|
|
Auteur
|
Message
|
1
|
|
|
|
j'ai un petit virus simpatique qui m'enpeche de changer mon fond d'écran. Je ne vois pas se que je peux faire j'ai lancé un scan, mis les virus trouvé en quarentaine (au debut mais je les ais supprimer pour finir) mais il est toujours impossible pour moi dans changer le fond d'écran...limite, si le fond d'écran était cool, mais la s'en est un avec des lien partouts, et puis ben, ca m'enerve quoi!
quelqu'un a-t'il deja eu le probleme? Serait-on m'expliquer ce que je dois faire...
merci d'avance
|
|
|
|
|
faut aussi que je dise, je n'avais jamais eu d'alerte d'infection avant que ce virus s'installe, depuis, il en trouve tout le temps...j'ai besoin d'aide!!
je dois installer cc cleaner? J'ai avast comme antivirus
|
|
|
|
|
voila, il m'en a retrouvé un:
Le virus a été détruit !
Nom du fichier : nnnnKbBQ.dll
ID du fichier : 41
Description du Virus : Win32:Vundo@dll [Trj]
|
|
Modérateur/Helper
|
|
|
Bonjour ? 
 Bonjour,
Avant de commencer la désinfection à proprement parler, voyons quelques points importants qui nous permettront d'être efficaces ensemble et surtout de prévenir d'éventuels dommages pour votre ordinateur.
N'ayez surtout pas peur de poser vos questions ! Il n'y a aucune question stupide. Au contraire, la question stupide est celle qui n'est pas posée : il ne faut rien faire dans le doute.
Merci faire les procédures que je vous donne dans l'ordre dans lequel je les ai postées. Si jamais vous n'arrivez pas à compléter une étape, ou bien que vous n'êtes pas certain de ce que vous faites, veuillez arrêter la procédure et informez-en moi.
Ne FIXER JAMAIS rien de votre propre initiative dans hijackthis ou d'autres programmes. Cela peut s'avérer être très dangereux et pourrait causer des dommages irréversibles sur votre système. Si jamais vous voyez des entrées, des fichiers, des dossiers, des programmes, etc. dont vous n'êtes pas sûr, n'hésitez pas à me poser la question.
N.B : Merci de prendre en compte que nous sommes bénévoles et que nous avons une vie privée. Soyez donc patients le temps que l'on vous réponde ; nous n'avons pas pour habitude de laisser des internautes en plan.
***
Télécharge Deckard's System Scanner (DSS) (ou DSS) sur ton Bureau.
N.B : Si pendant le téléchargement et/ou l’installation tu reçois une alerte de ton antivirus, ignore-là. Certains composants de dss scan peuvent être détectés comme un virus par certains antivirus.
NB : Tu dois être connecté avec des droits d'Administrateur.
ferme toutes les applications et fenêtres
double-clique sur dss.exe pour le lancer et suis les instructions ci-dessous
Attention, il est conseillé de stopper temporairement les logiciels résidents de protection (pare-feu, antivirus, etc.)
s'il s'agit d'une première utilisation ou d'une nouvelle version de DSS :
tu devras cliquer 2 fois sur le OK des boîtes de dialogue
Attention, si tu tardes trop, la réponse Abandon sera automatiquement validée
quand le traitement est terminé (clique sur OK), deux fichiers texte s'affichent :
main.txt <- ouvert en premier plan et en plein écran
extra.txt <- ouvert en second plan et en fenêtré (regarde la barre des taches)
S'il s'agit d'une utilisation supplémentaire de DSS :
tu n'auras pas de boîte de dialogue (pas de OK)
quand le traitement est terminé, un fichier texte s'affiche :
main.txt <- ouvert en premier plan et en plein écran
copie (Ctrl+A puis Ctrl+C) et colle (Ctrl+V) le contenu de main.txt dans ton prochain post
copie de même le contenu de extra.txt dans ton prochain post, si tu as ce fichier (première utilisation)
n'oublie pas de réactiver les protections si elles ont été stoppées.
Ce que fait DSS :
crée un point de restauration dans Windows XP et Vista
nettoie les fichiers temporaires, DPF-Downloaded Program Files et le Cache Internet, vide la Corbeille de tous les lecteurs
vérifie quelques zones importantes de ton système et établit un rapport pour examen par ton conseiller en sécurité. DSS lance automatiquement HijackThis pour toi; il va aussi créer un raccourci HijackThis sur ton Bureau si tu n'as pas déjà HijackThis d'installé.
|
|
|
|
|
merci pour ton aide!
voici le resultat du main.txt:
Deckard's System Scanner v20071014.68
Run by FABIEN on 2008-05-25 20:07:21
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
System Restore is disabled; attempting to re-enable...success.
-- Last 5 Restore Point(s) --
6: 2008-03-31 19:36:21 UTC - RP6 - Le KB911565 pour Lecteur Windows Media 10 a été installé.
5: 2008-03-31 19:36:05 UTC - RP5 - Le KB911564 pour Lecteur Windows Media a été installé.
4: 2008-03-31 19:35:45 UTC - RP4 - Installed Windows XP MSCompPackV1.
3: 2008-03-31 19:33:37 UTC - RP3 - Le %2 pour %1 a été installé.
2: 2008-03-31 19:24:44 UTC - RP2 - Le KB896256 pour Windows XP a été installé.
-- First Restore Point --
1: 2008-03-31 19:24:32 UTC - RP1 - Le KB920213 pour Windows XP a été installé.
Backed up registry hives.
Performed disk cleanup.
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-25 20:10:37
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\FABIEN\lsass.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\IcoSauve.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\FABIEN\Bureau\dss.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mysearchfunds.com/myhomepage.asp?OrgID=87057
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.stluc.ucl.ac.be:8080
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {3095D50F-F1BA-4BBC-A54D-819EEB7E0898} - C:\WINDOWS\system32\efcYPJYq.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar1.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: mysidesearch browser optimizer - {db4f683d-fb76-3940-b6ed-25ad476d829e} - C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.2] msime82.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [LManager] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LSA Shellu] C:\Documents and Settings\FABIEN\lsass.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsServer] msfun80.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [WinUpdater] "C:\Program Files\winvi\update.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: IcoSauve.lnk = C:\WINDOWS\system32\IcoSauve.exe
O4 - Global Startup: BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O11 - Options Group: [TABS] Tabbed Browsing
O15 - ProtocolDefaults: Unknown 'about:' protocol is in Restricted Zone (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuw(...)
