RealPlayer\setup\AU_setup6.exe 
No C:\Documents and Settings\patrick\Mes documents\Pat et Mali\testdisk-6.10-WIP\win\Documents and Settings\barbereau patrick\Bureau\jeux\Little Shop Of Treasures 2\LittleShopOfTreasures2.exe
No C:\GenProc\outil\GetVersion.exe 
No C:\Program Files\Games\The Hidden Prophecies of Nostradamus\Nostradamus.exe 
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description 
;===================================================================================================================================================================================
;===================================================================================================================================================================================
a+++++++++

Salut toadadvance


Fais moi un scan avec ton Antivirus pour vérification, mettre à jour avant.


@++

Salut
Date : Aujourd'hui (événements : 22)
Mise à jour (événements : 4)
20/06/2009 13:07:11 Fin de la tâche Kaspersky Internet Security Mise à jour
20/06/2009 13:06:40 Lancement de la tâche Kaspersky Internet Security Mise à jour
20/06/2009 13:06:29 Fin de la tâche Kaspersky Internet Security Mise à jour
20/06/2009 13:04:01 Lancement de la tâche Kaspersky Internet Security Mise à jour
Analyse des Objets (événements : 8)
20/06/2009 13:50:46 Tâche arrêtée Kaspersky Internet Security Analyse des Objets
20/06/2009 13:50:57 Lancement de la tâche Kaspersky Internet Security Analyse des Objets
20/06/2009 13:50:46 Lancement de la tâche Kaspersky Internet Security Analyse des Objets
20/06/2009 13:33:59 Lancement de la tâche Kaspersky Internet Security Recherche d'outils de dissimulation d'activité
20/06/2009 13:07:02 Lancement de la tâche Kaspersky Internet Security Analyse Complète
20/06/2009 13:53:43 Fin de la tâche Kaspersky Internet Security Analyse des Objets
20/06/2009 13:49:17 Fin de la tâche Kaspersky Internet Security Analyse Complète
20/06/2009 13:40:53 Fin de la tâche Kaspersky Internet Security Recherche d'outils de dissimulation d'activité
Antivirus IM ("Chat") (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Antivirus IM ("Chat")
Pare-feu (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Pare-feu
Défense Proactive (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Défense Proactive
Contrôle des Applications (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Contrôle des Applications
Anti-Spam (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Anti-Spam
Prévention des intrusions (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Prévention des intrusions
Antivirus Internet (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Antivirus Internet
Antivirus Courrier (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Antivirus Courrier
Antivirus Fichiers (événements : 1)
20/06/2009 13:03:50 Lancement de la tâche Kaspersky Internet Security Antivirus Fichiers
Protection (événements : 1)
20/06/2009 13:03:49 Les bases sont fortement dépassées Kaspersky Internet Security
a++++++++

Salut toadadvance


Important Désactive ton Antivirus et antispyware avant le scan avec DiagHelp :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


Télécharge DiagHelp sur le bureau ici :

http://www.malekal.com/download/DiagHelp.zip

Lire et suivre attentivement le tutoriel ici :

http://www.malekal.com/DiagHelp/DiagHelp.php


- Choisi l'option 1 (Lister Fichiers), enregistre-le sur le bureau.

---

Utilise ensuite cjoint.com http://cjoint.com/ pour poster en lien ton rapport

- Clique sur Parcourir pour aller chercher le rapport
- Clique sur Ouvrir ensuite sur Créer le lien Cjoint

- Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.


@++

Salut
Je n'arrive pas à envoyer le rapport diaghelp
Pour le lien ça marche pas non plus
je rentre le fichier puis je clique sur crée le lien et là ca cherche mais n'aboutit pas
Le rapport fait 17.2 mo
Que faire
A++++

Salut toadadvance


Utilise sendspace :
http://www.sendspace.com/


@++

Salut
C'est payant
A+++

Salut toadadvance


Non cela n'est pas payant!!

Où vois-tu cela?


@++

Salut
je ne dois pas comprendre coment ça marche
A+++++

Salut toadadvance


Rendu sur la page, tu cliques sur Parcourir pour aller chercher le rapport qui est ici : C:\resultat.txt après tu coche la case dans le bas et clique sur Upload File, quand cela est fini tu me poste le lien qu'il va te donner.


@++

Salut
http://cjoint.com/?gviMSvoU74
A++++++

Salut toadadvance


Le rapport n'est pas complet, poste le de nouveau


@++

Salut
Alors là tout bugue
Je fais une analyse anti-virus
Les programmes ne repondent plus,tout disparait de mon bureau depuis que j'ai lancé malwarebytes
Windows a bloqué 2 fois mon pc
Que se passet-il?
A+++++++++

Salut toadadvance


Télécharge combofix.exe (de sUBs) sur le bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


==> Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini. <==

Double clique sur combofix.exe, clique sur OUI et valide par Entrée

Il te sera demandé d’installer la console si elle n’est pas installer, clique sur NON

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\ Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++

Salut
Encore cette saleté d'infection dans la restauration système
Ca va mieux mais je vais tout de meme faire ce que tu me demandes
A tout de suite

Me revoilà
ComboFix 09-06-20.04 - patrick 22/06/2008 18:35.9 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1014.638 [GMT 2:00]
Lancé depuis: c:\documents and settings\patrick\Bureau\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Service_lanmandrv


((((((((((((((((((((((((((((( Fichiers créés du 2008-05-22 au 2008-06-22 ))))))))))))))))))))))))))))))))))))
.

2009-06-20 15:22 . 2009-06-20 15:22 932368 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
2009-06-20 15:22 . 2009-06-20 15:22 678416 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
2009-06-20 15:22 . 2009-06-20 15:22 604688 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
2009-06-20 15:22 . 2009-06-20 15:22 522768 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
2009-06-20 15:22 . 2009-06-20 15:22 1096208 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
2009-06-20 11:03 . 2009-06-20 11:03 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-06-19 12:54 . 2008-06-19 15:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys
2009-06-19 12:53 . 2009-06-19 12:53 -------- d-----w- c:\program files\Panda Security
2009-06-18 12:01 . 2009-06-18 12:01 -------- d-----w- c:\program files\ESET
2009-06-09 19:38 . 2009-06-09 19:38 -------- d-----w- c:\documents and settings\patrick\Application Data\SerpentOfIsis
2009-06-09 16:43 . 2009-06-09 16:43 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\Nick Chase A Detective Story
2009-06-05 09:58 . 2009-06-05 09:58 64088 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\French\setup.exe
2009-05-28 13:10 . 2009-05-28 13:10 -------- d-----w- c:\documents and settings\All Users\Application Data\blg
2009-05-25 03:21 . 2009-05-25 03:21 219664 ------w- c:\windows\system32\klogon.dll
2009-05-25 03:18 . 2009-05-25 03:18 27507 ----a-w- c:\windows\system32\drivers\klopp.dat
2009-05-24 13:30 . 2009-05-24 13:30 128016 ----a-w- c:\windows\system32\drivers\kl1.sys
2009-05-19 11:04 . 2009-05-19 11:04 -------- d-----w- c:\documents and settings\patrick\Application Data\Zylom
2009-05-19 11:04 . 2009-05-19 11:04 57344 ----a-w- c:\windows\system32\Big Kahuna Reef.scr
2009-05-19 11:04 . 2006-09-26 10:03 98304 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
2009-05-19 11:04 . 2009-05-19 11:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-05-19 11:04 . 2009-05-19 11:04 161976 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll
2009-05-16 18:59 . 2009-05-16 18:59 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2009-05-16 12:31 . 2009-05-16 12:31 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-05-16 12:29 . 2009-06-13 20:49 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-05-07 15:33 . 2009-05-07 15:33 348672 -c----w- c:\windows\system32\dllcache\localspl.dll
2009-05-01 21:02 . 2009-05-01 23:02 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2009-05-01 23:02 823296 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-05-01 21:02 . 2009-05-01 23:02 823296 ----a-w- c:\windows\system32\divx_xx07.dll
2009-05-01 21:02 . 2009-05-01 23:02 815104 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-05-01 21:02 . 2009-05-01 23:02 811008 ----a-w- c:\windows\system32\divx_xx16.dll
2009-05-01 21:02 . 2009-05-01 23:02 802816 ----a-w- c:\windows\system32\divx_xx11.dll
2009-05-01 21:02 . 2009-05-01 23:02 685056 ----a-w- c:\windows\system32\DivX.dll
2009-05-01 18:30 . 2009-05-01 18:30 3366912 ----a-w- c:\windows\system32\GPhotos.scr
2009-04-19 21:01 . 2009-04-19 21:01 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-04-18 16:00 . 2009-04-18 16:00 -------- d-----w- c:\documents and settings\patrick\Application Data\Total Eclipse
2009-04-18 07:04 . 2009-04-18 17:00 -------- d-----w- c:\program files\The Clockwork Man
2009-04-15 14:53 . 2009-04-15 14:53 585216 -c----w- c:\windows\system32\dllcache\rpcrt4.dll
2009-04-15 06:52 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-04-15 06:52 . 2009-03-06 14:20 286720 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-04-15 06:52 . 2009-02-09 11:23 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-04-15 06:52 . 2009-02-09 10:53 735744 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-04-15 06:52 . 2009-02-09 10:53 685568 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-04-15 06:52 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-04-15 06:52 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-15 06:52 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-04-15 06:52 . 2009-02-09 10:53 739840 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-04-15 06:51 . 2008-12-16 12:31 354304 -c----w- c:\windows\system32\dllcache\winhttp.dll
2009-04-15 06:51 . 2008-04-21 21:15 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe
2009-04-12 09:58 . 2009-04-12 10:01 -------- d-----w- c:\program files\Téléchargeur de Sherlock Holmes Le Secret de la Boucle d'argent
2009-04-07 18:09 . 2008-04-14 02:33 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2009-04-07 18:09 . 2008-04-14 02:33 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-04-07 18:09 . 2008-04-14 02:05 14720 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2009-04-07 18:09 . 2008-04-14 02:05 14720 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-04-05 20:27 . 2009-05-13 20:41 -------- d-----w- c:\documents and settings\patrick\Application Data\RobinsonCrusoe
2009-04-04 13:06 . 2009-05-17 21:45 -------- d-----w- c:\program files\BFG
2009-04-04 13:06 . 2009-04-04 13:06 -------- d-----w- c:\program files\Hidden Expedition Titanic
2009-04-04 11:14 . 2009-04-04 11:14 -------- d-----w- c:\documents and settings\patrick\Application Data\PoBros
2009-04-02 17:17 . 2009-04-02 17:17 -------- d-----w- c:\program files\Fichiers communs\xing shared
2009-04-02 17:08 . 2009-04-02 17:08 390664 ----a-w- c:\documents and settings\patrick\Application Data\Real\RealPlayer\setup\AU_setup6.exe
2009-03-30 21:16 . 2009-04-05 20:23 -------- d-----w- c:\documents and settings\patrick\Application Data\RobinsonCrusoeBFGFR
2009-03-27 19:33 . 2009-04-04 11:13 -------- d-----w- c:\program files\Insider Tales - The Stolen Venus
2009-03-21 17:24 . 2009-03-22 09:02 -------- d-----w- c:\documents and settings\patrick\Tracing
2009-03-21 17:21 . 2009-03-21 17:21 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-03-21 17:11 . 2009-03-21 17:11 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-03-21 14:07 . 2009-03-21 14:07 1054720 -c----w- c:\windows\system32\dllcache\kernel32.dll
2009-03-21 08:17 . 2009-03-21 13:16 -------- d-----w- c:\program files\Angela Young's Dream Adventure
2009-03-19 08:25 . 2009-03-19 08:25 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_12\lzma.dll
2009-03-16 22:44 . 2009-03-16 22:44 -------- d-----w- c:\documents and settings\patrick\Application Data\blg
2009-03-16 21:58 . 2009-05-21 15:00 -------- d-----w- c:\program files\Lost Realms - Legacy of the Sun Princess
2009-03-14 18:16 . 2009-03-14 18:16 -------- d-----w- c:\documents and settings\patrick\Application Data\Anabel
2009-03-13 22:46 . 2009-03-14 12:01 -------- d-----w- c:\program files\Women's Murder Club - A Darker Shade of Grey
2009-03-06 12:20 . 2009-03-06 12:20 -------- d-----w- c:\program files\Escape Rosecliff Island
2009-03-04 12:41 . 2009-03-04 12:41 -------- d-----w- c:\windows\The Secret of Margrave Manor
2009-03-04 12:41 . 2009-03-04 12:55 -------- d-----w- c:\program files\The Secret of Margrave Manor
2009-03-01 12:11 . 2009-03-01 12:21 -------- d-----w- c:\documents and settings\patrick\Application Data\Righteous Kill
2009-02-26 22:18 . 2009-02-26 22:18 -------- d-----w- c:\documents and settings\patrick\Application Data\cerasus
2009-02-24 06:45 . 2009-02-25 18:01 -------- d-----w- c:\program files\Mystery Stories - Berlin Nights
2009-02-22 17:58 . 2009-02-22 17:58 -------- d-----w- c:\program files\JRE
2009-02-21 20:23 . 2009-05-16 12:30 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2009-02-21 20:23 . 2009-02-21 20:23 -------- d-----w- c:\windows\system32\IOSUBSYS
2009-02-20 21:44 . 2009-02-20 21:44 -------- d-----w- c:\documents and settings\All Users\Application Data\PlayPond
2009-02-20 20:46 . 2009-03-10 15:51 -------- d-----w- c:\program files\Mystery Legends - Sleepy Hollow
2009-02-20 17:10 . 2009-04-29 04:45 78336 -c----w- c:\windows\system32\dllcache\ieencode.dll
2009-02-20 08:57 . 2009-04-24 20:48 -------- d-----w- c:\program files\Oberon Media
2009-02-20 08:57 . 2009-05-29 21:54 -------- d-----w- c:\program files\MSN Games
2009-02-17 01:29 . 2009-02-17 01:30 -------- d-----w- c:\program files\Elizabeth Find, MD - Diagnosis Mystery
2009-02-14 11:40 . 2009-02-14 11:40 -------- d-----w- c:\program files\Mortimer Beckett and the Secrets of Spooky Manor
2009-02-13 11:44 . 2009-02-13 11:44 -------- d-----w- c:\windows\Sun
2009-02-07 23:09 . 2009-02-07 23:09 -------- d-----w- c:\documents and settings\patrick\Application Data\SprillBermudeEng
2009-02-07 23:03 . 2009-02-07 23:48 -------- d-----w- c:\program files\SPRILL
2009-02-07 08:16 . 2009-02-07 08:16 -------- d-----w- c:\documents and settings\All Users\Application Data\WildWestQuest2
2009-02-05 23:35 . 2009-04-19 21:02 -------- d-----w- c:\program files\Java
2009-02-05 23:34 . 2009-02-05 23:34 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_11\lzma.dll
2009-02-05 12:09 . 2009-03-13 09:10 -------- d-----w- c:\program files\GooglePlusVideos
2009-02-05 11:50 . 2009-02-05 16:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Desktopicon
2009-02-04 23:31 . 2009-02-04 23:31 -------- d-----w- c:\documents and settings\patrick\Application Data\Reflexivev1001
2009-02-03 20:05 . 2009-02-05 16:11 -------- d-----w- c:\program files\Mystery PI - The New York Fortune
2009-02-03 19:58 . 2009-02-03 19:58 56832 -c----w- c:\windows\system32\dllcache\secur32.dll
2009-02-01 00:22 . 2009-02-01 00:22 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\AlwaysNeat
2009-01-31 17:36 . 2009-01-31 17:36 -------- d-----w- c:\documents and settings\All Users\Application Data\AdventureChronicles1
2009-01-31 17:36 . 2009-05-23 18:00 -------- d-----w- c:\program files\Adventure Chronicles
2009-01-31 17:28 . 2009-01-31 17:28 -------- d-----w- c:\program files\Liong - The Lost Amulets
2009-01-31 00:36 . 2009-02-23 14:30 -------- d-----w- c:\program files\Mortimer Beckett and the Time Paradox
2009-01-29 21:44 . 2009-06-19 06:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-29 21:44 . 2009-03-28 12:42 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-01-29 13:07 . 2009-01-29 13:07 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\DataKeeper
2009-01-28 22:09 . 2009-01-28 22:09 -------- d-----w- c:\documents and settings\All Users\Application Data\AlawarWrapper
2009-01-28 17:08 . 2009-01-28 17:08 -------- d-----w- c:\documents and settings\patrick\Application Data\Friday's games
2009-01-23 18:05 . 2009-01-23 18:05 -------- d-----w- c:\program files\LeeGTs Games
2009-01-22 11:44 . 2009-06-19 13:21 1 ----a-w- c:\documents and settings\patrick\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-01-22 11:43 . 2009-01-22 11:43 -------- d-----w- c:\documents and settings\patrick\Application Data\OpenOffice.org
2009-01-22 11:26 . 2009-02-22 17:58 -------- d-----w- c:\program files\OpenOffice.org 3
2009-01-21 20:24 . 2003-03-09 13:40 103608 ----a-w- c:\windows\bass.dll
2009-01-14 11:40 . 2009-03-18 16:43 -------- d-----w- c:\program files\Games
2009-01-12 22:59 . 2009-01-12 23:00 -------- d-----w- c:\program files\Ancient Secrets
2009-01-12 21:59 . 2009-01-12 21:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Cat's Eye Games
2009-01-12 21:57 . 2009-01-12 21:57 -------- d-----w- c:\program files\The Hidden Prophecies of Nostradamus
2009-01-11 15:57 . 2009-01-11 15:57 127944 ----a-w- c:\windows\binkw32.zip
2009-01-11 14:08 . 2007-05-18 12:11 3495784 ----a-w- c:\windows\d3dx9_33.dll
2009-01-11 14:08 . 2009-01-11 14:08 1596852 ----a-w- c:\windows\d3dx9_33.zip
2009-01-11 13:57 . 2009-01-11 13:57 -------- d-----w- c:\documents and settings\patrick\Application Data\Uniblue
2009-01-11 11:38 . 2009-01-11 11:38 -------- d-----w- c:\windows\DirectX
2009-01-11 11:33 . 2009-01-11 11:33 -------- d-----w- c:\windows\Logs
2009-01-11 11:33 . 2009-01-11 13:33 302928 ----a-w- c:\windows\directx_directx_9.25.1476_nov.2008_francais_10906.exe
2009-01-10 09:16 . 2009-01-10 09:16 -------- d-----w- c:\program files\Masters of Mystery - Crime of Fashion