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab Class) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://files-mjf.jeuxvideo-flash.com/popcap/popcaploader_v10_fr.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - Winlogon Notify: efcYPJYq - C:\WINDOWS\system32\efcYPJYq.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\ramaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
--
End of file - 15369 bytes
-- File Associations -----------------------------------------------------------
.js - jsfile - DefaultIcon - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe",7
.js - jsfile - shell\open\command - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"
.txt - txtfile - DefaultIcon - %windir%\NOTEPAD.EXE,0
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R1 Hotkey - c:\windows\system32\drivers\hotkey.sys
R2 BTSERIAL (Bluetooth Serial Driver) - c:\windows\system32\drivers\btserial.sys <Not Verified; Broadcom Corporation.; Bluetooth Software 5.0.1.1500>
R2 Haspnt - c:\windows\system32\drivers\haspnt.sys <Not Verified; Aladdin Knowledge Systems; Windows NT HASP Kernel Device Driver>
R2 s24trans (WLAN Transport) - c:\windows\system32\drivers\s24trans.sys <Not Verified; Intel Corporation; Intel Wireless LAN Packet Driver>
R2 WIBUKEY (WIBU-KEY Kernel Driver) - c:\windows\system32\drivers\wibukey.sys <Not Verified; WIBU-SYSTEMS AG; WIBU-KEY Software Protection System>
R3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
S1 InCDPass - c:\windows\system32\drivers\incdpass.sys (file missing)
S1 InCDRm (InCD Reader) - c:\windows\system32\drivers\incdrm.sys (file missing)
S1 Wbutton - c:\windows\system32\drivers\wbutton.sys (file missing)
S3 ASNDIS5 (ASNDIS5 Protocol Driver) - c:\windows\system32\asndis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
S3 ENTECH - c:\windows\system32\drivers\entech.sys <Not Verified; EnTech Taiwan; PowerStrip>
S3 RivaTuner32 - c:\program files\rivatuner v2.06\rivatuner32.sys
S3 w39n51 (Intel(R) PRO/Wireless 3945ABG Adapter Driver) - c:\windows\system32\drivers\w39n51.sys (file missing)
S4 InCDFs (InCD File System) - c:\windows\system32\drivers\incdfs.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Autodesk Licensing Service - "c:\program files\fichiers communs\autodesk shared\service\adskscsrv.exe" <Not Verified; Autodesk; Autodesk Licensing Service>
R2 Bonjour Service (##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##) - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Computer, Inc.; Bonjour>
R2 mi-raysat_3dsmax9_32 (mental ray 3.5 Satellite (32-bit)) - "c:\program files\autodesk\3ds max 9\mentalray\satellite\raysat_3dsmax9_32server.exe"
R2 RegSrvc (Intel(R) PROSet/Wireless Registry Service) - c:\program files\intel\wireless\bin\regsrvc.exe <Not Verified; Intel Corporation; Intel(R) PROSet/Wireless Registry Service>
R3 FLEXnet Licensing Service - "c:\program files\fichiers communs\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID:
Description: Modem Device on High Definition Audio Bus
Device ID: HDAUDIO\FUNC_02&VEN_11C1&DEV_1040&SUBSYS_10250100&REV_1002\4&25289786&0&0101
Manufacturer:
Name: Modem Device on High Definition Audio Bus
PNP Device ID: HDAUDIO\FUNC_02&VEN_11C1&DEV_1040&SUBSYS_10250100&REV_1002\4&25289786&0&0101
Service:
-- Scheduled Tasks -------------------------------------------------------------
2008-05-21 18:14:06 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2008-04-25 and 2008-05-25 -----------------------------
2008-05-24 01:34:00 372736 --a------ C:\WINDOWS\system32\khfDTJYr.dll
2008-05-24 00:31:24 372736 --a------ C:\WINDOWS\system32\mlJAqpqn.dll
2008-05-23 19:35:48 375296 --a------ C:\WINDOWS\system32\qoMeEUMg.dll
2008-05-23 19:35:48 37376 --a------ C:\WINDOWS\mrofinu1000106.exe
2008-05-22 23:26:08 1427 --ahs---- C:\WINDOWS\system32\wwybcMoq.ini2
2008-05-22 23:22:07 861 --a------ C:\WINDOWS\system32\winpfz33.sys
2008-05-22 23:21:37 687592 --a------ C:\WINDOWS\system32\atmtd.dll
2008-05-22 23:21:35 88961 --a------ C:\WINDOWS\system32\mysidesearch_sidebar_uninstall.exe
2008-05-22 23:21:28 0 d-------- C:\Documents and Settings\LocalService\Application Data\NetMon
2008-05-22 23:21:23 1989 --a------ C:\WINDOWS\uninstall_nmon.vbs
2008-05-22 23:21:23 0 d-------- C:\Program Files\Network Monitor
2008-05-22 23:21:22 0 d--hs---- C:\WINDOWS\RkFCSUVO
2008-05-22 23:21:20 298311 --a------ C:\WINDOWS\system32\gside.exe
2008-05-22 23:21:14 0 d-------- C:\Program Files\winvi
2008-05-22 23:21:13 0 d-------- C:\WINDOWS\system32\xnA
2008-05-22 23:21:13 0 d-------- C:\WINDOWS\system32\scoL1
2008-05-22 23:21:13 0 d-------- C:\WINDOWS\system32\3056v
2008-05-22 23:21:06 0 d-------- C:\WINDOWS\system32\vntiho18
2008-05-22 23:21:02 28160 --a------ C:\WINDOWS\system32\efcYPJYq.dll
2008-05-22 23:20:54 49664 --a------ C:\kl.exe
2008-05-22 23:20:49 14848 --a------ C:\Documents and Settings\FABIEN\services.exe
2008-05-22 23:20:27 83968 ---hs---- C:\Documents and Settings\FABIEN\lsass.exe
2008-05-19 15:55:20 439808 --a------ C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll
2008-05-14 19:06:38 0 d-------- C:\Program Files\Steam
2008-05-07 20:26:00 0 d-------- C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-05-05 10:08:57 0 d-------- C:\Program Files\eMule
2008-05-03 15:24:53 4682 --a------ C:\WINDOWS\system32\npptNT2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT>
2008-05-03 15:16:10 0 d-------- C:\Program Files\Lineage II
2008-04-28 11:37:46 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
-- Find3M Report ---------------------------------------------------------------
2008-05-24 20:08:57 0 d-------- C:\Documents and Settings\FABIEN\Application Data\LimeWire
2008-05-23 01:12:10 0 d-------- C:\Program Files\LogMeIn
2008-05-11 10:28:29 44239 --a------ C:\sound32.dll
2008-05-07 19:56:31 0 d-------- C:\Program Files\Electronic Arts
2008-05-03 15:16:09 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-05-02 14:24:47 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Adobe
2008-04-28 11:37:29 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Vso
2008-04-28 11:15:45 0 d-------- C:\Program Files\LimeWire
2008-04-27 12:57:56 492350 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-04-27 12:57:56 85590 --a------ C:\WINDOWS\system32\perfc00C.dat
2008-04-24 19:50:56 0 d-------- C:\Program Files\TmNationsForever
2008-04-23 00:04:14 6656 --a------ C:\WINDOWS\system32\haspvdd.dll <Not Verified; Aladdin Knowledge Systems.; Windows NT HASP Virtual Device Driver>
2008-04-23 00:04:14 383 --a------ C:\WINDOWS\system32\haspdos.sys
2008-04-23 00:03:39 0 d-------- C:\Program Files\NaturalMotion
2008-04-22 21:08:39 0 d-------- C:\Program Files\WIBU-SYSTEMS
2008-04-22 21:08:39 0 d-------- C:\Program Files\WIBUKEY
2008-04-22 21:08:15 0 d-------- C:\Program Files\Fichiers communs
2008-04-22 21:08:15 0 d-------- C:\Program Files\Fichiers communs\ChaosGroup
2008-04-22 21:08:13 0 d-------- C:\Program Files\Chaos Group
2008-04-22 21:05:48 0 d-------- C:\Documents and Settings\FABIEN\Application Data\combustion4
2008-04-22 17:38:46 0 d-------- C:\Documents and Settings\FABIEN\Application Data\dvdcss
2008-04-22 13:43:44 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Sony
2008-04-22 13:40:53 0 d-------- C:\Program Files\Sony
2008-04-22 13:34:12 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Publish Providers
2008-04-22 13:28:06 0 d-------- C:\Program Files\Microsoft SQL Server
2008-04-22 13:26:51 0 d-------- C:\Program Files\Vstplugins
2008-04-22 13:25:40 0 d-------- C:\Program Files\Sony Setup
2008-04-22 13:23:33 0 d-------- C:\Program Files\PROSONIQ PRODUCTS SOFTWARE
2008-04-22 13:16:33 0 d-------- C:\Program Files\Ubisoft
2008-04-22 13:15:03 0 d-------- C:\Program Files\AviSynth 2.5
2008-04-17 19:22:06 0 d-------- C:\Program Files\GameShadow
2008-04-17 19:18:26 0 d-------- C:\Program Files\OpenAL
2008-04-17 19:03:45 0 d-------- C:\Program Files\Fichiers communs\InstallShield
2008-04-15 16:26:11 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Command & Conquer 3 Les guerres du Tiberium
2008-04-15 12:39:06 0 d-------- C:\Program Files\Fichiers communs\Logitech
2008-04-15 12:35:11 0 d-------- C:\Program Files\Logitech
2008-04-13 21:59:34 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Google
2008-04-13 21:55:18 0 d-------- C:\Program Files\Google
2008-04-11 00:16:42 0 d-------- C:\Program Files\backburner 2
2008-04-11 00:15:44 0 d-------- C:\Program Files\discreet
2008-04-08 14:28:08 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Apple Computer
2008-04-08 14:19:49 0 d-------- C:\Program Files\QuickTime
2008-04-08 14:18:59 0 d-------- C:\Program Files\Apple Software Update
2008-04-08 14:02:07 0 d-------- C:\Program Files\Fichiers communs\Adobe
2008-04-08 13:59:27 0 d-------- C:\Program Files\Fichiers communs\Control Panels
2008-04-08 13:22:16 0 d-------- C:\Program Files\Bonjour
2008-04-08 13:16:57 0 d-------- C:\Program Files\Fichiers communs\Macrovision Shared
2008-04-07 20:15:17 0 d-------- C:\Program Files\Fichiers communs\Autodesk Shared
2008-04-07 20:09:20 0 d-------- C:\Program Files\Autodesk
2008-04-07 00:52:47 0 d-------- C:\Program Files\Futuremark
2008-04-06 22:05:16 0 d-------- C:\Program Files\RivaTuner v2.06
2008-04-06 20:13:16 0 d-------- C:\Program Files\SystemRequirementsLab
2008-04-06 18:40:30 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Azureus
2008-04-06 18:15:53 0 d-------- C:\Program Files\AGEIA Technologies
2008-04-06 18:15:33 0 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-04-06 18:15:22 0 d-------- C:\Program Files\Azureus
2008-04-04 17:47:35 0 d-------- C:\Program Files\Activision
2008-04-02 23:14:05 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Ubisoft
2008-04-02 22:59:32 0 d-------- C:\Documents and Settings\FABIEN\Application Data\InstallShield
2008-04-02 22:54:44 0 d-------- C:\Program Files\D-Tools
2008-04-02 18:57:05 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Talkback
2008-04-02 18:56:51 0 --a------ C:\WINDOWS\nsreg.dat
2008-04-02 18:56:47 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Mozilla
2008-04-01 22:07:57 0 d--hs--c- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-01 21:39:53 0 d-------- C:\Program Files\MSXML 6.0
2008-04-01 21:29:45 0 d-------- C:\Program Files\GameHouse
2008-04-01 21:28:08 0 --a------ C:\WINDOWS\popcinfo.dat
2008-04-01 21:28:08 0 d-------- C:\Program Files\PopCap Games
2008-04-01 21:22:41 4608 --a------ C:\WINDOWS\system32\w95inf32.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95>
2008-04-01 21:22:41 2272 --a------ C:\WINDOWS\system32\w95inf16.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95>
2008-04-01 21:21:49 0 d-------- C:\Program Files\DVDFab Gold 3
2008-04-01 21:21:10 34 --a------ C:\Documents and Settings\FABIEN\Application Data\pcouffin.log
2008-04-01 21:21:06 47360 --a------ C:\Documents and Settings\FABIEN\Application Data\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
2008-04-01 21:21:06 1144 --a------ C:\Documents and Settings\FABIEN\Application Data\pcouffin.inf
2008-04-01 21:21:06 7887 --a------ C:\Documents and Settings\FABIEN\Application Data\pcouffin.cat
2008-04-01 21:18:54 0 d-------- C:\Program Files\3Planesoft Screensaver Manager
2008-04-01 21:18:53 0 d-------- C:\Program Files\Galleon 3D Screensaver
2008-04-01 21:12:50 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Macromedia
2008-04-01 21:09:41 0 d-------- C:\Program Files\Easy CD-DA Extractor 10
2008-04-01 21:09:26 0 d-------- C:\Program Files\Windows Live
2008-04-01 20:46:26 0 d-------- C:\Program Files\Lavalys
2008-04-01 20:41:11 0 d-------- C:\Program Files\Launch Manager
2008-04-01 20:39:55 0 d-------- C:\Program Files\Acer Inc
2008-04-01 20:39:07 0 d-------- C:\Program Files\Realtek
2008-04-01 20:03:35 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Intel
2008-04-01 20:02:45 0 d-------- C:\Program Files\Intel
2008-04-01 19:58:39 0 d-------- C:\Program Files\WIDCOMM
2008-04-01 19:54:25 0 d-------- C:\Program Files\Synaptics
2008-04-01 19:43:34 0 d-------- C:\Program Files\Corel
2008-04-01 19:43:23 0 d-------- C:\Documents and Settings\FABIEN\Application Data\ACD Systems
2008-04-01 19:41:06 2516 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-04-01 19:38:11 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Corel
2008-04-01 19:37:44 0 d-------- C:\Documents and Settings\FABIEN\Application Data\vlc
2008-04-01 19:37:33 88 -r-hs---- C:\WINDOWS\system32\26D7E2AB9A.sys
2008-04-01 19:35:21 0 d-------- C:\Documents and Settings\FABIEN\Application Data\WinRAR
2008-04-01 19:34:19 0 d-------- C:\Program Files\Fichiers communs\ACD Systems
2008-04-01 19:34:10 0 d-------- C:\Program Files\ACD Systems
2008-04-01 19:32:38 0 d-------- C:\Program Files\VideoLAN
2008-04-01 12:28:23 0 d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
2008-04-01 12:15:23 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Real
2008-04-01 12:13:27 0 d-------- C:\Program Files\Fichiers communs\xing shared
2008-04-01 12:13:24 0 d-------- C:\Program Files\Fichiers communs\Real
2008-04-01 12:13:11 0 d-------- C:\Program Files\Real
2008-04-01 07:49:28 0 d-------- C:\Program Files\Microsoft Works
2008-04-01 07:49:04 0 d-------- C:\Program Files\Microsoft.NET
2008-04-01 07:46:45 0 d-------- C:\Documents and Settings\FABIEN\Application Data\InterTrust
2008-04-01 06:35:38 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Ahead
2008-04-01 06:35:07 0 d-------- C:\Program Files\Nero
2008-04-01 06:35:07 0 d-------- C:\Program Files\Fichiers communs\Ahead
2008-04-01 06:31:45 0 d-------- C:\Program Files\Alwil Software
2008-03-31 23:01:35 0 d-------- C:\Program Files\Fichiers communs\ODBC
2008-03-31 23:01:31 0 d-------- C:\Program Files\Fichiers communs\SpeechEngines
2008-03-31 23:00:57 62 --ahs---- C:\Documents and Settings\FABIEN\Application Data\desktop.ini
2008-03-31 21:42:12 0 d-a------ C:\Documents and Settings\FABIEN\Application Data\gtopala