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-20 20:56 . 2008-04-05 18:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-06-20 11:02 . 2008-12-10 16:20 5544 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-06-20 11:02 . 2008-12-10 16:20 33988 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-06-09 12:10 . 2008-04-08 15:29 -------- d-----w- c:\documents and settings\patrick\Application Data\PlayFirst
2009-05-16 12:29 . 2008-04-05 18:17 -------- d-----w- c:\program files\Google
2009-05-13 15:46 . 2008-04-30 15:06 31760 ----a-w- c:\windows\system32\drivers\klim5.sys
2009-05-07 15:33 . 2006-03-02 12:00 348672 ------w- c:\windows\system32\localspl.dll
2009-04-29 04:45 . 2006-03-02 12:00 827392 ------w- c:\windows\system32\wininet.dll
2009-04-29 04:45 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 21:02 . 2008-04-24 12:19 62436 ----a-w- c:\windows\system32\perfc040.dat
2009-04-19 21:02 . 2008-04-24 12:19 450440 ----a-w- c:\windows\system32\perfh040.dat
2009-04-19 21:02 . 2006-03-02 12:00 89856 ----a-w- c:\windows\system32\perfc00C.dat
2009-04-19 21:02 . 2006-03-02 12:00 528760 ----a-w- c:\windows\system32\perfh00C.dat
2009-04-19 19:50 . 2006-03-02 12:00 1847296 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:53 . 2006-03-02 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-02 17:17 . 2008-04-18 15:40 -------- d-----w- c:\program files\Fichiers communs\Real
2009-04-02 17:12 . 2008-04-09 23:02 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-04-02 17:12 . 2008-04-09 23:02 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-03-25 12:25 . 2008-04-05 19:32 -------- d-----w- c:\program files\Windows Live
2009-03-22 10:02 . 2008-04-05 19:32 -------- d-----w- c:\documents and settings\All Users\Application Data\WLInstaller
2009-03-21 09:04 . 2008-04-08 13:35 -------- d-----w- c:\program files\eMule
2009-03-17 16:15 . 2008-05-09 22:14 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-03-14 11:00 . 2008-04-05 20:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Flood Light Games
2009-03-06 14:20 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\pdh.dll
2009-03-02 07:52 . 2008-04-05 16:53 25176 ----a-w- c:\documents and settings\patrick\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-02-09 11:23 . 2004-08-19 16:04 2025984 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2006-03-02 12:00 2147328 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2006-03-02 12:00 111104 ----a-w- c:\windows\system32\services.exe
2009-02-09 10:53 . 2006-03-02 12:00 735744 ----a-w- c:\windows\system32\lsasrv.dll
2009-02-09 10:53 . 2008-04-04 08:22 453120 ----a-w- c:\windows\system32\wbem\wmiprvsd.dll
2009-02-09 10:53 . 2008-04-04 08:22 473600 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-02-09 10:53 . 2006-03-02 12:00 739840 ----a-w- c:\windows\system32\ntdll.dll
2009-02-09 10:53 . 2006-03-02 12:00 685568 ----a-w- c:\windows\system32\advapi32.dll
2009-02-09 10:53 . 2006-03-02 12:00 401408 ----a-w- c:\windows\system32\rpcss.dll
2009-02-06 10:39 . 2006-03-02 12:00 35328 ----a-w- c:\windows\system32\sc.exe
2009-02-06 10:10 . 2008-04-04 08:22 227840 ----a-w- c:\windows\system32\wbem\wmiprvse.exe
2009-02-03 19:58 . 2006-03-02 12:00 56832 ----a-w- c:\windows\system32\secur32.dll
2009-02-02 18:09 . 2009-02-02 18:09 0 ----a-w- c:\windows\system32\REN20F.tmp
2009-02-02 18:09 . 2009-02-02 18:09 0 ----a-w- c:\windows\system32\REN20E.tmp
2009-02-02 18:09 . 2009-02-02 18:09 0 ----a-w- c:\windows\system32\REN20D.tmp
2008-12-31 23:58 . 2008-05-17 12:23 -------- d-----w- c:\program files\Orange
2008-12-20 22:14 . 2006-03-02 12:00 1294336 ----a-w- c:\windows\system32\quartz.dll
2008-12-16 12:31 . 2006-03-02 12:00 354304 ----a-w- c:\windows\system32\winhttp.dll
2008-12-15 18:41 . 2008-01-29 16:29 33808 ----a-w- c:\windows\system32\drivers\klbg.sys
2008-12-11 10:57 . 2006-03-02 12:00 333952 ----a-w- c:\windows\system32\drivers\srv.sys
2008-12-05 06:57 . 2006-03-02 12:00 144896 ----a-w- c:\windows\system32\schannel.dll
2008-12-02 17:09 . 2008-12-02 17:09 0 ----a-w- c:\documents and settings\All Users\Application Data\PKP_DLec.DAT
2008-11-13 11:19 . 2008-04-24 15:25 171008 ----a-w- c:\windows\binkw32.dll
2008-10-24 11:21 . 2006-03-02 12:00 455296 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:36 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\gdi32.dll
2008-10-16 13:13 . 2008-04-04 08:23 202776 ----a-w- c:\windows\system32\wuweb.dll
2008-10-16 13:13 . 2008-04-04 08:23 1809944 ----a-w- c:\windows\system32\wuaueng.dll
2008-10-16 13:12 . 2008-04-04 08:23 323608 ----a-w- c:\windows\system32\wucltui.dll
2008-10-16 13:12 . 2008-04-04 08:23 561688 ----a-w- c:\windows\system32\wuapi.dll
2008-10-16 13:09 . 2008-04-04 08:23 51224 ----a-w- c:\windows\system32\wuauclt.exe
2008-10-16 13:09 . 2007-07-30 17:19 43544 ----a-w- c:\windows\system32\wups2.dll
2008-10-16 13:09 . 2006-03-02 12:00 92696 ----a-w- c:\windows\system32\cdm.dll
2008-10-16 13:08 . 2008-04-04 08:23 34328 ----a-w- c:\windows\system32\wups.dll
2008-10-16 13:06 . 2008-04-06 14:15 268648 ----a-w- c:\windows\system32\mucltui.dll
2008-10-16 13:06 . 2008-04-06 14:15 208744 ----a-w- c:\windows\system32\muweb.dll
2008-10-03 10:03 . 2006-03-02 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll
2008-09-10 01:15 . 2007-05-15 13:43 1307648 ----a-w- c:\windows\system32\msxml6.dll
2008-09-05 11:24 . 2008-04-06 18:30 15748 ---ha-w- c:\windows\system32\mlfcache.dat
2008-09-04 17:16 . 2006-03-02 12:00 1106944 ----a-w- c:\windows\system32\msxml3.dll
2008-08-14 10:04 . 2006-03-02 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2008-07-31 10:19 . 2008-04-18 15:40 -------- d-----w- c:\program files\Real
2008-07-26 18:01 . 2008-04-04 08:24 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2008-07-13 12:04 . 2008-05-15 16:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2008-07-09 07:40 . 2008-04-04 14:19 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2008-07-08 12:09 . 2008-04-05 17:55 -------- d-----w- c:\documents and settings\patrick\Application Data\MSNInstaller
2008-07-07 20:28 . 2006-03-02 12:00 253952 ----a-w- c:\windows\system32\es.dll
2008-07-06 12:06 . 2007-03-23 04:07 1676288 ----a-w- c:\windows\system32\xpssvcs.dll
2008-07-06 12:06 . 2007-03-23 04:07 575488 ----a-w- c:\windows\system32\xpsshhdr.dll
2008-07-06 12:06 . 2007-03-22 18:25 117760 ----a-w- c:\windows\system32\prntvpt.dll
2008-06-24 16:44 . 2006-03-02 12:00 74240 ----a-w- c:\windows\system32\mscms.dll
2008-06-24 16:12 . 2006-10-18 19:47 295936 ------w- c:\windows\system32\wmpeffects.dll
2008-06-22 16:39 . 2008-05-17 14:54 -------- d-----w- c:\program files\Wanadoo
2008-06-21 11:00 . 2008-04-27 18:19 -------- d-----w- c:\program files\Runtime Software
2008-06-20 17:47 . 2006-03-02 12:00 247808 ----a-w- c:\windows\system32\mswsock.dll
2008-06-20 11:51 . 2006-03-02 12:00 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys
2008-06-20 11:08 . 2006-03-02 12:00 225856 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2008-06-18 04:03 . 2006-03-02 12:00 938496 ----a-w- c:\windows\system32\WMNetmgr.dll
2008-06-18 00:09 . 2006-03-02 12:00 100864 ----a-w- c:\windows\system32\logagent.exe
2008-06-14 08:22 . 2008-04-04 14:19 -------- d--h--w- c:\program files\InstallShield Installation Information
2008-06-12 14:22 . 2008-04-04 08:22 956928 ----a-w- c:\windows\system32\msdtctm.dll
2008-06-12 14:22 . 2008-04-04 08:22 91648 ----a-w- c:\windows\system32\mtxoci.dll
2008-06-12 14:22 . 2008-04-04 08:22 428032 ----a-w- c:\windows\system32\msdtcprx.dll
2008-06-12 14:22 . 2008-04-04 08:22 161792 ----a-w- c:\windows\system32\msdtcuiu.dll
2008-06-12 14:22 . 2006-03-02 12:00 66560 ----a-w- c:\windows\system32\mtxclu.dll
2008-06-12 14:22 . 2008-04-04 08:22 58880 ----a-w- c:\windows\system32\msdtclog.dll
2008-06-06 20:28 . 2008-04-09 23:00 -------- d-----w- c:\program files\Fichiers communs\Nikon
2008-05-25 22:26 . 2008-04-04 14:34 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2008-05-23 21:35 . 2008-04-09 23:00 -------- d-----w- c:\program files\ArcSoft
2008-05-17 12:23 . 2008-05-17 12:23 -------- d-----w- c:\program files\Fichiers communs\France Telecom
2008-05-15 20:48 . 2008-04-05 17:48 -------- d-----w- c:\program files\Wanadoo Messager
2008-05-13 13:03 . 2008-05-13 13:03 -------- d-----w- c:\documents and settings\patrick\Application Data\Malwarebytes
2008-05-09 10:55 . 2006-03-02 12:00 90112 ----a-w- c:\windows\system32\wshext.dll
2008-05-09 10:55 . 2006-03-02 12:00 430080 ----a-w- c:\windows\system32\vbscript.dll
2008-05-09 10:55 . 2006-03-02 12:00 180224 ----a-w- c:\windows\system32\scrobj.dll
2008-05-09 10:55 . 2006-03-02 12:00 172032 ----a-w- c:\windows\system32\scrrun.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-05 68856]
"WOOKIT"="c:\program files\Wanadoo\Shell.exe" [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 155648]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-04-02 198160]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2009-04-26 63712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-05-25 303376]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NkbMonitor.exe.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Ralink Wireless Utility.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^patrick^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QUAD Scheduler
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QUAD Windows service
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2009