2008-03-31 21:42:12 0 d-a------ C:\Documents and Settings\FABIEN\Application Data\aignes
2008-03-31 21:41:59 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Identities
2008-03-31 21:37:04 0 d-------- C:\Program Files\Java
2008-03-31 21:37:04 0 d-------- C:\Program Files\Fichiers communs\Java
2008-03-31 21:36:59 0 d-------- C:\Documents and Settings\FABIEN\Application Data\Sun
2008-03-31 21:35:50 0 d-------- C:\Program Files\WMV9_VCM
2008-03-31 21:35:30 0 d-------- C:\Program Files\Windows Media Connect 2
2008-03-31 21:23:42 0 d-------- C:\Program Files\MSXML 4.0
2008-03-31 21:22:28 0 d-------- C:\Program Files\WSTARTUP
2008-03-31 21:22:27 0 d-------- C:\Program Files\UTILS
2008-03-31 21:22:27 0 d-------- C:\Program Files\JEUX
2008-03-31 21:15:13 0 d-------- C:\Program Files\microsoft frontpage
2008-03-31 21:14:34 0 -rahs---- C:\MSDOS.SYS
2008-03-31 21:14:34 0 -rahs---- C:\IO.SYS
2008-03-31 21:14:34 0 --a------ C:\CONFIG.SYS
2008-03-31 21:13:13 0 d--h----- C:\Program Files\WindowsUpdate
2008-03-31 21:12:30 0 d-------- C:\Program Files\Fichiers communs\MSSoap
2008-03-31 21:12:21 0 d-------- C:\Program Files\Movie Maker
2008-03-31 21:11:19 21892 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-03-31 21:10:43 0 d-------- C:\Program Files\MSN Gaming Zone
2008-03-31 21:10:39 0 d-------- C:\Program Files\Windows NT
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3095D50F-F1BA-4BBC-A54D-819EEB7E0898}]
22/05/2008 23:21 28160 --a------ C:\WINDOWS\system32\efcYPJYq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{db4f683d-fb76-3940-b6ed-25ad476d829e}]
19/05/2008 15:55 439808 --a------ C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.2"="msime82.exe" []
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [06/09/2007 12:06]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [09/07/2001 10:50]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [19/01/2006 08:43]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [19/01/2006 08:43]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [11/06/2005 19:51]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [01/04/2008 12:13]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [16/12/2005 16:32]
"RTHDCPL"="RTHDCPL.EXE" [11/01/2006 17:23 C:\WINDOWS\RTHDCPL.exe]
"Alcmtr"="ALCMTR.EXE" [03/05/2005 18:43 C:\WINDOWS\Alcmtr.exe]
"LaunchAp"="C:\Program Files\Launch Manager\LaunchAp.exe" [25/07/2005 13:36]
"LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe" [21/02/2006 09:46]
"CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe" [16/09/2003 14:28]
"LMgrOSD"="C:\Program Files\Launch Manager\OSDCtrl.exe" [25/07/2005 10:45]
"Wbutton"="C:\Program Files\Launch Manager\Wbutton.exe" [14/03/2006 14:33]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [02/08/2006 00:38]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [02/08/2006 00:32]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [22/08/2004 17:05]
"nwiz"="nwiz.exe" [19/01/2006 08:43 C:\WINDOWS\system32\nwiz.exe]
"LogMeIn GUI"="C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" [03/08/2007 15:09]
"Acrobat Assistant 8.0"="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [11/01/2008 19:54]
"@"="" []
"Adobe_ID0EYTHM"="C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" [20/03/2007 16:40]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [28/03/2008 23:37]
"LSA Shellu"="C:\Documents and Settings\FABIEN\lsass.exe" [23/04/2008 15:43]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [19/08/2004 18:09]
"MsServer"="msfun80.exe" []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [28/10/2005 16:25]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [18/10/2007 11:34]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [17/04/2008 22:58]
"Steam"="c:\program files\steam\steam.exe" [14/05/2008 19:39]
"WinUpdater"="C:\Program Files\winvi\update.exe" []
C:\Documents and Settings\FABIEN\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [16/03/2005 19:16:50]
IcoSauve.lnk - C:\WINDOWS\system32\IcoSauve.exe [31/03/2008 21:23:24]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [17/01/2006 10:45:32]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"=0 (0x0)
"SynchronousUserGroupPolicy"=0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRemoteRecursiveEvents"=1 (0x1)
"NoLowDiskSpaceChecks"=1 (0x1)
"ForceClassicControlPanel"=1 (0x1)
"NoSimpleStartMenu"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"=0 (0x0)
"NoSaveSettings"=0 (0x0)
"NoTrayItemsDisplay"=0 (0x0)
"NoToolbarsOnTaskbar"=0 (0x0)
"LockTaskbar"=0 (0x0)
"NoResolveTrack"=0 (0x0)
"NoResolveSearch"=0 (0x0)
"NoNetworkConnections"=0 (0x0)
"NoRun"=0 (0x0)
"NoSMHelp"=0 (0x0)
"NoRecentDocsMenu"=0 (0x0)
"NoFind"=0 (0x0)
"NoSMMyPictures"=0 (0x0)
"NoRecentDocsHistory"=0 (0x0)
"NoStartMenuMFUprogramsList"=0 (0x0)
"NoUserNameInStartMenu"=0 (0x0)
"NoStartMenuMorePrograms"=0 (0x0)
"ClearRecentDocsOnExit"=0 (0x0)
"MaxRecentDocs"=15 (0xf)
"NoInstrumentation"=0 (0x0)
"MemCheckBoxInRunDlg"=1 (0x1)
"NoSMBalloonTip"=0 (0x0)
"DisallowCpl"=1 (0x1)
"ForceActiveDesktopOn"=1
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\DisallowCpl]
"1"=Polices
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{3095D50F-F1BA-4BBC-A54D-819EEB7E0898}"= C:\WINDOWS\system32\efcYPJYq.dll [22/05/2008 23:21 28160]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\efcYPJYq]
efcYPJYq.dll 22/05/2008 23:21 28160 C:\WINDOWS\system32\efcYPJYq.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
LMIinit.dll 15/11/2007 18:46 87352 C:\WINDOWS\system32\LMIinit.dll
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
AutoRun\command- G:\setupSNK.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8583b6d4-ff5f-11dc-8d7c-806d6172696f}]
Auto\command- fun.xls.exe
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b7962784-0152-11dd-a875-0019d2654012}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c5d292b1-ffa2-11dc-aaa6-db748b6641f6}]
Auto\command- F:\fun.xls.exe
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL fun.xls.exe
-- End of Deckard's System Scanner: finished at 2008-05-25 20:11:46 ------------
et le resultat de l'extra.txt;
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Professionnel (build 2600) SP 2.0
Architecture: X86; Language: French
CPU 0: Genuine Intel(R) CPU T2080 @ 1.73GHz
CPU 1: Genuine Intel(R) CPU T2080 @ 1.73GHz
Percentage of Memory in Use: 56%
Physical Memory (total/avail): 1022.11 MiB / 440.37 MiB
Pagefile Memory (total/avail): 2459.04 MiB / 2001.81 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1914.4 MiB
C: is Fixed (NTFS) - 73.24 GiB total, 12.25 GiB free.
D: is Fixed (NTFS) - 75.81 GiB total, 19.59 GiB free.
E: is CDROM (No Media)
F: is CDROM (CDFS)
H: is CDROM (No Media)
\\.\PHYSICALDRIVE0 - Hitachi HTS541616J9SA00 - 149.05 GiB - 2 partitions
\PARTITION0 (bootable) - Système de fichiers installable - 73.24 GiB - C:
\PARTITION1 - Système de fichiers installable - 75.81 GiB - D:
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.