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4662:TCP"= 4662:TCP:emuleTCP
"4672:UDP"= 4672:UDP:emuleUDP

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 18:29 33808]
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [19/06/2009 14:54 28544]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 17:06 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 20:59 19472]
S2 gupdate1c9d622259bd3c;Service Google Update (gupdate1c9d622259bd3c);c:\program files\Google\Update\GoogleUpdate.exe [16/05/2009 14:29 133104]
S3 FXDrv32;FXDrv32;\??\d:\fxdrv32.sys --> d:\FXDrv32.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [17/09/2008 21:32 38160]
.
Contenu du dossier 'Tâches planifiées'

2008-06-22 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-05 18:22]

2008-06-22 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-16 12:29]
.
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
mStart Page = about:blank
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
IE: {{CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
TCP: {6CF9B62C-79B8-47FB-98DE-DE2C5B2F76E1} = 192.168.1.1
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game13.zylom.com/activex/zylomgamesplayer.cab
DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - hxxp://asp.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-22 18:39
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1004336348-57989841-682003330-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\swearware\backup\winsock2]
@DACL=(02 0000)
@SACL=
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3744)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\FTRTSVC.exe
c:\windows\system32\HPZipm12.exe
c:\progra~1\Wanadoo\Toaster.exe
c:\progra~1\Wanadoo\Inactivity.exe
c:\progra~1\Wanadoo\PollingModule.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2008-06-22 18:42 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-06-22 16:42

Avant-CF: 115 503 599 616 octets libres
Après-CF: 115 559 792 640 octets libres

355 --- E O F --- 2009-06-10 06:53
A+++++++++++++

Salut toadadvance


- Clique sur le menu démarrer/Exécuter, tape notepad à l’invite de commande et OK.

- Copie/colle ce qui est en citation ci-dessous dans le Bloc-Notes :



- Enregistre ce fichier sur le bureau (Impératif)

-Nom du fichier : CFScript.txt
-Type du fichier : tous les fichiers

- Clique sur Enregistrer et quitte le Bloc Notes

Important Désactive ton Antivirus et antispyware avant de faire le glisser/déposer

- Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe sur le bureau, comme sur cette capture (l’icône est un lion) :



* Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
* Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
* Si le fichier ne s'ouvre pas, il se trouve ici > C:\ ComboFix.txt


@++

Salut
ComboFix 09-06-20.04 - patrick 22/06/2008 23:19.10 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1014.530 [GMT 2:00]
Lancé depuis: c:\documents and settings\patrick\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\patrick\Bureau\CFScript.txt
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

FILE ::
"c:\windows\system32\perfc00C.dat"
"c:\windows\system32\perfc040.dat"
"c:\windows\system32\perfh00C.dat"
"c:\windows\system32\perfh040.dat"
"c:\windows\system32\REN20D.tmp"
"c:\windows\system32\REN20E.tmp"
"c:\windows\system32\REN20F.tmp"
"d:\fxdrv32.sys"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\perfc00C.dat
c:\windows\system32\perfc040.dat
c:\windows\system32\perfh00C.dat
c:\windows\system32\perfh040.dat
c:\windows\system32\REN20D.tmp
c:\windows\system32\REN20E.tmp
c:\windows\system32\REN20F.tmp

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_FXDRV32
-------\Service_FXDrv32


((((((((((((((((((((((((((((( Fichiers créés du 2008-05-22 au 2008-06-22 ))))))))))))))))))))))))))))))))))))
.

2009-06-20 15:22 . 2009-06-20 15:22 932368 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
2009-06-20 15:22 . 2009-06-20 15:22 678416 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
2009-06-20 15:22 . 2009-06-20 15:22 604688 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
2009-06-20 15:22 . 2009-06-20 15:22 522768 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
2009-06-20 15:22 . 2009-06-20 15:22 1096208 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
2009-06-20 11:03 . 2009-06-20 11:03 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-06-19 12:54 . 2008-06-19 15:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys
2009-06-19 12:53 . 2009-06-19 12:53 -------- d-----w- c:\program files\Panda Security
2009-06-18 12:01 . 2009-06-18 12:01 -------- d-----w- c:\program files\ESET
2009-06-09 19:38 . 2009-06-09 19:38 -------- d-----w- c:\documents and settings\patrick\Application Data\SerpentOfIsis
2009-06-09 16:43 . 2009-06-09 16:43 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\Nick Chase A Detective Story
2009-06-05 09:58 . 2009-06-05 09:58 64088 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\French\setup.exe
2009-05-28 13:10 . 2009-05-28 13:10 -------- d-----w- c:\documents and settings\All Users\Application Data\blg
2009-05-25 03:21 . 2009-05-25 03:21 219664 ------w- c:\windows\system32\klogon.dll
2009-05-25 03:18 . 2009-05-25 03:18 27507 ----a-w- c:\windows\system32\drivers\klopp.dat
2009-05-24 13:30 . 2009-05-24 13:30 128016 ----a-w- c:\windows\system32\drivers\kl1.sys
2009-05-19 11:04 . 2009-05-19 11:04 -------- d-----w- c:\documents and settings\patrick\Application Data\Zylom
2009-05-19 11:04 . 2009-05-19 11:04 57344 ----a-w- c:\windows\system32\Big Kahuna Reef.scr
2009-05-19 11:04 . 2006-09-26 10:03 98304 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
2009-05-19 11:04 . 2009-05-19 11:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-05-19 11:04 . 2009-05-19 11:04 161976 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll
2009-05-16 18:59 . 2009-05-16 18:59 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2009-05-16 12:31 . 2009-05-16 12:31 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-05-16 12:29 . 2009-06-13 20:49 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-05-07 15:33 . 2009-05-07 15:33 348672 -c----w- c:\windows\system32\dllcache\localspl.dll
2009-05-01 21:02 . 2009-05-01 23:02 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2009-05-01 23:02 823296 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-05-01 21:02 . 2009-05-01 23:02 823296 ----a-w- c:\windows\system32\divx_xx07.dll
2009-05-01 21:02 . 2009-05-01 23:02 815104 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-05-01 21:02 . 2009-05-01 23:02 811008 ----a-w- c:\windows\system32\divx_xx16.dll
2009-05-01 21:02 . 2009-05-01 23:02 802816 ----a-w- c:\windows\system32\divx_xx11.dll
2009-05-01 21:02 . 2009-05-01 23:02 685056 ----a-w- c:\windows\system32\DivX.dll
2009-05-01 18:30 . 2009-05-01 18:30 3366912 ----a-w- c:\windows\system32\GPhotos.scr
2009-04-19 21:01 . 2009-04-19 21:01 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-04-18 16:00 . 2009-04-18 16:00 -------- d-----w- c:\documents and settings\patrick\Application Data\Total Eclipse
2009-04-18 07:04 . 2009-04-18 17:00 -------- d-----w- c:\program files\The Clockwork Man
2009-04-15 14:53 . 2009-04-15 14:53 585216 -c----w- c:\windows\system32\dllcache\rpcrt4.dll
2009-04-15 06:52 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-04-15 06:52 . 2009-03-06 14:20 286720 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-04-15 06:52 . 2009-02-09 11:23 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-04-15 06:52 . 2009-02-09 10:53 735744 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-04-15 06:52 . 2009-02-09 10:53 685568 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-04-15 06:52 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-04-15 06:52 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-15 06:52 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-04-15 06:52 . 2009-02-09 10:53 739840 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-04-15 06:51 . 2008-12-16 12:31 354304 -c----w- c:\windows\system32\dllcache\winhttp.dll
2009-04-15 06:51 . 2008-04-21 21:15 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe
2009-04-12 09:58 . 2009-04-12 10:01 -------- d-----w- c:\program files\Téléchargeur de Sherlock Holmes Le Secret de la Boucle d'argent
2009-04-07 18:09 . 2008-04-14 02:33 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2009-04-07 18:09 . 2008-04-14 02:33 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-04-07 18:09 . 2008-04-14 02:05 14720 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2009-04-07 18:09 . 2008-04-14 02:05 14720 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-04-05 20:27 . 2009-05-13 20:41 -------- d-----w- c:\documents and settings\patrick\Application Data\RobinsonCrusoe
2009-04-04 13:06 . 2009-05-17 21:45 -------- d-----w- c:\program files\BFG
2009-04-04 13:06 . 2009-04-04 13:06 -------- d-----w- c:\program files\Hidden Expedition Titanic
2009-04-04 11:14 . 2009-04-04 11:14 -------- d-----w- c:\documents and settings\patrick\Application Data\PoBros
2009-04-02 17:17 . 2009-04-02 17:17 -------- d-----w- c:\program files\Fichiers communs\xing shared
2009-04-02 17:08 . 2009-04-02 17:08 390664 ----a-w- c:\documents and settings\patrick\Application Data\Real\RealPlayer\setup\AU_setup6.exe
2009-03-30 21:16 . 2009-04-05 20:23 -------- d-----w- c:\documents and settings\patrick\Application Data\RobinsonCrusoeBFGFR
2009-03-27 19:33 . 2009-04-04 11:13 -------- d-----w- c:\program files\Insider Tales - The Stolen Venus
2009-03-21 17:24 . 2009-03-22 09:02 -------- d-----w- c:\documents and settings\patrick\Tracing
2009-03-21 17:21 . 2009-03-21 17:21 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-03-21 17:11 . 2009-03-21 17:11 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-03-21 14:07 . 2009-03-21 14:07 1054720 -c----w- c:\windows\system32\dllcache\kernel32.dll
2009-03-21 08:17 . 2009-03-21 13:16 -------- d-----w- c:\program files\Angela Young's Dream Adventure
2009-03-19 08:25 . 2009-03-19 08:25 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_12\lzma.dll
2009-03-16 22:44 . 2009-03-16 22:44 -------- d-----w- c:\documents and settings\patrick\Application Data\blg
2009-03-16 21:58 . 2009-05-21 15:00 -------- d-----w- c:\program files\Lost Realms - Legacy of the Sun Princess
2009-03-14 18:16 . 2009-03-14 18:16 -------- d-----w- c:\documents and settings\patrick\Application Data\Anabel
2009-03-13 22:46 . 2009-03-14 12:01 -------- d-----w- c:\program files\Women's Murder Club - A Darker Shade of Grey
2009-03-06 12:20 . 2009-03-06 12:20 -------- d-----w- c:\program files\Escape Rosecliff Island
2009-03-04 12:41 . 2009-03-04 12:41 -------- d-----w- c:\windows\The Secret of Margrave Manor
2009-03-04 12:41 . 2009-03-04 12:55 -------- d-----w- c:\program files\The Secret of Margrave Manor
2009-03-01 12:11 . 2009-03-01 12:21 -------- d-----w- c:\documents and settings\patrick\Application Data\Righteous Kill
2009-02-26 22:18 . 2009-02-26 22:18 -------- d-----w- c:\documents and settings\patrick\Application Data\cerasus
2009-02-24 06:45 . 2009-02-25 18:01 -------- d-----w- c:\program files\Mystery Stories - Berlin Nights
2009-02-22 17:58 . 2009-02-22 17:58 -------- d-----w- c:\program files\JRE
2009-02-21 20:23 . 2009-05-16 12:30 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2009-02-21 20:23 . 2009-02-21 20:23 -------- d-----w- c:\windows\system32\IOSUBSYS
2009-02-20 21:44 . 2009-02-20 21:44 -------- d-----w- c:\documents and settings\All Users\Application Data\PlayPond
2009-02-20 20:46 . 2009-03-10 15:51 -------- d-----w- c:\program files\Mystery Legends - Sleepy Hollow
2009-02-20 17:10 . 2009-04-29 04:45 78336 -c----w- c:\windows\system32\dllcache\ieencode.dll
2009-02-20 08:57 . 2009-04-24 20:48 -------- d-----w- c:\program files\Oberon Media
2009-02-20 08:57 . 2009-05-29 21:54 -------- d-----w- c:\program files\MSN Games
2009-02-17 01:29 . 2009-02-17 01:30 -------- d-----w- c:\program files\Elizabeth Find, MD - Diagnosis Mystery
2009-02-14 11:40 . 2009-02-14 11:40 -------- d-----w- c:\program files\Mortimer Beckett and the Secrets of Spooky Manor
2009-02-13 11:44 . 2009-02-13 11:44 -------- d-----w- c:\windows\Sun
2009-02-07 23:09 . 2009-02-07 23:09 -------- d-----w- c:\documents and settings\patrick\Application Data\SprillBermudeEng
2009-02-07 23:03 . 2009-02-07 23:48 -------- d-----w- c:\program files\SPRILL
2009-02-07 08:16 . 2009-02-07 08:16 -------- d-----w- c:\documents and settings\All Users\Application Data\WildWestQuest2
2009-02-05 23:35 . 2009-04-19 21:02 -------- d-----w- c:\program files\Java
2009-02-05 23:34 . 2009-02-05 23:34 152576 ----a-w- c:\documents and settings\patrick\Application Data\Sun\Java\jre1.6.0_11\lzma.dll
2009-02-05 12:09 . 2009-03-13 09:10 -------- d-----w- c:\program files\GooglePlusVideos
2009-02-05 11:50 . 2009-02-05 16:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Desktopicon
2009-02-04 23:31 . 2009-02-04 23:31 -------- d-----w- c:\documents and settings\patrick\Application Data\Reflexivev1001
2009-02-03 20:05 . 2009-02-05 16:11 -------- d-----w- c:\program files\Mystery PI - The New York Fortune
2009-02-03 19:58 . 2009-02-03 19:58 56832 -c----w- c:\windows\system32\dllcache\secur32.dll
2009-02-01 00:22 . 2009-02-01 00:22 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\AlwaysNeat
2009-01-31 17:36 . 2009-01-31 17:36 -------- d-----w- c:\documents and settings\All Users\Application Data\AdventureChronicles1
2009-01-31 17:36 . 2009-05-23 18:00 -------- d-----w- c:\program files\Adventure Chronicles
2009-01-31 17:28 . 2009-01-31 17:28 -------- d-----w- c:\program files\Liong - The Lost Amulets
2009-01-31 00:36 . 2009-02-23 14:30 -------- d-----w- c:\program files\Mortimer Beckett and the Time Paradox
2009-01-29 21:44 . 2009-06-19 06:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-29 21:44 . 2009-03-28 12:42 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-01-29 13:07 . 2009-01-29 13:07 -------- d-----w- c:\documents and settings\patrick\Local Settings\Application Data\DataKeeper
2009-01-28 22:09 . 2009-01-28 22:09 -------- d-----w- c:\documents and settings\All Users\Application Data\AlawarWrapper
2009-01-28 17:08 . 2009-01-28 17:08 -------- d-----w- c:\documents and settings\patrick\Application Data\Friday's games
2009-01-23 18:05 . 2009-01-23 18:05 -------- d-----w- c:\program files\LeeGTs Games
2009-01-22 11:44 . 2009-06-19 13:21 1 ----a-w- c:\documents and settings\patrick\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-01-22 11:43 . 2009-01-22 11:43 -------- d-----w- c:\documents and settings\patrick\Application Data\OpenOffice.org
2009-01-22 11:26 . 2009-02-22 17:58 -------- d-----w- c:\program files\OpenOffice.org 3
2009-01-21 20:24 . 2003-03-09 13:40 103608 ----a-w- c:\windows\bass.dll
2009-01-14 11:40 . 2009-03-18 16:43 -------- d-----w- c:\program files\Games
2009-01-12 22:59 . 2009-01-12 23:00 -------- d-----w- c:\program files\Ancient Secrets
2009-01-12 21:59 . 2009-01-12 21:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Cat's Eye Games
2009-01-12 21:57 . 2009-01-12 21:57 -------- d-----w- c:\program files\The Hidden Prophecies of Nostradamus
2009-01-11 15:57 . 2009-01-11 15:57 127944 ----a-w- c:\windows\binkw32.zip
2009-01-11 14:08 . 2007-05-18 12:11 3495784 ----a-w- c:\windows\d3dx9_33.dll
2009-01-11 14:08 . 2009-01-11 14:08 1596852 ----a-w- c:\windows\d3dx9_33.zip
2009-01-11 13:57 . 2009-01-11 13:57 -------- d-----w- c:\documents and settings\patrick\Application Data\Uniblue
2009-01-11 11:38 . 2009-01-11 11:38 -------- d-----w- c:\windows\DirectX
2009-01-11 11:33 . 2009-01-11 11:33 -------- d-----w- c:\windows\Logs
2009-01-11 11:33 . 2009-01-11 13:33 302928 ----a-w- c:\windows\directx_directx_9.25.1476_nov.2008_francais_10906.exe
2009-01-10 09:16 . 2009-01-10 09:16 -------- d-----w- c:\program files\Masters of Mystery - Crime of Fashion

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-20 20:56 . 2008-04-05 18:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-06-20 11:02 . 2008-12-10 16:20 5544 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-06-20 11:02 . 2008-12-10 16:20 33988 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-06-09 12:10 . 2008-04-08 15:29 -------- d-----w- c:\documents and settings\patrick\Application Data\PlayFirst
2009-05-16 12:29 . 2008-04-05 18:17 -------- d-----w- c:\program files\Google
2009-05-13 15:46 . 2008-04-30 15:06 31760 ----a-w- c:\windows\system32\drivers\klim5.sys
2009-05-07 15:33 . 2006-03-02 12:00 348672 ------w- c:\windows\system32\localspl.dll
2009-04-29 04:45 . 2006-03-02 12:00 827392 ------w- c:\windows\system32\wininet.dll
2009-04-29 04:45 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 19:50 . 2006-03-02 12:00 1847296 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:53 . 2006-03-02 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-02 17:17 . 2008-04-18 15:40 -------- d-----w- c:\program files\Fichiers communs\Real
2009-04-02 17:12 . 2008-04-09 23:02 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-04-02 17:12 . 2008-04-09 23:02 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-03-25 12:25 . 2008-04-05 19:32 -------- d-----w- c:\program files\Windows Live
2009-03-22 10:02 . 2008-04-05 19:32 -------- d-----w- c:\documents and settings\All Users\Application Data\WLInstaller
2009-03-21 09:04 . 2008-04-08 13:35 -------- d-----w- c:\program files\eMule
2009-03-17 16:15 . 2008-05-09 22:14 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-03-14 11:00 . 2008-04-05 20:59 -------- d-----w- c:\documents and settings\patrick\Application Data\Flood Light Games
2009-03-06 14:20 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\pdh.dll
2009-03-02 07:52 . 2008-04-05 16:53 25176 ----a-w- c:\documents and settings\patrick\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-02-09 11:23 . 2004-08-19 16:04 2025984 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2006-03-02 12:00 2147328 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2006-03-02 12:00 111104 ----a-w- c:\windows\system32\services.exe
2009-02-09 10:53 . 2006-03-02 12:00 735744 ----a-w- c:\windows\system32\lsasrv.dll
2009-02-09 10:53 . 2008-04-04 08:22 453120 ----a-w- c:\windows\system32\wbem\wmiprvsd.dll
2009-02-09 10:53 . 2008-04-04 08:22 473600 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-02-09 10:53 . 2006-03-02 12:00 739840 ----a-w- c:\windows\system32\ntdll.dll
2009-02-09 10:53 . 2006-03-02 12:00 685568 ----a-w- c:\windows\system32\advapi32.dll
2009-02-09 10:53 . 2006-03-02 12:00 401408 ----a-w- c:\windows\system32\rpcss.dll
2009-02-06 10:39 . 2006-03-02 12:00 35328 ----a-w- c:\windows\system32\sc.exe
2009-02-06 10:10 . 2008-04-04 08:22 227840 ----a-w- c:\windows\system32\wbem\wmiprvse.exe
2009-02-03 19:58 . 2006-03-02 12:00 56832 ----a-w- c:\windows\system32\secur32.dll
2008-12-31 23:58 . 2008-05-17 12:23 -------- d-----w- c:\program files\Orange
2008-12-20 22:14 . 2006-03-02 12:00 1294336 ----a-w- c:\windows\system32\quartz.dll
2008-12-16 12:31 . 2006-03-02 12:00 354304 ----a-w- c:\windows\system32\winhttp.dll
2008-12-15 18:41 . 2008-01-29 16:29 33808 ----a-w- c:\windows\system32\drivers\klbg.sys
2008-12-11 10:57 . 2006-03-02 12:00 333952 ----a-w- c:\windows\system32\drivers\srv.sys
2008-12-05 06:57 . 2006-03-02 12:00 144896 ----a-w- c:\windows\system32\schannel.dll
2008-12-02 17:09 . 2008-12-02 17:09 0 ----a-w- c:\documents and settings\All Users\Application Data\PKP_DLec.DAT
2008-11-13 11:19 . 2008-04-24 15:25 171008 ----a-w- c:\windows\binkw32.dll
2008-10-24 11:21 . 2006-03-02 12:00 455296 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:36 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\gdi32.dll
2008-10-16 13:13 . 2008-04-04 08:23 202776 ----a-w- c:\windows\system32\wuweb.dll
2008-10-16 13:13 . 2008-04-04 08:23 1809944 ----a-w- c:\windows\system32\wuaueng.dll
2008-10-16 13:12 . 2008-04-04 08:23 323608 ----a-w- c:\windows\system32\wucltui.dll
2008-10-16 13:12 . 2008-04-04 08:23 561688 ----a-w- c:\windows\system32\wuapi.dll
2008-10-16 13:09 . 2008-04-04 08:23 51224 ----a-w- c:\windows\system32\wuauclt.exe
2008-10-16 13:09 . 2007-07-30 17:19 43544 ----a-w- c:\windows\system32\wups2.dll
2008-10-16 13:09 . 2006-03-02 12:00 92696 ----a-w- c:\windows\system32\cdm.dll
2008-10-16 13:08 . 2008-04-04 08:23 34328 ----a-w- c:\windows\system32\wups.dll
2008-10-16 13:06 . 2008-04-06 14:15 268648 ----a-w- c:\windows\system32\mucltui.dll
2008-10-16 13:06 . 2008-04-06 14:15 208744 ----a-w- c:\windows\system32\muweb.dll
2008-10-03 10:03 . 2006-03-02 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll
2008-09-10 01:15 . 2007-05-15 13:43 1307648 ----a-w- c:\windows\system32\msxml6.dll
2008-09-05 11:24 . 2008-04-06 18:30 15748 ---ha-w- c:\windows\system32\mlfcache.dat
2008-09-04 17:16 . 2006-03-02 12:00 1106944 ----a-w- c:\windows\system32\msxml3.dll
2008-08-14 10:04 . 2006-03-02 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2008-07-31 10:19 . 2008-04-18 15:40 -------- d-----w- c:\program files\Real
2008-07-26 18:01 . 2008-04-04 08:24 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2008-07-13 12:04 . 2008-05-15 16:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2008-07-09 07:40 . 2008-04-04 14:19 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2008-07-08 12:09 . 2008-04-05 17:55 -------- d-----w- c:\documents and settings\patrick\Application Data\MSNInstaller
2008-07-07 20:28 . 2006-03-02 12:00 253952 ----a-w- c:\windows\system32\es.dll
2008-07-06 12:06 . 2007-03-23 04:07 1676288 ----a-w- c:\windows\system32\xpssvcs.dll
2008-07-06 12:06 . 2007-03-23 04:07 575488 ----a-w- c:\windows\system32\xpsshhdr.dll
2008-07-06 12:06 . 2007-03-22 18:25 117760 ----a-w- c:\windows\system32\prntvpt.dll
2008-06-24 16:44 . 2006-03-02 12:00 74240 ----a-w- c:\windows\system32\mscms.dll
2008-06-24 16:12 . 2006-10-18 19:47 295936 ------w- c:\windows\system32\wmpeffects.dll
2008-06-22 21:22 . 2008-05-17 14:54 -------- d-----w- c:\program files\Wanadoo
2008-06-21 11:00 . 2008-04-27 18:19 -------- d-----w- c:\program files\Runtime Software
2008-06-20 17:47 . 2006-03-02 12:00 247808 ----a-w- c:\windows\system32\mswsock.dll
2008-06-20 11:51 . 2006-03-02 12:00 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys
2008-06-20 11:08 . 2006-03-02 12:00 225856 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2008-06-18 04:03 . 2006-03-02 12:00 938496 ----a-w- c:\windows\system32\WMNetmgr.dll
2008-06-18 00:09 . 2006-03-02 12:00 100864 ----a-w- c:\windows\system32\logagent.exe
2008-06-14 08:22 . 2008-04-04 14:19 -------- d--h--w- c:\program files\InstallShield Installation Information
2008-06-12 14:22 . 2008-04-04 08:22 956928 ----a-w- c:\windows\system32\msdtctm.dll
2008-06-12 14:22 . 2008-04-04 08:22 91648 ----a-w- c:\windows\system32\mtxoci.dll
2008-06-12 14:22 . 2008-04-04 08:22 428032 ----a-w- c:\windows\system32\msdtcprx.dll
2008-06-12 14:22 . 2008-04-04 08:22 161792 ----a-w- c:\windows\system32\msdtcuiu.dll
2008-06-12 14:22 . 2006-03-02 12:00 66560 ----a-w- c:\windows\system32\mtxclu.dll
2008-06-12 14:22 . 2008-04-04 08:22 58880 ----a-w- c:\windows\system32\msdtclog.dll
2008-06-06 20:28 . 2008-04-09 23:00 -------- d-----w- c:\program files\Fichiers communs\Nikon
2008-05-25 22:26 . 2008-04-04 14:34 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2008-05-23 21:35 . 2008-04-09 23:00 -------- d-----w- c:\program files\ArcSoft
2008-05-17 12:23 . 2008-05-17 12:23 -------- d-----w- c:\program files\Fichiers communs\France Telecom
2008-05-15 20:48 . 2008-04-05 17:48 -------- d-----w- c:\program files\Wanadoo Messager
2008-05-13 13:03 . 2008-05-13 13:03 -------- d-----w- c:\documents and settings\patrick\Application Data\Malwarebytes
2008-05-09 10:55 . 2006-03-02 12:00 90112 ----a-w- c:\windows\system32\wshext.dll
2008-05-09 10:55 . 2006-03-02 12:00 430080 ----a-w- c:\windows\system32\vbscript.dll
2008-05-09 10:55 . 2006-03-02 12:00 180224 ----a-w- c:\windows\system32\scrobj.dll
2008-05-09 10:55 . 2006-03-02 12:00 172032 ----a-w- c:\windows\system32\scrrun.dll
2008-05-08 14:02 . 2006-03-02 12:00 203136 ----a-w- c:\windows\system32\drivers\rmcast.sys
2008-05-08 11:24 . 2006-03-02 12:00 155648 ----a-w- c:\windows\system32\wscript.exe
2008-05-07 17:54 . 2008-05-07 17:54 0 ----a-w- c:\windows\nsreg.dat
2008-05-07 09:07 . 2006-03-02 12:00 135168 ----a-w- c:\windows\system32\cscript.exe
2008-05-05 11:05 . 2008-05-05 11:04 -------- d-----w- c:\documents and settings\All Users\Application Data\WinZip
2008-05-05 05:25 . 2008-05-05 05:25 3072 ------w- c:\windows\system32\xpsp4res.dll
2008-05-04 17:23 . 2008-04-09 23:02 -------- d-----w- c:\documents and settings\patrick\Application Data\Nikon
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-05 68856]
"WOOKIT"="c:\program files\Wanadoo\Shell.exe" [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 155648]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-04-02 198160]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2009-04-26 63712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-05-25 303376]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NkbMonitor.exe.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Ralink Wireless Utility.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^patrick^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4662:TCP"= 4662:TCP:emuleTCP
"4672:UDP"= 4672:UDP:emuleUDP