FirstRunDisabled is set.
Unable to create WMI object.
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\FABIEN\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=FABIEN-80983969
ComSpec=C:\WINDOWS\system32\cmd.exe
DEVMGR_SHOW_DETAILS=1
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\FABIEN
LOGONSERVER=\\FABIEN-80983969
MAYA_SCRIPT_PATH=C:\PROGRAM FILES\NATURALMOTION\ENDORPHIN 2.0\RESOURCES\THIRD PARTY\SCRIPTS\MAYA
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\Program Files\Fichiers communs\Adobe\AGL;C:\Program Files\Autodesk\Backburner\;C:\Program Files\Fichiers communs\Autodesk Shared\;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\backburner 2\;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 14 Stepping 12, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0e0c
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\FABIEN\LOCALS~1\Temp
TMP=C:\DOCUME~1\FABIEN\LOCALS~1\Temp
USERDOMAIN=FABIEN-80983969
USERNAME=FABIEN
USERPROFILE=C:\Documents and Settings\FABIEN
windir=C:\WINDOWS
-- User Profiles ---------------------------------------------------------------
FABIEN [I](admin)[/I]
LogMeInRemoteUser [I](new local, admin)[/I]
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
--> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
--> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNRecode.exe /UNINSTALL
--> MsiExec /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
--> MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3DMark03 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF35F637-72B9-43BE-A281-06EB2854393A}\Setup.exe" -l0x9
3DMark05 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2DF7B278-D3B6-40A4-B25C-0E7149F439EA}\setup.exe" -l0x9 -removeonly
3dsmax ancillary install --> MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
3Planesoft Screensaver Manager 1.0 --> "C:\Program Files\3Planesoft Screensaver Manager\unins000.exe"
ACDSee 10 Gestionnaire de photos --> MsiExec.exe /I{F8B98EB6-FC06-45BF-87D4-9784E0408611}
Acer GridVista --> C:\WINDOWS\UnInst32.exe GridV.UNI
Acer OrbiCam --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4A57592C-FF92-4083-97A9-92783BD5AFB4}\Setup.exe" -l0x40c
Adobe Acrobat 5.0 --> C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe After Effects CS3 --> MsiExec.exe /I{EB0202F7-016A-410C-ADE4-40F848CCC661}
Adobe After Effects CS3 Presets --> MsiExec.exe /I{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}
Adobe Anchor Service CS3 --> MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3 --> MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000101}
Adobe Bridge CS3 --> MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting --> MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe BridgeTalk Plugin CS3 --> MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
Adobe Camera Raw 4.0 --> MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps --> MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific --> MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings --> C:\Program Files\Fichiers communs\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
Adobe Color Common Settings --> MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}
Adobe Color EU Recommended Settings --> MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings --> MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings --> MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
Adobe Contribute CS3 --> MsiExec.exe /I{F84ADE4E-9220-4324-994D-801EDD9DD251}
Adobe Creative Suite 3 Master Collection --> MsiExec.exe /I{5D2398DF-3022-4820-93BA-F1175FBEA9CA}
Adobe Default Language CS3 --> MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3 --> MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe Dreamweaver CS3 --> MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B}
Adobe Encore CS3 --> MsiExec.exe /I{54B2EAD9-A110-43F7-B010-2859A1BD2AFE}
Adobe Encore CS3 Codecs --> MsiExec.exe /I{B8B7A4D8-80E1-4DAE-BD33-7FD535BA3931}
Adobe ExtendScript Toolkit 2 --> C:\Program Files\Fichiers communs\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2 --> MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Extension Manager CS3 --> MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}
Adobe Fireworks CS3 --> MsiExec.exe /I{21C4D775-368A-46C4-8DC3-4207165B7115}
Adobe Flash CS3 --> MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F}
Adobe Flash Player 9 ActiveX --> MsiExec.exe /X{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}
Adobe Flash Player 9 Plugin --> MsiExec.exe /X{88D422DB-E9C7-4E16-9D80-2999F4FD6AD9}
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Video Encoder --> MsiExec.exe /I{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}
Adobe Fonts All --> MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Center 1.0 --> MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
Adobe Help Viewer CS3 --> MsiExec.exe /I{7ACFB90E-8FD0-4397-AD3A-5195412623A3}
Adobe Illustrator CS3 --> MsiExec.exe /I{6E08CE13-C2AB-4749-9335-5900B958929E}
Adobe InDesign CS3 --> MsiExec.exe /I{FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}
Adobe InDesign CS3 Icon Handler --> MsiExec.exe /I{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}
Adobe Linguistics CS3 --> MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe MotionPicture Color Files --> MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77}
Adobe PDF Library Files --> MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS2 --> msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
Adobe Photoshop CS3 --> MsiExec.exe /I{C1FA4B3B-1625-4922-9C9D-780E8FCE161A}
Adobe Premiere Pro CS3 --> MsiExec.exe /I{58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}
Adobe Premiere Pro CS3 Functional Content --> MsiExec.exe /I{50F102CA-4BE2-41A9-9810-5BB05EB91B9A}
Adobe Premiere Pro CS3 Third Party Content --> MsiExec.exe /I{485ACF57-F364-440A-8496-E1E81C8FA1AA}
Adobe Setup --> MsiExec.exe /I{1628F6BD-5ED1-4FD1-B90F-C106AF4E00F0}
Adobe Setup --> MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}
Adobe Setup --> MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Shockwave Player --> MsiExec.exe /X{A7DB362E-16DC-4E29-8A34-E74381E00B5B}
Adobe SING CS3 --> MsiExec.exe /I{B671CBFD-4109-4D35-9252-3062D3CCB7B2}
Adobe Soundbooth CS3 --> MsiExec.exe /I{A6B23EFA-6590-482C-A11F-5ACE1B91F5B9}
Adobe Soundbooth CS3 Codecs --> MsiExec.exe /I{0327FA9D-975C-448C-A086-577D57BB25B8}
Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
Adobe Stock Photos CS3 --> MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support --> MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3 --> MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client --> MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe Version Cue CS3 Server {ko_KR} --> MsiExec.exe /I{1D58229F-C505-45CA-8223-F35F3A34B963}
Adobe Video Profiles --> MsiExec.exe /I{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}
Adobe WAS CS3 --> MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE}
Adobe WinSoft Linguistics Plugin --> MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP DVA Panels CS3 --> MsiExec.exe /I{0224CACC-994D-45F8-B973-D65056EA9C2F}
Adobe XMP Panels CS3 --> MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1}
AGEIA PhysX v7.07.09 --> MsiExec.exe /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
AHV content for Acrobat and Flash --> MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
Ajouter ou supprimer Adobe Creative Suite 3 Master Collection --> C:\Program Files\Fichiers communs\Adobe\Installers\b5d5789539ea1f004a4defceea74312\Setup.exe
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR --> C:\Program Files\WinRAR\uninstall.exe
Assassin's Creed --> C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
Assistant de connexion Windows Live --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Autodesk 3ds Max 9 32-bit --> MsiExec.exe /I{E96D4088-AAC5-437F-9E39-EC0E387897B4}
Autodesk DWF Viewer 7 --> MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
Azureus Vuze --> C:\Program Files\Azureus\uninstall.exe
Backburner --> MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
backburner 2.3 --> MsiExec.exe /I{805A148C-045F-45D9-B837-BAA678DDA212}
Call of Duty(R) 4 - Modern Warfare(TM) --> C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
Chainz --> C:\PROGRA~1\GAMEHO~1\Chainz\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Chainz\INSTALL.LOG