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 18:29 33808]
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [19/06/2009 14:54 28544]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 17:06 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 20:59 19472]
S2 gupdate1c9d622259bd3c;Service Google Update (gupdate1c9d622259bd3c);c:\program files\Google\Update\GoogleUpdate.exe [16/05/2009 14:29 133104]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [17/09/2008 21:32 38160]
.
Contenu du dossier 'Tâches planifiées'

2008-06-22 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-05 18:22]

2008-06-22 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-16 12:29]
.
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
mStart Page = about:blank
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
IE: {{CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
TCP: {6CF9B62C-79B8-47FB-98DE-DE2C5B2F76E1} = 192.168.1.1
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game13.zylom.com/activex/zylomgamesplayer.cab
DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - hxxp://asp.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-22 23:22
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1004336348-57989841-682003330-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\swearware\backup\winsock2]
@DACL=(02 0000)
@SACL=
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(196)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\FTRTSVC.exe
c:\windows\system32\HPZipm12.exe
c:\progra~1\Wanadoo\EspaceWanadoo.exe
c:\progra~1\Wanadoo\ComComp.exe
c:\progra~1\Wanadoo\Toaster.exe
c:\progra~1\Wanadoo\Inactivity.exe
c:\progra~1\Wanadoo\PollingModule.exe
c:\windows\system32\wscntfy.exe
c:\progra~1\Wanadoo\Watch.exe
.
**************************************************************************
.
Heure de fin: 2008-06-22 23:25 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-06-22 21:25
ComboFix2.txt 2008-06-22 16:42

Avant-CF: 115 528 245 248 octets libres
Après-CF: 115 545 096 192 octets libres

371 --- E O F --- 2009-06-10 06:53
A+++++++++++

Salut toadadvance


Désactive la restauration système sur tous les lecteurs :

- Clique droit sur le Poste de travail sur le bureau, dans propriété tu cliques sur l'onglet Restauration système

- Coche la case désactiver la restauration et applique

Redémarre l’ordinateur et réactive la restauration système.

Tutoriel : http://www.libellules.ch/desactiver_restauration.php


Refais un scan avec ton antivirus, comment va le PC après


@++

Salut
En fait voilà ce que j'ai remarqué
J'ai fait un scan malwarebytes que j'ai l'habitude d'utiliser
Et là mon antivirus m'a prévenu d'une intrusion dans ce programme.Ceci au début de mes problèmes
Je viens de faire une analyse antivirus.Rien
Le pc marchait bien
Et j'ai voulu faire à nouveau un scan avec malwarebytes qui n'a rien trouvé et après tout bloquait
Impossible d'accéder à internet explorer et aucune page ne s'ouvre
A++++++

Re salut
J'ai arreté mon pc et là ça fonctionne
Qu'en penses-tu?
A+++++

Salut
A nouveau ça déraille
Impossible d'ouvrir IE et d'arreter le pc
Meme là j'ai des problèmes pour t'écrire
Au secours

Salut
Mes icones sont devenues enormes
La case démarrer disparait
Quand j'ouvre propriété sur une icone tout est noir et la fenetre est immense
Impossible d'utiliser spybot ou l'antivirus car il n'y a plus d'écriture
Et windows a encore arreter mon pc(ecran bleu
A l'aide

Salut toadadvance


Supprime ce dossier C:\rsit

Refais un scan avec RSIT et poste les rapports log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++