Chuzzle Deluxe 1.0 --> C:\Program Files\PopCap Games\Chuzzle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Chuzzle Deluxe\Install.log"
Client Windows Rights Management avec Service Pack 2 --> MsiExec.exe /X{1D13221B-42DE-4B3C-A43F-0F6AF3CF3DA2}
combustion 4 --> C:\WINDOWS\unvise32.exe C:\Program Files\discreet\combustion 4\uninstal.log
Command --> wscript "C:\WINDOWS\RkFCSUVO\l4IFmopi.vbs"
Command & Conquer 3 --> MsiExec.exe /I{B0C30E93-D3D9-4F04-A2AC-54749B573275}
Correctif pour Lecteur Windows Media 11 (KB939683) --> "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448) --> "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Counter-Strike: Source --> MsiExec.exe /I{9580813D-94B1-4C28-9426-A441E2BB29A5}
DAEMON Tools --> MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}
Deewoo Network Manager removal --> C:\WINDOWS\system32\kcntokdm.exe -UPop
DVDFab Gold 3.1.3.2 --> "C:\Program Files\DVDFab Gold 3\unins000.exe"
Easy CD-DA Extractor 10 --> "C:\WINDOWS\Easy CD-DA Extractor\uninstall.exe" "/U:C:\Program Files\Easy CD-DA Extractor 10\irunin.xml"
eMule --> "C:\Program Files\eMule\Uninstall.exe"
EVEREST Ultimate Edition v4.20 --> "C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
FBX Plugin 2006.08 for Max 9.0 --> C:\Program Files\Autodesk\FBX\FbxPlugins\2006.08\Max90\Uninstall.exe
Galleon 3D Screensaver 1.3 --> "C:\Program Files\Galleon 3D Screensaver\unins000.exe"
GameShadow --> MsiExec.exe /I{16393B5A-43A8-434B-B22A-0724581F7873}
Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
High Definition Audio Driver Package - KB888111 --> "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Java(TM) SE Runtime Environment 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
Jewel Quest --> C:\PROGRA~1\GAMEHO~1\JEWELQ~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\JEWELQ~1\INSTALL.LOG
Launch Manager V1.1.0.0 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D0846526-66DD-4DC9-A02C-98F9A2806812}\Setup.exe" -l0x40c
LimeWire 4.16.7 --> "C:\Program Files\LimeWire\uninstall.exe"
Lineage II --> C:\Program Files\InstallShield Installation Information\{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}\setup.exe -runfromtemp -l0x0009 -removeonly
Logiciel Intel(R) PROSet/Wireless --> C:\WINDOWS\Installer\iProInst.exe
LogMeIn --> MsiExec.exe /I{7E7658A2-CD3F-48A7-93EA-0882BCA4FD2A}
Luxor: Amun Rising --> C:\PROGRA~1\GAMEHO~1\LUXORA~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\LUXORA~1\INSTALL.LOG
mCore --> MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
mDriver --> MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}
mDrWiFi --> MsiExec.exe /I{90CC4231-94AC-45CD-991A-0253BFAC0650}
Medal of Honor Airborne --> MsiExec.exe /X{25F28E39-FDBB-11DB-8314-0800200C9A66}
mHelp --> MsiExec.exe /I{8C6BB412-D3A8-4AAE-A01B-35B681789D68}
Microsoft Office PowerPoint Viewer 2003 --> MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) --> MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Windows Media Video 9 VCM --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) --> "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) --> "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902) --> "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123) --> "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178) --> "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261) --> "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784) --> "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168) --> "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729) --> "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839) --> "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840) --> "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021) --> "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937894) --> "C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829) --> "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202) --> "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568) --> "C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569) --> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644) --> "C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693) --> "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055) --> "C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460) --> "C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485) --> "C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653) --> "C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553) --> "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026) --> "C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590) --> "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881) --> "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749) --> "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891) --> "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916) --> "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB936357) --> "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828) --> "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763) --> "C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
mIWA --> MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F}
mLogView --> MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
mMHouse --> MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
mPfMgr --> MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mPfWiz --> MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9}
mProSafe --> MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
mWlsSafe --> MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
mXML --> MsiExec.exe /I{9CC89556-3578-48DD-8408-04E66EBEF401}
MySidesearch Search Assistant Adzgalore --> C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll-uninst.exe
mZConfig --> MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023}
NaturalMotion endorphin 2.0 --> "C:\Program Files\NaturalMotion\endorphin 2.0\unins000.exe"
Nero 7 Demo --> MsiExec.exe /I{C985153C-3801-EB63-1432-088E71801033}
Network Monitor --> wscript "C:\WINDOWS\uninstall_nmon.vbs"
NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OpenAL --> "C:\Program Files\OpenAL\oalinst.exe" /U
PDF Settings --> MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PROSONIQ Timefactory II --> C:\WINDOWS\uninst.exe -f"C:\Program Files\PROSONIQ PRODUCTS SOFTWARE\PROSONIQ Timefactory II\DeIsL1.isu" -c"C:\Program Files\PROSONIQ PRODUCTS SOFTWARE\PROSONIQ Timefactory II\_ISREG32.DLL"
QuickTime --> MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
RealPlayer --> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
REALTEK PCIE NIC Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E2F183-BAC4-4D01-BD7A-59F781E17EFA}\Setup.exe" -l0x40c REMOVE
RivaTuner v2.06 --> "C:\Program Files\RivaTuner v2.06\uninstall.exe"
SimCity™ Sociétés --> MsiExec.exe /X{0B5154C0-8F00-4616-B0AB-6240AE80D9CE}
Sony Media Manager 2.2 --> MsiExec.exe /X{47AA42FD-0450-4CB4-ADAF-B6E770AA7B2F}
Sony Sound Forge 8.0d --> MsiExec.exe /X{5636E517-8100-4E2A-B69E-2B16AFFA2360}
Sony Vegas 7.0b --> MsiExec.exe /X{EC6BAAC5-F5E0-48D4-B4B6-7C654DD54086}
Steam(TM) --> MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Synaptics Pointing Device Driver --> rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
System Requirements Lab --> C:\Program Files\SystemRequirementsLab\Uninstall.exe
Texas Instruments PCIxx21/x515 drivers. --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{FF6F491D-BC82-4DCC-A72F-1824957C6466} /l1036
TmNationsForever --> "C:\Program Files\TmNationsForever\unins000.exe"
V-Ray for 3dsmax R9 for x86 --> "C:\Program Files\Chaos Group\V-Ray\3dsmax R9 for x86\uninstall\wininstaller.exe"-uninstall="C:\Program Files\Chaos Group\V-Ray\3dsmax R9 for x86\uninstall\install.log" -uninstallApp="V-Ray for 3dsmax R9 for x86"
VideoLAN VLC media player 0.8.6a --> C:\Program Files\VideoLAN\VLC\uninstall.exe
WIBU-KEY Setup (WIBU-KEY Remove) --> C:\Program Files\WIBUKEY\Setup\Setup32.exe /R:{00060000-0000-1004-8002-0000C06B5161}
WIDCOMM Bluetooth Software --> MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}
Windows Live installer --> MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger --> MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
winvi (remove only) --> "C:\Program Files\winvi\uninst.exe"
-- Application Event Log -------------------------------------------------------
Event Record #/Type2859 / Success
Event Submitted/Written: 05/25/2008 10:58:39 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.