Salut
Logfile of random's system information tool 1.06 (written by random/random)
Run by patrick at 2008-06-24 09:20:09
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 111 GB (73%) free of 153 GB
Total RAM: 1014 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:20:32, on 24/06/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\patrick\Bureau\RSIT.exe
C:\Program Files\trend micro\patrick.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O11 - Options group: [searching] Search from the Address bar
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/The%20Clockwork%20Man/Images/stg_drm.ocx
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Insider%20Tales%20-%20The%20Stolen%20Venus/Images/(...)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - http://asp.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CF9B62C-79B8-47FB-98DE-DE2C5B2F76E1}: NameServer = 192.168.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9d622259bd3c) (gupdate1c9d622259bd3c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8028 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-05-25 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-17 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-23 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-30 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-05-25 264720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-17 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-02-26 155648]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-04-02 198160]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2009-04-26 63712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"avp"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-05-25 303376]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-04-05 68856]
"WOOKIT"=C:\Program Files\Wanadoo\Shell.exe [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe [2009-04-26 63712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
C:\Documents and Settings\patrick\Bureau\programmes\CCleaner\CCleaner.exe [2009-05-27 1573104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-04-02 198160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT]
C:\PROGRA~1\Wanadoo\Shell.exe [2004-08-23 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\Wanadoo\GestMaj.exe [2004-10-14 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
C:\PROGRA~1\Wanadoo\Watch.exe [2004-08-23 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^NkbMonitor.exe.lnk]
C:\PROGRA~1\Nikon\PICTUR~1\NKBMON~1.EXE [2005-12-09 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Ralink Wireless Utility.lnk]
C:\WINDOWS\RaUI.exe [2005-07-20 598016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^patrick^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk]
[]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-02-26 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Outil de diagnostic Microsoft DirectX"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2009-06-20 19:52:35 ----A---- C:\resultat.txt
2009-06-19 14:53:36 ----D---- C:\Program Files\Panda Security
2009-06-18 14:01:19 ----D---- C:\Program Files\ESET
2009-06-09 21:38:33 ----D---- C:\Documents and Settings\patrick\Application Data\SerpentOfIsis
2009-05-28 15:10:13 ----D---- C:\Documents and Settings\All Users\Application Data\blg
2009-05-25 05:21:48 ----N---- C:\WINDOWS\system32\klogon.dll
2009-05-19 13:04:23 ----D---- C:\Documents and Settings\patrick\Application Data\Zylom
2009-05-19 13:04:23 ----D---- C:\Documents and Settings\patrick\Application Data\Identities
2009-05-19 13:04:14 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
2009-05-17 12:26:13 ----RASHD---- C:\autorun.inf
2009-05-16 14:29:00 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-05-01 23:02:28 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2009-05-01 23:02:26 ----A---- C:\WINDOWS\system32\DivX.dll
2009-04-19 23:02:35 ----A---- C:\WINDOWS\system32\javaws.exe
2009-04-19 23:02:35 ----A---- C:\WINDOWS\system32\javaw.exe
2009-04-19 23:02:35 ----A---- C:\WINDOWS\system32\java.exe
2009-04-18 18:00:33 ----D---- C:\Documents and Settings\patrick\Application Data\Total Eclipse
2009-04-18 09:04:17 ----D---- C:\Program Files\The Clockwork Man
2009-04-12 11:58:43 ----D---- C:\Program Files\Téléchargeur de Sherlock Holmes Le Secret de la Boucle d'argent
2009-04-07 20:09:18 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-04-05 22:27:54 ----D---- C:\Documents and Settings\patrick\Application Data\RobinsonCrusoe
2009-04-04 15:06:13 ----D---- C:\Program Files\Hidden Expedition Titanic
2009-04-04 15:06:13 ----D---- C:\Program Files\BFG
2009-04-04 13:14:47 ----D---- C:\Documents and Settings\patrick\Application Data\PoBros
2009-04-02 19:17:34 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-03-30 23:16:46 ----D---- C:\Documents and Settings\patrick\Application Data\RobinsonCrusoeBFGFR
2009-03-27 21:33:42 ----D---- C:\Program Files\Insider Tales - The Stolen Venus
2009-03-21 19:21:00 ----D---- C:\Program Files\Windows Live SkyDrive
2009-03-21 19:11:17 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-03-21 10:17:07 ----D---- C:\Program Files\Angela Young's Dream Adventure
2009-03-17 00:44:49 ----D---- C:\Documents and Settings\patrick\Application Data\blg
2009-03-16 23:58:48 ----D---- C:\Program Files\Lost Realms - Legacy of the Sun Princess
2009-03-14 20:16:01 ----D---- C:\Documents and Settings\patrick\Application Data\Anabel
2009-03-14 00:46:44 ----D---- C:\Program Files\Women's Murder Club - A Darker Shade of Grey
2009-03-06 14:20:06 ----D---- C:\Program Files\Escape Rosecliff Island
2009-03-04 14:41:39 ----D---- C:\WINDOWS\The Secret of Margrave Manor
2009-03-04 14:41:38 ----D---- C:\Program Files\The Secret of Margrave Manor
2009-03-01 14:11:15 ----D---- C:\Documents and Settings\patrick\Application Data\Righteous Kill
2009-02-27 00:18:29 ----D---- C:\Documents and Settings\patrick\Application Data\cerasus
2009-02-24 08:45:34 ----D---- C:\Program Files\Mystery Stories - Berlin Nights
2009-02-22 19:58:33 ----D---- C:\Program Files\JRE
2009-02-21 22:23:50 ----D---- C:\WINDOWS\system32\IOSUBSYS
2009-02-20 23:44:09 ----D---- C:\Documents and Settings\All Users\Application Data\PlayPond
2009-02-20 22:46:55 ----D---- C:\Program Files\Mystery Legends - Sleepy Hollow
2009-02-20 10:57:30 ----D---- C:\Program Files\Oberon Media
2009-02-20 10:57:29 ----D---- C:\Program Files\MSN Games
2009-02-17 03:29:59 ----D---- C:\Program Files\Elizabeth Find, MD - Diagnosis Mystery
2009-02-14 13:40:37 ----D---- C:\Program Files\Mortimer Beckett and the Secrets of Spooky Manor
2009-02-13 13:44:35 ----D---- C:\WINDOWS\Sun
2009-02-08 01:09:01 ----D---- C:\Documents and Settings\patrick\Application Data\SprillBermudeEng
2009-02-08 01:03:09 ----D---- C:\Program Files\SPRILL
2009-02-07 10:16:00 ----D---- C:\Documents and Settings\All Users\Application Data\WildWestQuest2
2009-02-06 01:35:15 ----D---- C:\Program Files\Java
2009-02-05 14:09:45 ----D---- C:\Program Files\GooglePlusVideos
2009-02-05 13:50:39 ----D---- C:\Documents and Settings\patrick\Application Data\Desktopicon
2009-02-05 01:31:06 ----D---- C:\Documents and Settings\patrick\Application Data\Reflexivev1001
2009-02-03 22:05:53 ----D---- C:\Program Files\Mystery PI - The New York Fortune
2009-01-31 19:36:58 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
2009-01-31 19:36:24 ----D---- C:\Program Files\Adventure Chronicles
2009-01-31 19:28:21 ----D---- C:\Program Files\Liong - The Lost Amulets
2009-01-31 02:36:30 ----D---- C:\Program Files\Mortimer Beckett and the Time Paradox
2009-01-29 23:44:06 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-01-29 23:44:06 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-29 00:09:44 ----D---- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2009-01-28 19:08:34 ----D---- C:\Documents and Settings\patrick\Application Data\Friday's games
2009-01-23 20:05:14 ----D---- C:\Program Files\LeeGTs Games
2009-01-22 13:43:39 ----D---- C:\Documents and Settings\patrick\Application Data\OpenOffice.org
2009-01-22 13:26:04 ----D---- C:\Program Files\OpenOffice.org 3
2009-01-21 22:24:31 ----A---- C:\WINDOWS\bass.dll
2009-01-14 13:40:52 ----D---- C:\Program Files\Games
2009-01-13 00:59:44 ----D---- C:\Program Files\Ancient Secrets
2009-01-12 23:59:28 ----D---- C:\Documents and Settings\patrick\Application Data\Cat's Eye Games
2009-01-12 23:57:33 ----D---- C:\Program Files\The Hidden Prophecies of Nostradamus
2009-01-12 10:20:13 ----A---- C:\WINDOWS\NIRCMD.exe
2009-01-11 17:52:02 ----A---- C:\WINDOWS\NDCurses.INI
2009-01-11 16:08:22 ----A---- C:\WINDOWS\d3dx9_33.dll
2009-01-11 15:57:32 ----D---- C:\Documents and Settings\patrick\Application Data\Uniblue
2009-01-11 13:38:33 ----D---- C:\WINDOWS\DirectX
2009-01-11 13:33:35 ----D---- C:\WINDOWS\Logs
2009-01-11 13:33:04 ----A---- C:\WINDOWS\directx_directx_9.25.1476_nov.2008_francais_10906.exe
2009-01-10 11:16:02 ----D---- C:\Program Files\Masters of Mystery - Crime of Fashion
2009-01-10 00:50:22 ----D---- C:\Documents and Settings\patrick\Application Data\Fabulous Finds
2009-01-08 13:08:23 ----A---- C:\WINDOWS\Curses.INI
2009-01-08 08:59:04 ----D---- C:\Documents and Settings\All Users\Application Data\GameHouse
2009-01-08 08:44:30 ----D---- C:\users
2009-01-01 01:58:07 ----D---- C:\Program Files\Fichiers communs\Oberon Media
2008-12-27 19:52:33 ----D---- C:\Documents and Settings\All Users\Application Data\SpinTop Games
2008-12-27 19:52:19 ----D---- C:\WINDOWS\Mystery PI The Lottery Ticket
2008-12-27 19:52:18 ----D---- C:\Program Files\Mystery PI The Lottery Ticket
2008-12-25 22:08:05 ----D---- C:\WINDOWS\BDOSCAN8
2008-12-21 12:13:44 ----D---- C:\Documents and Settings\patrick\Application Data\Dragon Altar Games
2008-12-20 09:44:56 ----D---- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
2008-12-20 02:14:45 ----D---- C:\Program Files\Alabama Smith in Escape from Pompeii
2008-12-19 18:24:33 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
2008-12-15 02:10:28 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2008-12-14 17:44:49 ----D---- C:\Program Files\ReflexiveArcade
2008-12-12 21:06:14 ----D---- C:\Documents and Settings\patrick\Application Data\Pharaohs Secret
2008-12-10 18:20:53 ----D---- C:\Program Files\Kaspersky Lab
2008-12-10 18:20:53 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-12-10 14:06:00 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-12-06 22:12:18 ----A---- C:\WINDOWS\system32\deploytk.dll
2008-12-06 20:35:01 ----D---- C:\Program Files\Herods Lost Tomb
2008-12-06 20:29:55 ----D---- C:\Documents and Settings\patrick\Application Data\MysteryStudio
2008-11-30 19:00:25 ----A---- C:\WINDOWS\system32\kbdkor.dll
2008-11-30 19:00:25 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2008-11-30 19:00:25 ----A---- C:\WINDOWS\system32\kbd103.dll
2008-11-30 19:00:25 ----A---- C:\WINDOWS\system32\kbd101c.dll
2008-11-30 19:00:21 ----A---- C:\WINDOWS\system32\kbd106.dll
2008-11-30 19:00:21 ----A---- C:\WINDOWS\system32\kbd101b.dll
2008-11-23 01:38:45 ----D---- C:\Program Files\Dream Chronicles
2008-11-21 16:50:38 ----D---- C:\Program Files\Samantha Swift and the Hidden Roses of Athena
2008-11-16 22:27:02 ----D---- C:\Documents and Settings\All Users\Application Data\NeptunesAdve
2008-11-15 01:43:30 ----D---- C:\Documents and Settings\patrick\Application Data\Gogii Games
2008-11-14 23:18:36 ----D---- C:\Documents and Settings\patrick\Application Data\SpinTop Games
2008-11-14 23:11:49 ----D---- C:\Documents and Settings\patrick\Application Data\SpinTop
2008-11-14 00:41:35 ----D---- C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-11-11 20:09:31 ----D---- C:\Documents and Settings\patrick\Application Data\Artogon
2008-11-11 15:21:52 ----D---- C:\Documents and Settings\patrick\Application Data\Gold Casual Games
2008-11-11 15:21:52 ----D---- C:\Documents and Settings\All Users\Application Data\Gold Casual Games
2008-11-04 19:50:14 ----D---- C:\Documents and Settings\All Users\Application Data\MumboJumbo
2008-11-03 23:48:04 ----A---- C:\WINDOWS\gmer.ini
2008-11-03 23:48:03 ----A---- C:\WINDOWS\gmer_uninstall.cmd
2008-11-03 23:48:03 ----A---- C:\WINDOWS\gmer.dll
2008-11-03 18:09:03 ----D---- C:\Documents and Settings\patrick\Application Data\SecretIslandEng
2008-11-03 10:02:23 ----A---- C:\WINDOWS\system32\AntiXPVSTFix.exe
2008-11-02 20:24:08 ----D---- C:\Documents and Settings\patrick\Application Data\WinRAR
2008-11-01 17:00:21 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-01 12:33:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-11-01 12:12:30 ----D---- C:\Program Files\bfgclient
2008-11-01 10:12:02 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
2008-10-31 20:36:47 ----D---- C:\Program Files\GameMill Entertainment
2008-10-31 01:04:37 ----D---- C:\Documents and Settings\All Users\Application Data\DriverScanner
2008-10-30 22:39:00 ----D---- C:\Documents and Settings\patrick\Application Data\BloodTies
2008-10-30 19:29:04 ----D---- C:\6be0ad38cb4b6ec4a1a5e341
2008-10-30 19:08:44 ----D---- C:\d67afa21f67d2f4835fbc187a31656
2008-10-30 19:08:16 ----RHD---- C:\AHCache
2008-10-30 19:08:13 ----D---- C:\f5e8676975744d6dacc359b823b9
2008-10-28 14:30:06 ----D---- C:\Documents and Settings\patrick\Application Data\cerasus.media
2008-10-27 20:47:13 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-18 20:55:11 ----D---- C:\WINDOWS\Samantha Swift and the Hidden Roses of Athena
2008-09-30 17:43:34 ----A---- C:\WINDOWS\system32\msxml4.dll
2008-09-23 10:59:16 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2008-09-07 15:07:43 ----D---- C:\Program Files\Skyline
2008-09-07 15:06:06 ----D---- C:\Documents and Settings\All Users\Application Data\Skyline
2008-09-05 13:21:19 ----D---- C:\Program Files\Realarcade
2008-08-28 22:29:25 ----D---- C:\Documents and Settings\patrick\Application Data\Big Fish Games
2008-08-23 22:14:57 ----D---- C:\Documents and Settings\patrick\Application Data\TMInc
2008-08-17 13:13:12 ----A---- C:\WINDOWS\Game.INI
2008-08-12 00:29:18 ----A---- C:\WINDOWS\system32\lfgif13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\ltimg13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\ltfil13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\ltefx13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\ltdis13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\lfcmp13n.dll
2008-08-12 00:29:17 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
2008-07-31 12:20:51 ----D---- C:\My Games
2008-07-31 12:20:47 ----D---- C:\My Download Files
2008-07-31 12:19:57 ----A---- C:\Program Files\RngInterstitial.dll
2008-07-31 03:21:58 ----A---- C:\WINDOWS\system32\icardres.dll.mui
2008-07-29 21:35:46 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2008-07-29 20:59:58 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2008-07-29 20:59:58 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2008-07-29 20:59:58 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2008-07-29 20:24:50 ----A---- C:\WINDOWS\system32\infocardapi.dll
2008-07-29 20:24:50 ----A---- C:\WINDOWS\system32\icardres.dll
2008-07-29 20:24:50 ----A---- C:\WINDOWS\system32\icardagt.exe
2008-07-25 18:11:59 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia
2008-07-25 12:16:58 ----A---- C:\WINDOWS\system32\mscories.dll
2008-07-25 12:16:58 ----A---- C:\WINDOWS\system32\mscorier.dll
2008-07-25 12:16:58 ----A---- C:\WINDOWS\system32\mscoree.dll
2008-07-25 12:16:46 ----A---- C:\WINDOWS\system32\dfshim.dll
2008-07-24 23:48:46 ----D---- C:\WINDOWS\The Mystery of the Crystal Portal
2008-07-23 11:25:12 ----A---- C:\WINDOWS\system32\srusd.dll
2008-07-23 11:25:09 ----A---- C:\WINDOWS\system32\fnfilter.dll
2008-07-19 10:31:04 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-07-19 10:31:03 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2008-07-19 10:30:39 ----D---- C:\Program Files\Windows Media Connect 2
2008-07-19 10:30:21 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-07-19 10:29:43 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-07-19 10:29:20 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2008-07-12 09:13:16 ----A---- C:\WINDOWS\wininit.ini
2008-07-12 08:22:28 ----A---- C:\WINDOWS\system32\97dcc866-.txt
2008-07-11 13:58:50 ----D---- C:\Program Files\DivX
2008-07-08 23:39:59 ----D---- C:\Temp
2008-07-08 20:07:37 ----A---- C:\WINDOWS\system32\MRT.INI
2008-07-08 14:14:04 ----D---- C:\Documents and Settings\patrick\Application Data\MSN6
2008-07-08 14:14:04 ----D---- C:\Documents and Settings\All Users\Application Data\MSN6
2008-07-02 09:36:14 ----D---- C:\WINDOWS\Prefetch
2008-07-02 09:31:47 ----D---- C:\WINDOWS\l2schemas
2008-07-02 09:31:46 ----D---- C:\WINDOWS\system32\fr
2008-07-02 09:31:46 ----D---- C:\WINDOWS\system32\bits
2008-07-02 09:30:14 ----D---- C:\WINDOWS\ServicePackFiles
2008-07-02 09:25:17 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-07-02 09:25:16 ----D---- C:\WINDOWS\EHome
2008-07-01 22:10:43 ----D---- C:\WINDOWS\system32\LogFiles
2008-06-24 17:15:43 ----A---- C:\WINDOWS\system32\wmpns.dll
2008-06-24 09:58:08 ----D---- C:\Program Files\Trend Micro
2008-06-24 09:20:09 ----D---- C:\rsit
2008-06-23 23:38:17 ----HD---- C:\WINDOWS\PIF
2008-06-23 19:20:57 ----A---- C:\WINDOWS\ntbtlog.txt
2008-06-22 23:27:58 ----SHD---- C:\RECYCLER
2008-06-22 23:25:13 ----D---- C:\WINDOWS\temp
2008-06-22 18:34:35 ----A---- C:\WINDOWS\sed.exe
2008-06-22 18:34:35 ----A---- C:\WINDOWS\PEV.exe
2008-06-22 18:34:35 ----A---- C:\WINDOWS\grep.exe
2008-06-22 18:34:22 ----D---- C:\Qoobox
2008-06-22 14:07:23 ----D---- C:\WINDOWS\Minidump
2008-06-17 09:59:49 ----D---- C:\Documents and Settings\patrick\Application Data\Smart PC Solutions
2008-06-14 13:38:40 ----D---- C:\Program Files\NAVIGON
2008-06-14 11:54:36 ----A---- C:\WINDOWS\WORDPAD.INI
2008-06-14 10:22:08 ----D---- C:\Program Files\PC Inspector File Recovery
2008-06-11 23:41:45 ----D---- C:\Documents and Settings\patrick\Application Data\AdobeUM
2008-06-06 22:22:14 ----D---- C:\Documents and Settings\All Users\Application Data\Ultima_T15
2008-06-05 20:52:48 ----D---- C:\Documents and Settings\patrick\Application Data\Sun
2008-06-02 19:09:08 ----D---- C:\Program Files\Ontrack
2008-06-02 17:17:55 ----D---- C:\Documents and Settings\patrick\Application Data\Leadertech
2008-06-02 16:23:14 ----D---- C:\Program Files\Adobe
2008-05-28 10:30:26 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-28 10:30:25 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-27 13:38:10 ----D---- C:\Program Files\Lavalys
2008-05-27 09:38:48 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-05-26 15:08:34 ----D---- C:\games
2008-05-25 10:18:37 ----D---- C:\cygdrive

======List of files/folders modified in the last 1 months======

2009-06-21 08:32:06 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-20 13:02:48 ----HD---- C:\Config.Msi
2009-06-20 13:01:10 ----SHD---- C:\WINDOWS\Installer
2009-06-20 13:01:10 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-19 15:19:17 ----D---- C:\WINDOWS\pss
2009-06-10 08:51:30 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 08:47:12 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-10 08:47:11 ----D---- C:\Program Files\Internet Explorer
2009-06-09 14:10:09 ----D---- C:\Documents and Settings\patrick\Application Data\PlayFirst
2009-06-01 20:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-16 14:29:22 ----D---- C:\Program Files\Google
2009-05-07 17:33:02 ----N---- C:\WINDOWS\system32\localspl.dll
2009-04-29 08:45:42 ----A---- C:\WINDOWS\system32\occache.dll
2009-04-29 06:45:44 ----N---- C:\WINDOWS\system32\wininet.dll
2009-04-29 06:45:43 ----N---- C:\WINDOWS\system32\webcheck.dll
2009-04-29 06:45:43 ----N---- C:\WINDOWS\system32\urlmon.dll
2009-04-29 06:45:43 ----N---- C:\WINDOWS\system32\url.dll
2009-04-29 06:45:42 ----N---- C:\WINDOWS\system32\pngfilt.dll
2009-04-29 06:45:42 ----A---- C:\WINDOWS\system32\mstime.dll
2009-04-29 06:45:42 ----A---- C:\WINDOWS\system32\msrating.dll
2009-04-29 06:45:42 ----A---- C:\WINDOWS\system32\mshtmled.dll
2009-04-29 06:45:41 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-04-29 06:45:40 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2009-04-29 06:45:40 ----A---- C:\WINDOWS\system32\msfeeds.dll
2009-04-29 06:45:39 ----A---- C:\WINDOWS\system32\jsproxy.dll
2009-04-29 06:45:38 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-04-29 06:45:38 ----A---- C:\WINDOWS\system32\iernonce.dll
2009-04-29 06:45:38 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-04-29 06:45:36 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\ieaksie.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\ieakeng.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\icardie.dll
2009-04-29 06:45:35 ----A---- C:\WINDOWS\system32\extmgr.dll
2009-04-29 06:45:34 ----A---- C:\WINDOWS\system32\dxtrans.dll
2009-04-29 06:45:34 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2009-04-29 06:45:34 ----A---- C:\WINDOWS\system32\advpack.dll
2009-04-28 11:06:24 ----A---- C:\WINDOWS\system32\ieudinit.exe
2009-04-28 11:06:24 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2009-04-25 07:26:23 ----A---- C:\WINDOWS\system32\ieakui.dll
2009-04-19 23:02:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-04-15 16:53:29 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2009-04-15 11:25:47 ----D---- C:\WINDOWS\system32\wbem
2009-04-15 09:54:11 ----D---- C:\WINDOWS\Microsoft.NET
2009-04-15 09:54:10 ----RSD---- C:\WINDOWS\assembly
2009-04-02 19:17:01 ----D---- C:\Program Files\Fichiers communs\Real
2009-04-02 19:16:42 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-04-02 19:12:53 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-04-02 19:12:52 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-04-02 19:12:43 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-04-02 19:12:42 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-04-02 19:12:42 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-03-25 14:25:44 ----D---- C:\Program Files\Windows Live
2009-03-24 02:05:52 ----D---- C:\WINDOWS\system32\DirectX
2009-03-22 12:06:55 ----D---- C:\WINDOWS\WinSxS
2009-03-22 12:02:47 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-03-21 19:11:16 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-03-21 16:07:58 ----A---- C:\WINDOWS\system32\kernel32.dll
2009-03-21 11:04:28 ----D---- C:\Program Files\eMule
2009-03-17 18:15:19 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-03-17 18:15:12 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-03-14 13:00:20 ----D---- C:\Documents and Settings\patrick\Application Data\Flood Light Games
2009-03-06 16:20:52 ----A---- C:\WINDOWS\system32\pdh.dll
2009-03-05 13:47:56 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-03-02 09:54:26 ----D---- C:\WINDOWS\Help
2009-02-22 19:59:43 ----RSD---- C:\WINDOWS\Fonts
2009-02-09 13:23:57 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2009-02-09 13:23:51 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2009-02-09 13:23:48 ----A---- C:\WINDOWS\system32\services.exe
2009-02-09 12:53:56 ----A---- C:\WINDOWS\system32\lsasrv.dll
2009-02-09 12:53:55 ----A---- C:\WINDOWS\system32\rpcss.dll
2009-02-09 12:53:55 ----A---- C:\WINDOWS\system32\ntdll.dll
2009-02-09 12:53:55 ----A---- C:\WINDOWS\system32\advapi32.dll
2009-02-06 12:39:08 ----A---- C:\WINDOWS\system32\sc.exe
2009-02-03 21:58:06 ----A---- C:\WINDOWS\system32\secur32.dll
2009-02-02 18:47:57 ----D---- C:\Program Files\Windows Media Player
2009-01-22 11:08:26 ----SH---- C:\boot.ini
2009-01-22 11:08:26 ----A---- C:\WINDOWS\win.ini
2009-01-11 13:36:37 ----HD---- C:\WINDOWS\msdownld.tmp
2009-01-01 01:58:07 ----D---- C:\Program Files\Orange
2008-12-21 00:14:30 ----A---- C:\WINDOWS\system32\quartz.dll
2008-12-16 14:31:46 ----A---- C:\WINDOWS\system32\winhttp.dll
2008-12-10 18:10:23 ----SD---- C:\Documents and Settings\patrick\Application Data\Microsoft
2008-12-05 08:57:24 ----A---- C:\WINDOWS\system32\schannel.dll
2008-11-21 14:03:34 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-11-13 13:19:27 ----A---- C:\WINDOWS\binkw32.dll
2008-11-11 19:34:42 ----A---- C:\WINDOWS\system32\wmp.dll
2008-11-09 19:42:45 ----D---- C:\Program Files\Messenger
2008-11-09 19:42:26 ----D---- C:\Program Files\MSN
2008-10-30 19:32:32 ----D---- C:\WINDOWS\system32\XPSViewer
2008-10-30 19:30:18 ----D---- C:\WINDOWS\system32\en-us
2008-10-30 19:21:06 ----D---- C:\WINDOWS\Registration
2008-10-29 21:19:07 ----D---- C:\WINDOWS\network diagnostic
2008-10-27 20:54:51 ----D---- C:\WINDOWS\SoftwareDistribution
2008-10-23 14:36:51 ----A---- C:\WINDOWS\system32\gdi32.dll
2008-10-23 12:06:59 ----A---- C:\WINDOWS\system32\tzchange.exe
2008-10-18 13:19:10 ----D---- C:\WINDOWS\system32\NtmsData
2008-10-16 15:13:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2008-10-16 15:13:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-10-16 15:12:22 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-10-16 15:12:20 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-10-16 15:09:44 ----A---- C:\WINDOWS\system32\wups2.dll
2008-10-16 15:09:44 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-10-16 15:09:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-10-16 15:09:44 ----A---- C:\WINDOWS\system32\cdm.dll
2008-10-16 15:08:58 ----A---- C:\WINDOWS\system32\wups.dll
2008-10-16 15:07:32 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-10-16 15:06:48 ----A---- C:\WINDOWS\system32\muweb.dll
2008-10-16 15:06:48 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-10-16 15:06:40 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-10-15 18:35:43 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-10-11 22:30:37 ----D---- C:\WINDOWS\system32\AlertModule
2008-10-03 12:03:53 ----A---- C:\WINDOWS\system32\strmdll.dll
2008-09-10 03:15:15 ----A---- C:\WINDOWS\system32\msxml6.dll
2008-09-04 19:16:10 ----A---- C:\WINDOWS\system32\msxml3.dll
2008-07-31 12:19:45 ----D---- C:\Program Files\Real
2008-07-13 14:04:03 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-07-09 16:30:49 ----A---- C:\WINDOWS\system32\ieframe.dll.mui
2008-07-09 09:40:25 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-07-08 19:26:12 ----D---- C:\Program Files\Online Services
2008-07-08 14:09:06 ----D---- C:\Documents and Settings\patrick\Application Data\MSNInstaller
2008-07-07 22:28:20 ----A---- C:\WINDOWS\system32\es.dll
2008-07-06 14:06:10 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2008-07-06 14:06:10 ----A---- C:\WINDOWS\system32\xpsshhdr.dll
2008-07-06 14:06:10 ----A---- C:\WINDOWS\system32\prntvpt.dll
2008-07-02 09:35:53 ----D---- C:\WINDOWS\system32\Setup
2008-07-02 09:33:59 ----D---- C:\WINDOWS\security
2008-07-02 09:31:56 ----D---- C:\WINDOWS\ime
2008-07-02 09:31:47 ----D---- C:\WINDOWS\system32\usmt
2008-07-02 09:31:46 ----D---- C:\WINDOWS\PeerNet
2008-07-02 09:31:46 ----D---- C:\Program Files\Movie Maker
2008-07-02 09:30:10 ----D---- C:\WINDOWS\system32\npp
2008-07-02 09:30:09 ----D---- C:\WINDOWS\msagent
2008-07-02 09:30:08 ----D---- C:\WINDOWS\srchasst
2008-07-02 09:30:08 ----D---- C:\Program Files\NetMeeting
2008-07-02 09:30:07 ----D---- C:\WINDOWS\system32\Com
2008-07-02 09:30:04 ----D---- C:\Program Files\Windows NT
2008-07-02 09:30:04 ----D---- C:\Program Files\Outlook Express
2008-07-02 09:30:02 ----D---- C:\Program Files\Fichiers communs\System
2008-07-02 09:29:48 ----D---- C:\WINDOWS\system32\oobe
2008-07-02 09:29:46 ----D---- C:\WINDOWS\system
2008-07-02 09:27:40 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-06-30 09:33:55 ----D---- C:\Documents and Settings
2008-06-24 18:44:02 ----A---- C:\WINDOWS\system32\mscms.dll
2008-06-24 18:12:58 ----N---- C:\WINDOWS\system32\wmpeffects.dll
2008-06-24 09:09:50 ----SD---- C:\WINDOWS\Tasks
2008-06-24 09:08:54 ----D---- C:\Program Files\Wanadoo
2008-06-24 00:26:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-06-23 20:31:23 ----D---- C:\WINDOWS
2008-06-23 16:54:48 ----D---- C:\WINDOWS\Debug
2008-06-23 14:04:19 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2008-06-23 09:58:16 ----SHD---- C:\System Volume Information
2008-06-23 09:58:16 ----D---- C:\WINDOWS\system32\Restore
2008-06-22 23:25:14 ----D---- C:\WINDOWS\system32\drivers
2008-06-22 23:25:14 ----D---- C:\WINDOWS\system32
2008-06-22 23:22:52 ----A---- C:\WINDOWS\system.ini
2008-06-22 23:21:19 ----D---- C:\WINDOWS\system32\config
2008-06-22 23:21:12 ----D---- C:\WINDOWS\erdnt
2008-06-22 23:20:16 ----D---- C:\WINDOWS\AppPatch
2008-06-22 23:20:14 ----D---- C:\Program Files\Fichiers communs
2008-06-22 20:54:56 ----D---- C:\Documents and Settings\patrick\Application Data\Adobe
2008-06-22 16:31:06 ----RD---- C:\Program Files
2008-06-22 13:44:10 ----HD---- C:\WINDOWS\inf
2008-06-21 13:00:41 ----D---- C:\Program Files\Runtime Software
2008-06-20 19:47:22 ----A---- C:\WINDOWS\system32\mswsock.dll
2008-06-20 19:47:22 ----A---- C:\WINDOWS\system32\dnsapi.dll
2008-06-18 06:03:14 ----A---- C:\WINDOWS\system32\WMVCore.dll
2008-06-18 06:03:08 ----A---- C:\WINDOWS\system32\WMNetmgr.dll
2008-06-18 02:09:22 ----A---- C:\WINDOWS\system32\logagent.exe
2008-06-17 21:02:15 ----A---- C:\WINDOWS\system32\shell32.dll
2008-06-14 10:22:08 ----HD---- C:\Program Files\InstallShield Installation Information
2008-06-12 16:22:23 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-06-12 16:22:23 ----A---- C:\WINDOWS\system32\mtxclu.dll
2008-06-12 16:22:23 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-06-12 16:22:23 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-06-12 16:22:23 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-06-12 16:22:22 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-06-10 23:42:59 ----A---- C:\WINDOWS\cdplayer.ini
2008-06-06 22:28:31 ----D---- C:\Program Files\Fichiers communs\Nikon
2008-06-02 18:18:12 ----D---- C:\WINDOWS\Downloaded Installations
2008-05-26 00:26:35 ----D---- C:\Program Files\Fichiers communs\InstallShield