Event Record #/Type2836 / Success
Event Submitted/Written: 05/24/2008 06:13:11 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.
Event Record #/Type2812 / Success
Event Submitted/Written: 05/24/2008 02:37:10 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.
Event Record #/Type2775 / Error
Event Submitted/Written: 05/23/2008 01:05:57 AM
Event ID/Source: 1 / nview_info
Event Description:
NVIEW : rundll32: Mutex Recovery Code - App explorer has *NOT* been disabled in our persistent table (hardcoded to be on)
Event Record #/Type2774 / Error
Event Submitted/Written: 05/23/2008 01:05:42 AM
Event ID/Source: 1 / nview_info
Event Description:
NVIEW : rundll32: Mutex Recovery
|
|
|
|
|
oui  désolé, bonjour
je suis désolé, avec ce ou ces virus je suis assez à cran lol, je suis en blocus et le pc est mon outil de travail (je suis en infographie :s)
je te remercie de prendre soin de moi (surtout de mon pc)
|
|
Modérateur/Helper
|
|
|
|
|
 oki! alors, voici le rapport pour comboFix:
ComboFix 08-05-25.3 - FABIEN 2008-05-25 23:03:56.1 - NTFSx86 MINIMAL
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.783 [GMT 2:00]
Endroit: C:\Documents and Settings\FABIEN\Bureau\ComboFix.exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\autorun.inf
C:\Documents and Settings\FABIEN\Application Data\inst.exe
C:\Documents and Settings\FABIEN\lsass.exe
C:\kl.exe
C:\Program Files\network monitor
C:\Program Files\winvi
C:\Program Files\winvi\dsktp\AC_RunActiveContent.js
C:\Program Files\winvi\dsktp\desktop.html
C:\Program Files\winvi\dsktp\internetDetection.swf
C:\Program Files\winvi\dsktp\settings.sol
C:\Program Files\winvi\Uninst.exe
C:\Program Files\winvi\version.ini
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\WINDOWS\mrofinu1000106.exe
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._
C:\WINDOWS\system32\khfDTJYr.dll
C:\WINDOWS\system32\mlJAqpqn.dll
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\msnav32.ax
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\tmp48.tmp
C:\WINDOWS\system32\tmp49.tmp
C:\WINDOWS\system32\txtkuwgm.ini
C:\WINDOWS\system32\wwybcMoq.ini
C:\WINDOWS\system32\wwybcMoq.ini2
C:\WINDOWS\system32\zxdnt3d.cfg
C:\WINDOWS\ufdata2000.log
C:\WINDOWS\uninstall_nmon.vbs
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_CMDSERVICE
-------\Legacy_NETWORK_MONITOR
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-25 to 2008-05-25 ))))))))))))))))))))))))))))))))))))
.
2008-05-25 22:57 . 2008-03-31 23:00 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2008-05-25 22:57 . 2008-03-31 23:00 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-05-25 22:57 . 2008-03-31 21:10 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2008-05-25 22:57 . 2008-03-31 23:00 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-05-25 22:57 . 2008-03-31 23:00 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2008-05-25 22:57 . 2008-03-31 23:00 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-05-25 22:57 . 2008-03-31 23:00 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-05-25 22:57 . 2008-04-01 20:55 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-05-25 22:57 . 2008-05-25 22:57 <REP> d-------- C:\Documents and Settings\Administrateur
2008-05-25 20:06 . 2008-05-25 20:06 <REP> d-------- C:\Deckard
2008-05-23 19:35 . 2008-05-23 19:35 375,296 --a------ C:\WINDOWS\system32\qoMeEUMg.dll
2008-05-22 23:22 . 2008-05-22 23:22 95,833 --a------ C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll-uninst.exe
2008-05-22 23:22 . 2008-05-22 23:22 861 --a------ C:\WINDOWS\system32\winpfz33.sys
2008-05-22 23:21 . 2008-05-23 19:35 <REP> d-------- C:\WINDOWS\system32\xnA
2008-05-22 23:21 . 2008-05-22 23:21 <REP> d-------- C:\WINDOWS\system32\vntiho18
2008-05-22 23:21 . 2008-05-22 23:21 <REP> d-------- C:\WINDOWS\system32\scoL1
2008-05-22 23:21 . 2008-05-23 23:11 <REP> d-------- C:\WINDOWS\system32\3056v
2008-05-22 23:21 . 2008-05-25 12:03 <REP> d--hs---- C:\WINDOWS\RkFCSUVO
2008-05-22 23:21 . 2008-05-22 23:21 <REP> d-------- C:\temp\vtmp2
2008-05-22 23:21 . 2008-05-22 23:21 298,311 --a------ C:\WINDOWS\system32\gside.exe
2008-05-22 23:21 . 2008-05-22 23:21 88,961 --a------ C:\WINDOWS\system32\mysidesearch_sidebar_uninstall.exe
2008-05-22 23:21 . 2008-05-22 23:21 28,160 --a------ C:\WINDOWS\system32\efcYPJYq.dll
2008-05-22 23:20 . 2008-05-22 23:20 14,848 --a------ C:\Documents and Settings\FABIEN\services.exe
2008-05-20 23:13 . 2008-05-20 23:13 32,768 --a------ C:\WINDOWS\system32\vntiho18\vntiho182328.exe
2008-05-19 15:55 . 2008-05-19 15:55 439,808 --a------ C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll
2008-05-18 21:40 . 2008-05-24 20:07 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-18 21:40 . 2008-05-18 21:40 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-14 19:06 . 2008-05-25 23:15 <REP> d-------- C:\Program Files\Steam
2008-05-07 20:26 . 2008-05-07 20:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-05-05 10:08 . 2008-05-24 12:36 <REP> d-------- C:\Program Files\eMule
2008-05-03 15:24 . 2006-02-04 03:50 5,174 --a------ C:\WINDOWS\system32\nppt9x.vxd
2008-05-03 15:24 . 2006-02-04 03:50 4,682 --a------ C:\WINDOWS\system32\npptNT2.sys
2008-05-03 15:16 . 2008-05-03 15:25 <REP> d-------- C:\Program Files\Lineage II
2008-05-02 14:54 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-05-01 13:40 . 2008-05-01 13:40 268 --ah----- C:\sqmdata02.sqm
2008-05-01 13:40 . 2008-05-01 13:40 244 --ah----- C:\sqmnoopt02.sqm
2008-04-28 11:38 . 2008-04-28 11:38 766 --a------ C:\WINDOWS\CDPLAYER.UNI
2008-04-28 11:37 . 2008-04-28 11:47 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-25 21:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-05-24 18:08 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\LimeWire
2008-05-22 23:12 --------- d-----w C:\Program Files\LogMeIn
2008-05-11 08:28 44,239 ----a-w C:\sound32.dll
2008-05-07 17:56 --------- d-----w C:\Program Files\Electronic Arts
2008-05-03 13:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-01 15:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\TrackMania
2008-04-28 09:37 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Vso
2008-04-28 09:15 --------- d-----w C:\Program Files\LimeWire
2008-04-24 17:50 --------- d-----w C:\Program Files\TmNationsForever
2008-04-22 22:04 6,656 ----a-w C:\WINDOWS\system32\haspvdd.dll
2008-04-22 22:04 47,616 ----a-w C:\WINDOWS\system32\drivers\Haspnt.sys
2008-04-22 22:03 --------- d-----w C:\Program Files\NaturalMotion
2008-04-22 19:08 --------- d-----w C:\Program Files\WIBUKEY
2008-04-22 19:08 --------- d-----w C:\Program Files\WIBU-SYSTEMS
2008-04-22 19:08 --------- d-----w C:\Program Files\Fichiers communs\ChaosGroup
2008-04-22 19:08 --------- d-----w C:\Program Files\Chaos Group
2008-04-22 19:05 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\combustion4
2008-04-22 15:38 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\dvdcss
2008-04-22 13:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-04-22 11:43 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Sony
2008-04-22 11:40 --------- d-----w C:\Program Files\Sony
2008-04-22 11:34 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Publish Providers