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-05-24 296976]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-04-04 20747]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-02-26 5700096]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-05-13 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-05-16 19472]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12288]
R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RT61;Ralink Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2005-07-01 339072]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-23 6912]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 catchme;catchme; \??\C:\DOCUME~1\patrick\LOCALS~1\Temp\catchme.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-12-14 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-12-14 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-12-14 21744]
S3 mbr;mbr; \??\C:\DOCUME~1\patrick\LOCALS~1\Temp\mbr.sys []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 TSP;TSP; \??\C:\WINDOWS\system32\drivers\klif.sys []
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-05-25 303376]
R2 FTRTSVC;France Telecom Routing Table Service; C:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960]
R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S2 gupdate1c9d622259bd3c;Service Google Update (gupdate1c9d622259bd3c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-16 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-30 182768]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 71096]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2008-06-24 09:20:36

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Adventure Chronicles - The Search for Lost Treasure 1.00-->C:\Program Files\Games\Adventure Chronicles - The Search for Lost Treasure\Uninstall.exe
Adventure Chronicles-->"C:\Program Files\Adventure Chronicles\ReflexiveArcade\unins000.exe"
Alabama Smith in Escape from Pompeii-->C:\Program Files\Alabama Smith in Escape from Pompeii\uninstall.exe
Ancient Secrets-->C:\Program Files\Ancient Secrets\uninstall.exe
Animal Agents-->MsiExec.exe /I{9E15F9B9-9CD5-4017-BE8C-648C622E2405}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft Panorama Maker 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5F68DC8-0278-4AD8-B413-861509B5F25B}\Setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
CCleaner (remove only)-->"C:\Documents and Settings\patrick\Bureau\programmes\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
DeepBurner v1.9.0.228-->"C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log" -u
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Elizabeth Find, MD - Diagnosis Mystery-->C:\Program Files\Elizabeth Find, MD - Diagnosis Mystery\uninstall.exe
Escape Rosecliff Island-->C:\Program Files\Escape Rosecliff Island\uninstall.exe
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
GetDataBack for NTFS-->"C:\Program Files\Runtime Software\GetDataBack for NTFS\Uninstall.exe" "C:\Program Files\Runtime Software\GetDataBack for NTFS\install.log" -u
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Haunted Hotel-->MsiExec.exe /I{A8206965-E60A-40F8-8827-E0F98328903F}
Herods Lost Tomb 1.0.0.8-->C:\Program Files\Herods Lost Tomb\Uninstall.exe
Hidden Expedition Titanic (remove only)-->C:\Program Files\Hidden Expedition Titanic\Uninstall.exe
Hidden Mysteries Civil War-->C:\PROGRA~1\GAMEMI~1\HIDDEN~1\UNWISE.EXE C:\PROGRA~1\GAMEMI~1\HIDDEN~1\INSTALL.LOG
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Kaspersky Internet Security 2010-->MsiExec.exe /I{9D8B0949-7C47-476F-9F06-F900D3B078EA}
Kaspersky Internet Security 2010-->MsiExec.exe /I{9D8B0949-7C47-476F-9F06-F900D3B078EA}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Liong - The Lost Amulets-->C:\Program Files\Liong - The Lost Amulets\uninstall.exe
Little Shop - Memories 1.052-->C:\Program Files\Games\Little Shop - Memories\Uninstall.exe
Little Shop - Memories-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\littleshopmemories.rguninst" "AddRemove"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Masters of Mystery - Crime of Fashion-->C:\Program Files\Masters of Mystery - Crime of Fashion\uninstall.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Mystery Legends - Sleepy Hollow Cracked by Cryptic-->"C:\Program Files\Mystery Legends - Sleepy Hollow\unins000.exe"
Mystery PI - The New York Fortune 1.00-->C:\Program Files\Mystery PI - The New York Fortune\Uninstall.exe
Mystery PI - The New York Fortune-->"C:\Program Files\Mystery PI - The New York Fortune\ReflexiveArcade\unins000.exe"
Mystery Stories - Berlin Nights-->C:\Program Files\Mystery Stories - Berlin Nights\uninstall.exe
Nancy Drew(R) - Dossier(TM) - Lights, Camera, Curses!-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\nancydrewrdossiertmlightscameracurses.rguninst" "AddRemove"
NAVIGON Fresh 1.5.0-->C:\Program Files\NAVIGON\NAVIGON Fresh\uninst.exe
Nikon FotoShare-->C:\Program Files\Nikon\FotoShare\Uninstal.exe C:\PROGRA~1\Nikon\FOTOSH~1\INSTALL.LOG
Nikon Message Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\Setup.exe" -l0x40c UNINSTALL
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de connexion Wanadoo-->C:\PROGRA~1\Wanadoo\MessageDesinstallation.exe Wanadoo
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PC Inspector smart recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9A87D86-FDFD-418B-BF96-EF09320973B3}\Setup.exe" -l0x40c
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
PictureProject-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF3999BE-1A7B-4738-88AA-97BF14094A4A}\Setup.exe" -l0x40c UNINSTALL
Ralink Wireless LAN Card-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe" -l0x9 -removeonly
RealArcade-->"C:\Program Files\RealArcade\Installer\bin\gameinstaller.exe" "C:\Program Files\RealArcade\Installer\installerMain.clf" "C:\Program Files\RealArcade\Installer\uninstall\RealArcade.rguninst" "AddRemove"
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Righteous Kill beta-->C:\Program Files\Realarcade\Righteous Kill\uninstall.exe C:\Program Files\Realarcade\Righteous Kill\uninstall.log
Samantha Swift and the Hidden Roses of Athena-->"C:\WINDOWS\Samantha Swift and the Hidden Roses of Athena\uninstall.exe" "/U:C:\Program Files\Samantha Swift and the Hidden Roses of Athena\Uninstall\uninstall.xml"
Secured eMule-->C:\PROGRA~1\SECURE~1\UNWISE.EXE C:\PROGRA~1\SECURE~1\INSTALL.LOG
SPRILL-->C:\Program Files\SPRILL\Uninstal.exe
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
The Hidden Prophecies of Nostradamus -->C:\Program Files\The Hidden Prophecies of Nostradamus\uninstall.exe
The Hidden Prophecies of Nostradamus 1.00-->C:\Program Files\Games\The Hidden Prophecies of Nostradamus\Uninstall.exe
The Mystery of the Crystal Portal-->"C:\WINDOWS\\The Mystery of the Crystal Portal\\uninstall.exe" "/U:C:\WINDOWS\\The Mystery of the Crystal Portal\uninstall.xml"
The Mystery of the Crystal Portal-->"C:\WINDOWS\The Mystery of the Crystal Portal\uninstall.exe" "/U:C:\Program Files\The Myster

Salut toadadvance


Important Désactive ton Antivirus et antispyware avant le scan avec DiagHelp :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


Télécharge DiagHelp sur le bureau ici :

http://www.malekal.com/download/DiagHelp.zip

Lire et suivre attentivement le tutoriel ici :

http://www.malekal.com/DiagHelp/DiagHelp.php


- Choisi l'option 1 (Lister Fichiers), enregistre-le sur le bureau.

---

Utilise ensuite cjoint.com http://cjoint.com/ pour poster en lien ton rapport

- Clique sur Parcourir pour aller chercher le rapport
- Clique sur Ouvrir ensuite sur Créer le lien Cjoint

- Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.


@++

Salut
http://cjoint.com/?gxoPPUicOI
A++++++++++++++

Salut toadadvance


Clique sur le menu démarrer/ Rechercher, clique sur Tous les fichiers et tous les dossiers, dans la première fenêtre du haut tu tape où copie/colle vsblnnu.sys et dans le bas dans Options avancés clique sur Rechercher dans les fichiers et dossiers cachés.

Après tu clic sur Rechercher


Si tu retrouve ce fichier, faire un scan de ce fichier :

http://www.virustotal.com/fr/


Clique sur Parcourir et retrouve le fichier dans le chemin trouver
Après tu clique sur Envoyer le fichier et attendre le résultat de l’analyse.


Poste le résultat au complet

Aide : http://bibou0007.com/scans-en-ligne-f75/tutorial-sur-virustotal-t190.htm


@++

Bonjour
Je n'ai pas trouvé
A++++++

Salut toadadvance


On va faire un ménage des fichiers inutiles et de la base de registre :

- Télécharge et installe :

- Ccleaner http://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs(...)
- Lors de son installation décoche la case devant : Ajouter la Barre d'Outils Yahoo! CCleaner

- Clique sur Options, onglet Avancé et décoche la case Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures.

- Clique sur Nettoyeur
- Onglet Windows ne coche pas la case Avancé
- Onglet Applications laisse toutes les cases cochées


- Clique sur le bouton Analyse puis celle-ci finie sur Lancer le nettoyage


-----


Télécharge RegSeeker ( de Thibaud Djian) :

http://www.01net.com/telecharger/windows/Utilitaire/systeme/fiches/29399.html


A dézipper dans un dossier nommé C:\Regseeker


* Ouvre le dossier C:\Regseeker, double clic sur Regseeker.exe
* Pour le mettre en français clique en haut à droite sur Languages choisis Français (French.lng)
* Clique à gauche sur Nettoyer le registre

* Vérifie en bas à gauche que la case devant Backup avant suppression est bien cochée
* Décoche la case devant Scanner disques pour anciens EXE


* Laisse Services invalides (Expérimental) décoché clique sur OK!

* Le scan fini clique en bas sur Sélection et Sélectionner éléments verts
* Clique en bas sur Action ensuite sur Supprimer les éléments sélectionnés


Note : Ne touche pas aux éléments rouges


Attention un nettoyeur de registre est un outil dangereux mal employé il peut provoquer le plantage définitif du systéme


@++

Salut
J'avais déjà fait ça
Mais je l'ai refait quand meme
Malwarebytes m'a détecté trojan downloader et rookit agent
Ca va mieux
Merci beaucoup
Que ferai-je sans vous tous
Re mercie

Salut toadadvance


J'aimerais avoir le rapport de MBAM, il peut être retrouvé sous l'onglet Rapports/logs du logiciel.


@++