2008-04-22 11:28 --------- d-----w C:\Program Files\Microsoft SQL Server
2008-04-22 11:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sony
2008-04-22 11:26 --------- d-----w C:\Program Files\Vstplugins
2008-04-22 11:25 --------- d-----w C:\Program Files\Sony Setup
2008-04-22 11:23 --------- d-----w C:\Program Files\PROSONIQ PRODUCTS SOFTWARE
2008-04-22 11:16 --------- d-----w C:\Program Files\Ubisoft
2008-04-22 11:15 --------- d-----w C:\Program Files\AviSynth 2.5
2008-04-17 17:22 --------- d-----w C:\Program Files\GameShadow
2008-04-17 17:18 418,480 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2008-04-17 17:18 115,432 ----a-w C:\WINDOWS\system32\OpenAL32.dll
2008-04-17 17:18 --------- d-----w C:\Program Files\OpenAL
2008-04-17 17:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\InstallShield
2008-04-17 17:03 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-04-15 14:26 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Command & Conquer 3 Les guerres du Tiberium
2008-04-15 10:39 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2008-04-15 10:35 --------- d-----w C:\Program Files\Logitech
2008-04-14 17:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\PopCap
2008-04-13 19:55 --------- d-----w C:\Program Files\Google
2008-04-10 22:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\discreet
2008-04-10 22:16 --------- d-----w C:\Program Files\backburner 2
2008-04-10 22:15 --------- d-----w C:\Program Files\discreet
2008-04-10 19:46 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-04-10 19:45 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-04-10 19:34 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-04-08 12:28 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Apple Computer
2008-04-08 12:19 --------- d-----w C:\Program Files\QuickTime
2008-04-08 12:18 --------- d-----w C:\Program Files\Apple Software Update
2008-04-08 12:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2008-04-08 12:02 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-04-08 11:59 --------- d-----w C:\Program Files\Fichiers communs\Control Panels
2008-04-08 11:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\ALM
2008-04-08 11:22 --------- d-----w C:\Program Files\Bonjour
2008-04-08 11:16 --------- d-----w C:\Program Files\Fichiers communs\Macrovision Shared
2008-04-07 18:15 --------- d-----w C:\Program Files\Fichiers communs\Autodesk Shared
2008-04-07 18:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Autodesk
2008-04-07 18:09 --------- d-----w C:\Program Files\Autodesk
2008-04-06 22:52 --------- d-----w C:\Program Files\Futuremark
2008-04-06 20:05 --------- d-----w C:\Program Files\RivaTuner v2.06
2008-04-06 18:13 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-04-06 16:40 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Azureus
2008-04-06 16:15 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-04-06 16:15 --------- d-----w C:\Program Files\Azureus
2008-04-06 16:15 --------- d-----w C:\Program Files\AGEIA Technologies
2008-04-06 16:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Azureus
2008-04-04 16:00 22,328 ----a-w C:\Documents and Settings\FABIEN\Application Data\PnkBstrK.sys
2008-04-04 15:47 --------- d-----w C:\Program Files\Activision
2008-04-02 23:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
2008-04-02 21:14 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Ubisoft
2008-04-02 21:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ubisoft
2008-04-02 20:59 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\InstallShield
2008-04-02 20:54 --------- d-----w C:\Program Files\D-Tools
2008-04-02 16:57 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Talkback
2008-04-01 20:07 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-01 19:39 --------- d-----w C:\Program Files\MSXML 6.0
2008-04-01 19:29 --------- d-----w C:\Program Files\GameHouse
2008-04-01 19:28 --------- d-----w C:\Program Files\PopCap Games
2008-04-01 19:22 4,608 ----a-w C:\WINDOWS\system32\w95inf32.dll
2008-04-01 19:22 2,272 ----a-w C:\WINDOWS\system32\w95inf16.dll
2008-04-01 19:21 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys
2008-04-01 19:21 47,360 ----a-w C:\Documents and Settings\FABIEN\Application Data\pcouffin.sys
2008-04-01 19:21 --------- d-----w C:\Program Files\DVDFab Gold 3
2008-04-01 19:18 --------- d-----w C:\Program Files\Galleon 3D Screensaver
2008-04-01 19:18 --------- d-----w C:\Program Files\3Planesoft Screensaver Manager
2008-04-01 19:09 --------- d-----w C:\Program Files\Windows Live
2008-04-01 19:09 --------- d-----w C:\Program Files\Easy CD-DA Extractor 10
2008-04-01 19:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\WindowsLiveInstaller
2008-04-01 19:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-01 18:55 --------- d-----w C:\Documents and Settings\NetworkService\Application Data\Intel
2008-04-01 18:55 --------- d-----w C:\Documents and Settings\LogMeInRemoteUser\Application Data\Intel
2008-04-01 18:46 --------- d-----w C:\Program Files\Lavalys
2008-04-01 18:41 --------- d-----w C:\Program Files\Launch Manager
2008-04-01 18:39 --------- d-----w C:\Program Files\Realtek
2008-04-01 18:39 --------- d-----w C:\Program Files\Acer Inc
2008-04-01 18:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Broadcom
2008-04-01 18:03 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\Intel
2008-04-01 18:03 --------- d-----w C:\Documents and Settings\FABIEN\Application Data\Intel
2008-04-01 18:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\Intel
2005-05-13 15:12 217,073 --sha-r C:\WINDOWS\meta4.exe
2005-10-24 09:13 66,560 --sha-r C:\WINDOWS\MOTA113.exe
2005-10-13 19:27 422,400 --sha-r C:\WINDOWS\x2.64.exe
2005-10-07 17:14 308,224 --sha-r C:\WINDOWS\system32\avisynth.dll
2005-07-14 10:31 27,648 --sha-r C:\WINDOWS\system32\AVSredirect.dll
2005-06-26 13:32 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll
2005-06-21 20:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
2004-01-24 22:00 70,656 --sha-r C:\WINDOWS\system32\i420vfw.dll
2006-04-27 08:24 2,945,024 --sha-r C:\WINDOWS\system32\Smab.dll
2005-02-28 11:16 240,128 --sha-r C:\WINDOWS\system32\x.264.exe
2004-01-24 22:00 70,656 --sha-r C:\WINDOWS\system32\yv12vfw.dll
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3095D50F-F1BA-4BBC-A54D-819EEB7E0898}]
2008-05-22 23:21 28160 --a------ C:\WINDOWS\system32\efcYPJYq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{db4f683d-fb76-3940-b6ed-25ad476d829e}]
2008-05-19 15:55 439808 --a------ C:\WINDOWS\system32\{8e6efb15-2a7d-4c48-bdb2-704b0baeabe8}.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 18:09 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 16:25 94208]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-17 22:58 68856]
"Steam"="c:\program files\steam\steam.exe" [2008-05-14 19:39 1271032]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.2"="msime82.exe" []
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06 79224]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-01-19 08:43 7397376]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-01-19 08:43 86016]
"AzMixerSe | | |
![[:jean-chretien1:2]](/data/globaldata/usmilies/jeanchretien1-2.gif "[:jean-chretien1:2]")
: